Exploited now
6 this week
Data breaches
Neogen
Is it safe?
check a site
Browser updates
Chrome 155.0.8059.40
Scam emails
examples
12,209
guides
5,447
members
Removal guides
Pop-ups & adware
Browser hijackers
Ransomware
Trojans & backdoors
Spyware & keyloggers
Rogue anti-spyware
Malware
Unwanted programs
Scams
Scam alerts
Fake alerts
News
Malware news
Data breaches
Exploited flaws
Browser security
Security
Browsers & vulnerabilities
General
Software
Files
System files
Spyware-related files
Log in
Exploited now
6 this week
Data breaches
Neogen
Is it safe?
check a site
Browser updates
Chrome 155.0.8059.40
Scam emails
examples
Now
06:11
tronzadorasnng.com: a Windows XWorm malware site that hides code in PNG pictures, and what to do if a script from it ran
04:32
rabbids.cc: a Windows infostealer download site that uses DLL sideloading, and what to do if you ran a file from it
03:07
crystalbranchtw.blog: a .blog address that served Mirai files for routers and cameras, and what to do if a device of yours may be infected
00:41
dstats.qzz.io: a Mirai botnet download address for routers and cameras, and what to do if a device of yours may be infected
9 Oct
delphiaonline.top: a Windows malware download site with PowerShell and JavaScript stubs, and what to do if one ran
9 Oct
uasputnik.com: a Windows ClickFix malware site serving .msi installers, and what to do if you ran one
9 Oct
reinigung-kosanke.de: a hacked WordPress site that served Formbook PowerShell scripts, and what to do
9 Oct
evacompltd.site: a Windows VIP Keylogger malware site (script files and PowerShell) and what to do if one ran
5,447 members
· read and write here
All members
Rubric
Files
Page
@files
Is this file or process safe? What it belongs to and when to worry.
System files
Spyware related
Application files
Everything
Posts
0000
30 30 30 2E 65 78 65 30
000.exe0
0008
30 30 2E 65 78 65 30 30
00.exe00
0010
30 2E 65 78 65 30 30 30
0.exe000
0018
2E 65 78 65 30 30 30 2E
.exe000.
0020
65 78 65 30 30 30 2E 65
exe000.e
0028
78 65 30 30 30 2E 65 78
xe000.ex
0030
65 30 30 30 2E 65 78 65
e000.exe
Executable · .exe
000.exe
File
Malicious
000.exe virus
000.exe is a malicious executable related to a virus that wipes files from the infected system 000.exe is malware that can be installed on Windows computers to perform malicious…
Julie Splinters ·
Dec 17, 2021
0000
53 69 74 6F 6F 6C 2E 65
Sitool.e
0008
78 65 53 69 74 6F 6F 6C
xeSitool
0010
2E 65 78 65 53 69 74 6F
.exeSito
0018
6F 6C 2E 65 78 65 53 69
ol.exeSi
0020
74 6F 6F 6C 2E 65 78 65
tool.exe
0028
53 69 74 6F 6F 6C 2E 65
Sitool.e
0030
78 65 53 69 74 6F 6F 6C
xeSitool
Executable · .exe
Sitool.exe
File
Malicious
Sitool.exe virus
Sitool.exe is malware that primarily spreads as software cracks The presence of the Sitool.exe file in your Windows computer means that you have been infected with a Trojan. It has
Linas Kiguolis ·
Oct 22, 2021
0000
77 73 63 6E 74 66 79 2E
wscntfy.
