What is wscript exe and how to remove it

wscript.exe - Windows-based script host by Microsoft

What is wscript.exe?

wscript.exe is a Windows service that allows you to execute VBScript files. Normally, it is not dangerous, but if a malicious script is downloaded and executed it will appear as if wscript.exe is the culprit, when it is really a separate .vbs file. Antivirus programs usually detect C:WindowsSystem32wscript.exe as the culprit, however, its not necessarily infected. It may be that your computer is infected with Worms and Trojans that attempt to execute malicious .vbs scripts. Most users, get these malware infections from SD cards, pen drives and of course infected websites. Malicious files may change Windows registry, establish connection to remove servers controlled by cyber crooks and download additional malware modules. Other issues: cant open Regedit, certain Windows options are missing, cant acces Contol Panel. Malware may also block anti-malware and Windows system utilities. You should not delete wscript.exe manually, many Windows services require it and our computer may not function properly if it cannot be found. But you should use recommend anti-malware software to remove wscript.exe related malware from your computer.

File name: wscript.exe
Publisher: Microsoft
File Location Windows XP: C:WindowsSystem32wscript.exe
File Location Windows 7: C:WindowsSystem32wscript.exe
Startup file: SYSTEMCurrentControlSetServices Windows-based script host

Read More..

YontooDesktop exe Application Error What is it

YontooDesktop.exe - Application Error is a Windows error message you will get if you try to install Yontoo adware that requires the .NET Framework to run, but your computer doesnt have it. Windows will give you the following explanation and error code: The application failed to initialize properly (0xc0000135).

You may get this error message every time you start Windows. To fix it, simply download and install .NET Framework from Microsoft. The question, however, is whether or not you should install Yontoo? It may display advertisements on your computer and change your default search engine. YontooDesktop.exe belongs to Yontoo LLC or Yontoo Layers Runtime. Most of its products are blocked by ESET, Kaspersky and other well known antivirus companies because they can monitor your activity and collect browsing habits. If you didnt install Yontoo but still get YontooDesktop.exe or similar error messages you should scan your computer with recommend anti-malware software. Very often this application comes bundled with other software, so it may be already installed on your computer without your consent and knowledge.

File Location: %APPDATA%Yontooyontoodesktop.exe

Read More..

What is eGdpSvc exe and how to remove it

eGdpSvc.exe - System eSafe update service by eSafe Security Co., Ltd.

What is eGdpSvc.exe?

eGdpSvc.exe is a part of eSafe Security Control software. The file has a valid certificate issued to Banyan Tree Technology Limited by GlobalSign. eGdpSvc.exe runs as Windows service with extensive privileges which means that it may connect to remote servers and download additional files onto your computer in the background without your permission and knowledge. Its not essential for Windows and may cause problems. Besides, most of the time, this application is bundled with adware and potentially unwanted software. It may install adware and browser hijackers on your computer, for example Qvo6. Since egdpsvc.exe runs as a background Windows service it may slow down your computer a bit. Even though, software name looks reliable, this application is potentially unwanted. I recommend you to remove eGdpSvc.exe from your computer. You should scan your computer with recommended anti-malware software as well.

File name: eGdpSvc.exe
Publisher: eSafe Security Co., Ltd
File Location Windows XP: C:Documents and SettingsAll UsersApplication DataeSafeeGdpSvc.exe
File Location Windows 7: C:ProgramDataeSafeeGdpSvc.exe
Startup file: SYSTEMCurrentControlSetServices eSafeSvc

Read More..

What is ibsvc exe and how to remove it

ibsvc.exe - IBUpdaterService

What is ibsvc.exe?

ibsvc.exe is not essential for Windows and may cause problems. Its a part of InstallBrain Installer software (detected by antivirus companies as Adware.InstallBrain and even Trojan downloader) that is used to install third party applications, for example Yontoo, PC Performer or Babylon. Usually, its neither essential nor dangerous but it may cause high CPU usage and Windows errors. Since ibsvc.exe is an update service, its configured to run automatically when Windows starts. It is very often classified either as adware or potentially unwanted software. It can also download and install additional malware onto your computer. Last, but not least, if you have it on your computer then theres a good chance that it came bundled with spyware. ibsvc.exe is not a Windows file and it may slow down your computer, thats why I recommend removing it.

File name: ibsvc.exe
Publisher: InstallBrain Installer
File Location: C:Documents and SettingsAll UsersApplication DataIBUpdaterServiceibsvc.exe
Program Path: C:ProgramDataIBUpdaterServiceibsvc.exe

Read More..

What is Macromedia exe and how to remove it

Macromedia.exe - CPU miner for Bitcoin

What is Macromedia.exe?

Macromedia.exe is a part of multi-threaded CPU miner for Bitcoin crypto-currency system. Very often this application is eating up 70% or even more of the CPU. Its not essential for Windows and may cause problems. If you knowingly installed this Bitcoin miner on your computer then theres probably nothing to worry about. Unless you downloaded a rogue Bitcoin miner from a shady website. Please note that genuine miner might be flagged as malware as well. Very often, scammers are using this application to earn quick bucks by monetizing botnets. They drop the main mining modules Macromedia.exe and shell.exe on infected computers and start mining. They usually set low mining speed, so that the Macromedia.exe*32 process only uses unused CPU cycles. Infected users quickly notice that their computers became very slow. This is a sign that your computer is infected and not only with RiskTool.Win32.BitCoinMiner or PUP.BitCoinMiner but also with Trojan downloaders and spyware. I recommend you to remove Macromedia.exe from your computer and run a full system scan with recommended anti-malware software.

File name: Macromedia.exe
Publisher: Bitcoin miner
File Location Windows XP: %APPDATA%WindowsLogonSMacromedia.exe
File Location Windows 7: %APPDATA%RoamingWindowsLogonSMacromedia.exe
Startup file: HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun Macromedia.exe

Read More..