gppagmpihgceldjoobjbjkcafgacljbd – pythonw.exe – Program Information

   December 26, 2022  Posted in Bleeping Computer


  • PYTHONW.EXE Information

    This is an undesirable program.

    This file has been identified as a program that is undesirable to have running on your computer. This consists of programs that are misleading, harmful, or undesirable.

    If the description states that it is a piece of malware, you should immediately run an antivirus and antispyware program. If that does not help, feel free to ask us for assistance in the forums.

  • Name

    gppagmpihgceldjoobjbjkcafgacljbd

  • Filename

    pythonw.exe

  • Command

    “%UserProfile%AppDataRoaminggppagmpihgceldjoobjbjkcafgacljbdpythonpythonw.exe” “%UserProfile%AppDataRoaminggppagmpihgceldjoobjbjkcafgacljbdml.py” –APPNAME=”gppagmpihgceldjoobjbjkcafgacljbd”

  • Description

    Added by the Mini-vini test true Chrome Adware Extension. This extension will inject Russian advertisements into web sites that you visit and redirect you to Russian websites when you click on links on web pages.

    Please note that pythonw.exe is normally a legitimate program, but in this case is being used by the adware for unwanted purposes.

  • File Location

    %UserProfile%AppDataRoaminggppagmpihgceldjoobjbjkcafgacljbd

  • Startup Type

    This startup entry is started automatically from a Run, RunOnce, RunServices, or RunServicesOnce entry in the registry.

  • HijackThis Category

  • Note

    %UserProfile% refers to the current user’s profile folder. By default, this is C:Documents and Settings for Windows 2000/XP, C:Users for Vista, and c:winntprofiles for Windows NT.

  • Removal Instructions

  • This entry has been requested 13,974 times.

Disclaimer

It is assumed that users are familiar with the operating system they are using and comfortable
with making the suggested changes. BleepingComputer.com will not be held responsible if
changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or
the Close Program window (CTRL+ALT+DEL) but a list of startup applications,
although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs
that are currently running – not necessarily at startup.
Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an “X” recommendation,
please check whether it’s in MSCONFIG or the registry first.
An example would be “svchost.exe” – which doesn’t appear in either under normal conditions but does via CTRL+ALT+DEL.
If in doubt, don’t do anything.



Source link