0008
65 78 65 77 73 63 6E 74
exewscnt
0010
66 79 2E 65 78 65 77 73
fy.exews
0018
63 6E 74 66 79 2E 65 78
cntfy.ex
0020
65 77 73 63 6E 74 66 79
ewscntfy
0028
2E 65 78 65 77 73 63 6E
.exewscn
0030
74 66 79 2E 65 78 65 77
tfy.exew
Executable · .exe
wscntfy.exe
File
Not rated
wscntfy.exe
wscntfy.exe is the executable file of Windows XP Service Pack 2. This application is also known as Windows Security Center Notify Application and is responsible for displaying the…
Linas Kiguolis ·
May 20, 2021
0000
4E 76 4D 63 54 72 61 79
NvMcTray
0008
2E 64 6C 6C 4E 76 4D 63
.dllNvMc
0010
54 72 61 79 2E 64 6C 6C
Tray.dll
0018
4E 76 4D 63 54 72 61 79
NvMcTray
0020
2E 64 6C 6C 4E 76 4D 63
.dllNvMc
0028
54 72 61 79 2E 64 6C 6C
Tray.dll
0030
4E 76 4D 63 54 72 61 79
NvMcTray
Library · .dll
NvMcTray.dll
File
Not rated
NvMcTray.dll
NvMcTray.dll is a part of Nvidia-related application, although might sometimes be related to a Trojan infection NvMcTray.dll is a Dynamic Link Library file that belongs to…
Lucia Danes ·
May 11, 2021
0000
69 65 68 65 6C 70 65 72
iehelper
0008
2E 64 6C 6C 69 65 68 65
.dlliehe
0010
6C 70 65 72 2E 64 6C 6C
lper.dll
0018
69 65 68 65 6C 70 65 72
iehelper
0020
2E 64 6C 6C 69 65 68 65
.dlliehe
0028
6C 70 65 72 2E 64 6C 6C
lper.dll
0030
69 65 68 65 6C 70 65 72
iehelper
Library · .dll
iehelper.dll
File
Not rated
iehelper.dll
iehelper.dll - is a Browser Helper Object that starts each time you launch Internet Explorer iehelper.dll is a file that might be running in the background when the Internet…
Lucia Danes ·
May 11, 2021
0000
67 75 69 2E 65 78 65 67
gui.exeg
0008
75 69 2E 65 78 65 67 75
ui.exegu
0010
69 2E 65 78 65 67 75 69
i.exegui
0018
2E 65 78 65 67 75 69 2E
.exegui.
0020
65 78 65 67 75 69 2E 65
exegui.e
0028
78 65 67 75 69 2E 65 78
xegui.ex
0030
65 67 75 69 2E 65 78 65
egui.exe
Executable · .exe
gui.exe
File
Suspicious
gui.exe
Jake Doevan ·
May 7, 2021
0000
62 69 70 72 65 70 2E 65
biprep.e
0008
78 65 62 69 70 72 65 70
xebiprep
0010
2E 65 78 65 62 69 70 72
.exebipr
0018
65 70 2E 65 78 65 62 69
ep.exebi
0020
70 72 65 70 2E 65 78 65
prep.exe
0028
62 69 70 72 65 70 2E 65
biprep.e
0030
78 65 62 69 70 72 65 70
xebiprep
Executable · .exe
biprep.exe
File
Suspicious
biprep.exe
Julie Splinters ·
May 7, 2021
0000
57 69 6E 64 6C 6C 33 32
Windll32
0008
2E 65 78 65 57 69 6E 64
.exeWind
0010
6C 6C 33 32 2E 65 78 65
ll32.exe
0018
57 69 6E 64 6C 6C 33 32
Windll32
0020
2E 65 78 65 57 69 6E 64
.exeWind
0028
6C 6C 33 32 2E 65 78 65
ll32.exe
0030
57 69 6E 64 6C 6C 33 32
Windll32
Executable · .exe
Windll32.exe
File
Suspicious
Windll32.exe
Gabriel E. Hall ·
Apr 30, 2021
0000
76 64 39 35 32 33 34 32
vd952342
0008
2E 62 64 76 64 39 35 32
.bdvd952
0010
33 34 32 2E 62 64 76 64
342.bdvd
0018
39 35 32 33 34 32 2E 62
952342.b
0020
64 76 64 39 35 32 33 34
dvd95234
0028
32 2E 62 64 76 64 39 35
2.bdvd95
0030
32 33 34 32 2E 62 64 76
2342.bdv
File · .bd
vd952342.bd
File
Suspicious
vd952342.bd
2-Spyware Editorial Team ·
Apr 30, 2021
0000
73 79 73 68 6F 73 74 2E
syshost.
