Did you find something called Maxiget Software Manger on you machine and wonder where it came from? The Maxiget Software Manger is a desktop application showing a web page named “Softsonic” that promotes software downloads and shows, what to appears to be Google Adsense Ads:

If you have Maxiget Software Manger installed on your computer you may also see a process called MaxigetUpdater.exe running in the Windows Task Manager.

So, how did Maxiget Software Manger install on you computer? It could have been installed as a bundled offer, that was displayed when installing some other software on your machine. I found Maxiget while installing software, and here’s how Maxiget was disclosed:

As usual when I find some bundled software, I upload it to VirusTotal to see what the anti-virus programs says about the file. AVG was the only anti-virus scanner that detected Maxiget, under the Generic.E22 detection name:

If you would like to remove the Maxiget Software Manger, you can do so by selecting the MaxigetUpdater.exe file in FreeFixer:

Or by using the Uninstall programs dialog:

Hope this helped you figure out what Maxiget is.

Did you also get Maxiget as a bundled software offer?

Just a quick post about a piece of software called One More Game before going back to programming on the FreeFixer tool. I’m working on a feature that scans Google Chrome Extensions.

Anyway, what’s One More Game? OMG is a piece of software that sits in the system tray and pops up notification about “new and exclusive offers and gaming tips“.

You will also see a process called omg.exe running in the Windows Task Manager.

Did One More Game pop up unexpectedly on your machine? If so, One More Game might have been bundled in another download’s installer. That’s where I found it. Here’s how One More Game was disclosed in the installer of “FLV Player”:

So, what does the anti-virus programs say about the omg.exe file. Not much actually, none of the anti-virus detects OMG, except Symantec that reports omg.exe as WS.Reputation.1:

If you’d like to remove One More Game (OMG) you can do some from the “Uninstall Programs” dialog in the Windows Control Panel. There should be an entry named “One More Game” which you can right-click and select Uninstall.

Any idea how One More Game installed on your computer? Please share by posting a comment.

Just a quick post on a program called SkypEmoticons. I found this bundled with another software download. If SkypEmoticons showed up unexpectedly on your machine, you may also have installed it as a bundled offer.

I uploaded the main file of SkypeEmoticons, SE.exe, to VirusTotal to see if the anti-virus scanners reported it. Only one of the anti-virus tools detected the SE.exe file, and that was Tencent, which reported the SE.exe file as Win32.Trojan.Falsesign.

If you’d like to uninstall SkypEmoticons, you can simply check the SE.exe file for removal in FreeFixer:

Or uninstall it from the Add/Remove programs dialog:

Did you also find SkypEmoticons on your machine? Any idea how it was installed?

Another find today. Stumbled on a file called UptUpdater.exe, also bundled by an unofficial Google Chrome download. I first spotted the UptUpdater.exe file running in the Windows Task Manager, but after a while UptUpdater.exe showed its GUI, where it claimed to install something called ServiceChecker:

Anyway, as usual when I find some new file, I upload them to VirusTotal to see what the anti-virus scanners says about the file. Turns out UptUpdater.exe is detected by a file of the anti-virus scanners, under names such as Adware.Win32.Pirrit, Adware.Downware and Pirrit.

If you’d like to remove Pirrit from your machine, you can do so by selecting the UptUpdater.exe file in FreeFixer:

Did you also find the ServiceChecker/Pirrit/UptUpdater.exe on your computer? Any idea how it was installed?

Just a quick note on a file called KernelScreenshotWin32.exe that I found earlier today. The file uses typical malware behaviour, that is, it has no version information, no digital signature, no entry in the Add/Remove programs dialog, runs in an unusual folder, called C:\Windows\SysWOW64\KernelScreenshotWin32\ instead of c:\Program Files, bundled with a file signed by Smart Secure Software, no visible GUI, runs in the background, etc, etc.

However, when I uploaded the file to VirusTotal, none of the 50+ anti-virus programs detected it. Maybe I’m incorrectly calling this malware? It will be interesting to see if some of the scanners start to pick up the KernelScreenshotWin32.exe file in the future.

Anyway, if you’d like to remove the KernelScreenshotWin32.exe file you can do so with FreeFixer. Just select the KernelScreenshotWin32.exe process and service:

Did you also find KernelScreenshotWin32.exe on your machine? Any idea how it was installed? Please share by posting a comment.