12,194guides5,441members
8 Octporterneuman.mx: PowerShell and JavaScript files tied to the AveMaria remote access trojan, and what to do8 Octdonutclientsmods.xyz: fake DonutSMP Minecraft mods tagged SilentNet, and what to do if you ran one8 Octsqpengg.com: a server handing out crypted PowerShell scripts, and what to do if one ran on your PC8 Octdonutsmpcheats.org: fake Minecraft cheat mods with the SilentNet stealer, and what to do if you installed one8 Octmaciejbi.hosting24.pl: a hosting subdomain that served Remcos scripts and a stego picture, and what to do if your PC fetched them8 Oct87130921-60-20220830152356.webstarterz.com: an open folder serving Formbook and XWorm PowerShell scripts, and what to do if one ran8 Octficus.in: picture files hiding the Remcos remote access trojan, and what to do if a script fetched them8 OctOpenDrive virus: why web.opendrive.com shows up in malware alerts, and what to do if a file from it installed Remcos
A
Rubric

Application files

Page@application-files

Files of installed programs: what they belong to and whether they are safe.

EverythingPosts
FileNot rated

vulkaninfo.exe

Vulkaninfo.exe is a safe file that helps to enhance the quality of computer games Vulkaninfo.exe is one of the components of NVIDIA, Intel, and AMD drivers. It is responsible forLucia Danes ·
FileNot rated

Vulkaninfo32.exe

Vulkaninfo32.exe file can also indicate malware Vulkaninfo32.exe Nvidia is a legitimate additional component of graphics applications used by Vulkan STD. You can find it in…2-Spyware Editorial Team ·
FileNot rated

igfxpers.exe

Igfxpers.exe might use high CPU power Igfxpers.exe persistence is a legitimate program which refers to Intel Graphics Resolution Persistence Module and provides additional…Jake Doevan ·
FileNot rated

arp.exe

Arp.exe stands for Address Resolution Protocol command. The latter serves for transferring Internet layer to link layer addresses. The file is essential in tracking user's mac…Jake Doevan ·
FileNot rated

prefs.js

The reason why Prefs.js is on your system Prefs.js is a file that stores Firefox user settings and options. This record is normally stored in %APPDATA%\Mozilla\Firefox\Profiles\…Jake Doevan ·
FileNot rated

wextract.exe

Jake Doevan ·
FileNot rated

groovemonitor.exe

2-Spyware Editorial Team ·
FileNot rated

Riched20.dll

Olivia Morelli ·
FileNot rated

player.exe

Jake Doevan ·
FileNot rated

dwwin.exe

dwwin.exe is a legitimate file, which belongs to the Microsoft. This executable takes a part in its Dr. Watson error reporting tool, which collects information about occurred…Jake Doevan ·
FileNot rated

p_981116.exe

p_981116.exe is a legitimate process of DirectX 6.0 that acts as an executable file in Microsoft Windows operating systems. This application starts as soon as computer starts.…Jake Doevan ·
FileNot rated

hidfind.exe

hidfind.exe is a legitimate process which is important for secure and stable computer's functionality. This process is an Alps Pointing Device Driver component known to be…Olivia Morelli ·
FileNot rated

irsetup.exe

The file IRSETUP.EXE is not adware. It is actually part of the extremely common Setup Factory 6.0 installer builder product by Indigo Rose Software (www.indigorose.com). It is…Lucia Danes ·
123
5,441 members already hereReading, writing, commenting and voting. 0 verified · 166 joined this year
All membersJoin