0008
65 78 65 73 79 73 68 6F
exesysho
0010
73 74 2E 65 78 65 73 79
st.exesy
0018
73 68 6F 73 74 2E 65 78
shost.ex
0020
65 73 79 73 68 6F 73 74
esyshost
0028
2E 65 78 65 73 79 73 68
.exesysh
0030
6F 73 74 2E 65 78 65 73
ost.exes
Executable · .exe
syshost.exe
File
Suspicious
syshost.exe
syshost.exe is an executable file that is responsible for launching applications or sometimes cyber threats syshost.exe is the file that can be noticed running in the background…
Jake Doevan ·
Apr 30, 2021
0000
4E 48 65 6C 70 65 72 2E
NHelper.
0008
64 6C 6C 4E 48 65 6C 70
dllNHelp
0010
65 72 2E 64 6C 6C 4E 48
er.dllNH
0018
65 6C 70 65 72 2E 64 6C
elper.dl
0020
6C 4E 48 65 6C 70 65 72
lNHelper
0028
2E 64 6C 6C 4E 48 65 6C
.dllNHel
0030
70 65 72 2E 64 6C 6C 4E
per.dllN
Library · .dll
NHelper.dll
File
Suspicious
NHelper.dll
NHelper.dll is a dynamically linked library NHelper.dll is the piece that can be found on the machine and people question the purpose of it. In simple phrases, it is an
Lucia Danes ·
Apr 30, 2021
0000
6E 65 77 64 6F 74 32 2E
newdot2.
0008
64 6C 6C 6E 65 77 64 6F
dllnewdo
0010
74 32 2E 64 6C 6C 6E 65
t2.dllne
0018
77 64 6F 74 32 2E 64 6C
wdot2.dl
0020
6C 6E 65 77 64 6F 74 32
lnewdot2
0028
2E 64 6C 6C 6E 65 77 64
.dllnewd
0030
6F 74 32 2E 64 6C 6C 6E
ot2.dlln
Library · .dll
newdot2.dll
File
Malicious
newdot2.dll
newdot2.dll is a potentially malicious file, which doesn't belong to Windows newdot2.dll is the file that belongs to Internet Explorer Add-on, which is used to generate revenue,…
Jake Doevan ·
Apr 30, 2021
0000
4D 59 42 41 52 2E 44 4C
MYBAR.DL
0008
4C 4D 59 42 41 52 2E 44
LMYBAR.D
0010
4C 4C 4D 59 42 41 52 2E
LLMYBAR.
0018
44 4C 4C 4D 59 42 41 52
DLLMYBAR
0020
2E 44 4C 4C 4D 59 42 41
.DLLMYBA
0028
52 2E 44 4C 4C 4D 59 42
R.DLLMYB
0030
41 52 2E 44 4C 4C 4D 59
AR.DLLMY
Library · .dll
MYBAR.DLL
File
Suspicious
MYBAR.DLL
MYBAR.DLL is a library file that is responsible for implementing main parasite functions and running its destructive payload MYBAR.DLL file cannot run by itself and therefore…
Alice Woods ·
Apr 30, 2021
0000
4D 57 53 4F 45 4D 4F 4E
MWSOEMON
0008
2E 45 58 45 4D 57 53 4F
.EXEMWSO
0010
45 4D 4F 4E 2E 45 58 45
EMON.EXE
0018
4D 57 53 4F 45 4D 4F 4E
MWSOEMON
0020
2E 45 58 45 4D 57 53 4F
.EXEMWSO
0028
45 4D 4F 4E 2E 45 58 45
EMON.EXE
0030
4D 57 53 4F 45 4D 4F 4E
MWSOEMON
Executable · .exe
MWSOEMON.EXE
File
Suspicious
MWSOEMON.EXE
mwsoemon.exe is the file included in WebSearch Toolbar, which is classified as adware MWSOEMON.EXE is the piece related to the unwanted programs that can affect the machine in a…
Olivia Morelli ·
Apr 30, 2021
0000
4D 53 47 53 52 56 33 32
MSGSRV32
0008
2E 45 58 45 4D 53 47 53
.EXEMSGS
0010
52 56 33 32 2E 45 58 45
RV32.EXE
0018
4D 53 47 53 52 56 33 32
MSGSRV32
0020
2E 45 58 45 4D 53 47 53
.EXEMSGS
0028
52 56 33 32 2E 45 58 45
RV32.EXE
0030
4D 53 47 53 52 56 33 32
MSGSRV32
Executable · .exe
MSGSRV32.EXE
File
Suspicious
MSGSRV32.EXE
Jake Doevan ·
Apr 30, 2021
0000
68 70 67 73 32 77 6E 64
hpgs2wnd
0008
2E 65 78 65 68 70 67 73
.exehpgs
0010
32 77 6E 64 2E 65 78 65
2wnd.exe
0018
68 70 67 73 32 77 6E 64
hpgs2wnd
0020
2E 65 78 65 68 70 67 73
.exehpgs
0028
32 77 6E 64 2E 65 78 65
2wnd.exe
0030
68 70 67 73 32 77 6E 64
hpgs2wnd
Executable · .exe
hpgs2wnd.exe
File
Not rated
hpgs2wnd.exe
Olivia Morelli ·
Apr 30, 2021
0000
65 7A 53 50 5F 50 78 2E
ezSP_Px.
