12,194guides5,441members
8 Octporterneuman.mx: PowerShell and JavaScript files tied to the AveMaria remote access trojan, and what to do8 Octdonutclientsmods.xyz: fake DonutSMP Minecraft mods tagged SilentNet, and what to do if you ran one8 Octsqpengg.com: a server handing out crypted PowerShell scripts, and what to do if one ran on your PC8 Octdonutsmpcheats.org: fake Minecraft cheat mods with the SilentNet stealer, and what to do if you installed one8 Octmaciejbi.hosting24.pl: a hosting subdomain that served Remcos scripts and a stego picture, and what to do if your PC fetched them8 Oct87130921-60-20220830152356.webstarterz.com: an open folder serving Formbook and XWorm PowerShell scripts, and what to do if one ran8 Octficus.in: picture files hiding the Remcos remote access trojan, and what to do if a script fetched them8 OctOpenDrive virus: why web.opendrive.com shows up in malware alerts, and what to do if a file from it installed Remcos
5,441 members · read and write hereAll members
Rubric

System files

Page@system-files· 5 followers

Windows system files and processes: what they are and when to worry.

EverythingPosts
FileNot rated

hpgs2wnd.exe

hpgs2wnd.exe is the executable file related to HP products hpgs2wnd.exe s a process that people may notice running in the background, so many questions are raised. This is a…Olivia Morelli ·
FileNot rated

MDM.exe

MDM.exe is the process that can be related to shady programs mdm.exe is a system process - Machine Debug Manager. The file used by developers. It should be located in2-Spyware Editorial Team ·
FileNot rated

lexpps.exe

lexpps.exe is the file that usually is launching processes and triggering applications lexpps.exe is the process launching piece that normally should be related to printing or…Alice Woods ·
FileNot rated

lights.exe

File lights.exe is related to Lights system utility - a part of Microsoft Windows operating system. Lights appears as a small icon in the system tray and shows the modemJake Doevan ·
FileNot rated

cisvc.exe

cisvc.exe is a legitimate process, which represents the Microsoft Index Service Helper tool cisvc.exe is the file used for monitoring the performance of the Microsoft Indexing…2-Spyware Editorial Team ·
FileNot rated

wucrtupd.exe

Jake Doevan ·
FileNot rated

services.exe

Jake Doevan ·
FileClean

imjpmig.exe

Jake Doevan ·
FileNot rated

svchost.exe

Jake Doevan ·
FileNot rated

javaw.exe

Javaw.exe is a legitimate file related to Java software Javaw.exe is a legitimate executable used by Java Runtime software, published by Sun Microsystems.[ref en-1] Therefore, do…Linas Kiguolis ·
FileNot rated

securityhealthsystray.exe

Securityhealthsystray.exe is the process file related to the Windows operating system that can be cloned and used as malware Securityhealthsystray.exe is an executable file that…Julie Splinters ·
FileNot rated

gdipfontcachev1.dat

gdipfontcachev1.dat - a file on the system that might indicate computer infection gdipfontcachev1.dat is a generic data file that stores particular information related to a user…Olivia Morelli ·
FileNot rated

Winrmsrv.exe

Winrmsrv.exe – a Microsoft created legitimate file which cybercriminals might camouflage malware as Winrmsrv.exe is a background process that users might find running on their…Olivia Morelli ·
FileNot rated

rundll32.exe

Rundll32.exe is a legitimate Windows file used for DLL library distribution, although its name is also used by scammers Rundll32.exe is a legitimate file that runs in the…Gabriel E. Hall ·
FileNot rated

MsMpEng.exe

Jake Doevan ·
FileNot rated

msiexec.exe

Jake Doevan ·
FileNot rated

consent.exe

Jake Doevan ·
FileNot rated

fontdrvhost.exe

Alice Woods ·
FileNot rated

hkcmd.exe

Hkcmd.exe is an executable file that gets installed together with Intel's driver chipsets Hkcmd.exe a background process which belongs to machines hat use Intel graphics cards…Jake Doevan ·
FileClean

Powershell.exe

Powershell.exe is the executable file that belongs to Microsoft Windows and does not pose any danger to the device Powershell.exe is the software component and task automation…Olivia Morelli ·
FileNot rated

Explorer.exe

Explorer.exe is a legitimate Windows process responsible for file management UI Explorer.exe is an executable file for the process called Windows Explorer and can be found on all…Jake Doevan ·
FileNot rated

7.hta

7.hta - a file that raises concerns for computer users 7.hta is a file that is associated with TeamViewer app. Some security programs detect it as potentially harmful; however,…Jake Doevan ·
FileNot rated

wscript.exe

wscript.exe - an executable which might hide malware if not located in C:\Windows\System32 or C:\Windows Wscript.exe, also known as Windows Script Host, appears to be a Microsoft…Olivia Morelli ·
FileNot rated

conhost.exe

Jake Doevan ·
FileNot rated

ctfmon.exe

Jake Doevan ·
FileNot rated

Dwm.exe

2-Spyware Editorial Team ·
FileNot rated

Browser_broker.exe

Jake Doevan ·
12
5,441 members already hereReading, writing, commenting and voting. 0 verified · 166 joined this year
All membersJoin