0008
65 78 65 65 7A 53 50 5F
exeezSP_
0010
50 78 2E 65 78 65 65 7A
Px.exeez
0018
53 50 5F 50 78 2E 65 78
SP_Px.ex
0020
65 65 7A 53 50 5F 50 78
eezSP_Px
0028
2E 65 78 65 65 7A 53 50
.exeezSP
0030
5F 50 78 2E 65 78 65 65
_Px.exee
Executable · .exe
ezSP_Px.exe
File
Not rated
ezSP_Px.exe
Jake Doevan ·
Apr 30, 2021
0000
6D 6D 74 61 73 6B 2E 65
mmtask.e
0008
78 65 6D 6D 74 61 73 6B
xemmtask
0010
2E 65 78 65 6D 6D 74 61
.exemmta
0018
73 6B 2E 65 78 65 6D 6D
sk.exemm
0020
74 61 73 6B 2E 65 78 65
task.exe
0028
6D 6D 74 61 73 6B 2E 65
mmtask.e
0030
78 65 6D 6D 74 61 73 6B
xemmtask
Executable · .exe
mmtask.exe
File
Not rated
mmtask.exe
2-Spyware Editorial Team ·
Apr 29, 2021
0000
53 72 6D 63 6C 65 61 6E
Srmclean
0008
2E 65 78 65 53 72 6D 63
.exeSrmc
0010
6C 65 61 6E 2E 65 78 65
lean.exe
0018
53 72 6D 63 6C 65 61 6E
Srmclean
0020
2E 65 78 65 53 72 6D 63
.exeSrmc
0028
6C 65 61 6E 2E 65 78 65
lean.exe
0030
53 72 6D 63 6C 65 61 6E
Srmclean
Executable · .exe
Srmclean.exe
File
Not rated
Srmclean.exe
Srmclean.exe is a file most commonly installed by SoundMax Integrated Digital Audio Srmclean.exe is an executable file that could be a part of the process (SoundMAX Remove Clean)…
2-Spyware Editorial Team ·
Apr 29, 2021
0000
53 75 70 70 6F 72 74 2E
Support.
0008
65 78 65 53 75 70 70 6F
exeSuppo
0010
72 74 2E 65 78 65 53 75
rt.exeSu
0018
70 70 6F 72 74 2E 65 78
pport.ex
0020
65 53 75 70 70 6F 72 74
eSupport
0028
2E 65 78 65 53 75 70 70
.exeSupp
0030
6F 72 74 2E 65 78 65 53
ort.exeS
Executable · .exe
Support.exe
File
Suspicious
Support.exe
Support.exe - a process you should carefully examine Support.exe is an executable file or a background process that could be found running in the background of a Windows machine.…
2-Spyware Editorial Team ·
Apr 29, 2021
0000
4D 44 4D 2E 65 78 65 4D
MDM.exeM
0008
44 4D 2E 65 78 65 4D 44
DM.exeMD
0010
4D 2E 65 78 65 4D 44 4D
M.exeMDM
0018
2E 65 78 65 4D 44 4D 2E
.exeMDM.
0020
65 78 65 4D 44 4D 2E 65
exeMDM.e
0028
78 65 4D 44 4D 2E 65 78
xeMDM.ex
0030
65 4D 44 4D 2E 65 78 65
eMDM.exe
Executable · .exe
MDM.exe
File
Not rated
MDM.exe
MDM.exe is the process that can be related to shady programs mdm.exe is a system process - Machine Debug Manager. The file used by developers. It should be located in
2-Spyware Editorial Team ·
Apr 29, 2021
0000
6C 65 78 70 70 73 2E 65
lexpps.e
0008
78 65 6C 65 78 70 70 73
xelexpps
0010
2E 65 78 65 6C 65 78 70
.exelexp
0018
70 73 2E 65 78 65 6C 65
ps.exele
0020
78 70 70 73 2E 65 78 65
xpps.exe
0028
6C 65 78 70 70 73 2E 65
lexpps.e
0030
78 65 6C 65 78 70 70 73
xelexpps
Executable · .exe
lexpps.exe
File
Not rated
lexpps.exe
lexpps.exe is the file that usually is launching processes and triggering applications lexpps.exe is the process launching piece that normally should be related to printing or…
Alice Woods ·
Apr 29, 2021
0000
49 50 4D 6F 6E 33 32 2E
IPMon32.
0008
65 78 65 49 50 4D 6F 6E
exeIPMon
0010
33 32 2E 65 78 65 49 50
32.exeIP
0018
4D 6F 6E 33 32 2E 65 78
Mon32.ex
0020
65 49 50 4D 6F 6E 33 32
eIPMon32
0028
2E 65 78 65 49 50 4D 6F
.exeIPMo
0030
6E 33 32 2E 65 78 65 49
n32.exeI
Executable · .exe
IPMon32.exe
File
Suspicious
IPMon32.exe
IPMon32.exe is the status monitoring tool executable IPMon32.exe can be related to Microsoft software and even misused by malicious software. Threat actors rely on processes that…
Olivia Morelli ·
Apr 29, 2021
0000
64 72 73 6D 61 72 74 6C
drsmartl
0008
6F 61 64 2E 65 78 65 64
oad.exed
0010
72 73 6D 61 72 74 6C 6F
rsmartlo
0018
61 64 2E 65 78 65 64 72
ad.exedr
0020
73 6D 61 72 74 6C 6F 61
smartloa
0028
64 2E 65 78 65 64 72 73
d.exedrs
0030
6D 61 72 74 6C 6F 61 64
martload
Executable · .exe
drsmartload.exe
File
Suspicious
drsmartload.exe
Julie Splinters ·
Apr 29, 2021
0000
44 6C 6F 61 64 2E 65 78
Dload.ex
0008
65 44 6C 6F 61 64 2E 65
eDload.e
0010
78 65 44 6C 6F 61 64 2E
xeDload.
0018
65 78 65 44 6C 6F 61 64
exeDload
0020
2E 65 78 65 44 6C 6F 61
.exeDloa
0028
64 2E 65 78 65 44 6C 6F
d.exeDlo
0030
61 64 2E 65 78 65 44 6C
ad.exeDl
Executable · .exe
Dload.exe
File
Suspicious
Dload.exe
Alice Woods ·
Apr 28, 2021
0000
6D 70 73 2E 65 78 65 6D
mps.exem
0008
70 73 2E 65 78 65 6D 70
ps.exemp
0010
73 2E 65 78 65 6D 70 73
s.exemps
0018
2E 65 78 65 6D 70 73 2E
.exemps.
0020
65 78 65 6D 70 73 2E 65
exemps.e
0028
78 65 6D 70 73 2E 65 78
xemps.ex
0030
65 6D 70 73 2E 65 78 65
emps.exe
Executable · .exe
mps.exe
File
Suspicious
mps.exe
Lucia Danes ·
Apr 28, 2021
0000
43 6F 6E 66 69 67 75 72
Configur
0008
61 74 69 6F 6E 20 55 74
ation.Ut
0010
69 6C 69 74 79 2E 65 78
ility.ex
0018
65 43 6F 6E 66 69 67 75
eConfigu
0020
72 61 74 69 6F 6E 20 55
ration.U
0028
74 69 6C 69 74 79 2E 65
tility.e
0030
78 65 43 6F 6E 66 69 67
xeConfig
Executable · .exe
Configuration Utility.exe
File
Suspicious
Configuration Utility.exe
Jake Doevan ·
Apr 28, 2021
Loading…
No more articles
Could not load, try again
Try again
1
2
3
…
9
Next »
5,447 members already here
Reading, writing, commenting and voting. 0 verified · 172 joined this year
All members
Join
News
Members
Publish
Me
