Win Magician, Potentially Superfluous Software.
Some legitimate programs like Win Magician can be called superfluous. They are not necessarily necessary for the functioning of the system and sometimes even unwanted.
More specifically, the Win Magician program falls into the category of software that can optimize your system. It can be installed via downloading repackaged freeware.
It displays alerts on system quality and the presence of malware and offers the purchase of a paid version to resolve problems.
It is a clone of IObyte System Care, Universal PC Care, XbitsSpeedupPro, XtronCleanupPro, -Mechanic, Power-Cleaner
Some security solutions, such as Malwarebytes Antimalwares, classify this software as Potentially Unwanted Optional Software (PUP/LPI).
This program is classified as Potentially Unnecessary Software (LPS). It installs as a program and/or as a browser extension. It can start automatically from the Registry via a "Run" key, a service or a scheduled task. It may launch when you start your browser after changing its settings. Sometimes the launch is done silently, that is to say it works in the background. The virus analysis of this software does not show any malware detection.
These are mostly legitimate programs that may not be necessary for your system to function properly. The multiplication of programs launched at system startup can cause delays in the execution of ordinary system tasks but also when browsing the Internet. Note that some programs come from downloads with repackaging, a technique which consists of offering other software during installation. These additional programs are obviously superfluous, they can even be installed without your knowledge. It is recommended to read the EULA before installing packaged software. Before clicking, check the relevance of the pre-checked boxes offered to you.
Potentially unwanted software (LPI) or Potentialy Unwanted Programs (PUP) are the cause of many infections. The most common example is adware. InstallCore, Crossrider, Graftor ou Boxore which pollute the Registry and your data storage units. They are usually installed without your knowledge by downloading freeware. Indeed some sites use the repackaging method, an operation which consists of redoing the software installation module by adding download options. These options allow you to add other software such as browser toolbars, adware, potentially unwanted software, intrusive advertising software, or even browser hijackers.
Spyware (spyware) and adware (adwares) unwanted files, just like malware, can use the writing flaws of legitimate software or those of operating systems. It is therefore essential to have official software and that it has automatic updating. Likewise, your Windows operating system must be programmed in automatic update mode and activated, so that you can have the latest updates for critical security vulnerabilities.
PCVark detections
PCVarkTECHNICAL ELEMENTS
Features
– Starts a process at system launch (RP),
- Created multiple application shortcuts, Desktop, QuickLaunch, Taskbar, Programs (O4GS),
- It is installed in the Registry Base in order to be launched each time the system starts (O4),
- It starts a scheduled task automatically (O38),
- It installs as a program (O42)
– Created multiple “Software” registry keys,
- Adds additional folders (O43),
- Registration in the Windows prefetcher folder (O45)
– Adds multiple user files (O61),
Preview in reports
Recorded on 18/09/2019
Serial number :
O38 – TASK: {7713445A-F538-4970-A354-5C6A0B3419AE}[\Win Magician] – (.winmagician.com – Win Magician.) — C:\Program Files\Win Magician\wmgcmntr.exe [199424]
O38 – TASK: {A2CFDDAA-432D-4FF4-BC90-D17B820E7771}[\Win Magician_Logon] – (.winmagician.com – Win Magician.) — C:\Program Files\Win Magician\wmgcmntr.exe [199424]
C:\Windows\System32\Tasks\Win Magician – (.winmagician.com.) — C:\Program Files\Win Magician\wmgcmntr.exe [scn]
C:\Windows\System32\Tasks\Win Magician_Logon – (.winmagician.com.) — C:\Program Files\Win Magician\wmgcmntr.exe [stplaunch]
[MD5.76666C50C522E736C0DF838E928097C2] – (.winmagician.com – Win Magician.) — C:\Program Files\Win Magician\wmgc.exe [3549440] [PID.2700]
O4 – GS\CommonDesktop [Public]: Win Magician.lnk. (.winmagician.com – Win Magician.) C:\Program Files\Win Magician\wmgc.exe
O42 – Software: Win Magician – (.winmagician.com.) [HKLM] — {A523969E-77B0-4DA0-840A-56262EBCA291}_is1
HKLM\SOFTWARE\winmagician.com
HKLM\SOFTWARE\wmgc-pr
HKCU\SOFTWARE\winmagician.com
HKU\S-1-5-21-1245994586-1316496797-479707281-1000\SOFTWARE\winmagician.com
O43 – CFD: 18/09/2019 – [] D — C:\Program Files\Win Magician
O43 – CFD: 18/09/2019 – [] D — C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Win Magician
O43 – CFD: 18/09/2019 – [] D — C:\ProgramData\winmagician.com
O43 – CFD: 18/09/2019 – [] D — C:\Users\Coolman\AppData\Roaming\winmagician.com
O61 – LFC: 2019/09/18 04:13:02 A . (.winmagician.com.) — C:\Users\Coolman\Downloads\winmagician.exe [9696000]
[00F2526D106BCA9C6A4B7A1EFE94B35887] [17/06/2019] (.PC MAGICIANS INC.) – C:\Program Files\Win Magician\wmgc.exe
[00F2526D106BCA9C6A4B7A1EFE94B35887] [18/09/2019] (.PC MAGICIANS INC.) – C:\Program Files\Win Magician\unins000.exe
[00F2526D106BCA9C6A4B7A1EFE94B35887] [18/09/2019] (.PC MAGICIANS INC.) – C:\Users\Coolman\Downloads\winmagician.exe
O43 – CFD: 18/09/2019 – [] D — C:\ProgramData\ad-blocker.org
O43 – CFD: 18/09/2019 – [] D — C:\Users\Coolman\AppData\Roaming\ad-blocker.org
G2 – GCE: Preference [Coolman][User Data\Default\Extensions] [fenfpfipldcdebkpiboonlpnoklcnepg] Ad-Blocker Pro
G2 – GCE: Preference [Coolman][User Data\Default\Extensions] [kacljcbejojnapnmiifgckbafkojcncf] Ad-Blocker
P2 – EXT FILE: (.Ad-Blocker Pro – Ad-Blocker Pro is the best ad blocker .) — C:\Users\Coolman\AppData\Roaming\Mozilla\Firefox\Profiles\zfibf2ok.default-1568784437779\extensions\{ 246C9D65-51E6-4B0C-9CCF-B081B7BF9242}.xpi
Alias
Virus Total Analysis wmgc.exe :
Antiy-AVL HackTool[Hoax]/MSIL.Tonic
DrWeb Program.Unwanted.4421
eGambit Unsafe.AI_Score_91%
Malwarebytes PUP.Optional.PCVARK
VirusTotal Analysis (installer):
SecureAge APEX Malicious
DrWeb Program.Unwanted.4421
Fortinet Riskware/Tonic
Malwarebytes PUP.Optional.PCVARK
Associate Editors
CLOVER PC UTILITIES
SOFTBITS PC LOGICS®
QUANTUM TECHNOLOGIES®
QUICK SPEEDUP TOOLS®
PC Fixers Tools®
INTELLECT SOFTWARES®
ADVANCED PC UTILITIES®
NETCOM PC Utilities®
INNOVANA THINKLABS LIMITED®
innovanathinklabs.com
CONNECT INFO SERVICES
GENNEXT PC LOGICS®
RSA Security
GENNEXT PC LOGICS®
PC MAGICIANS INC
winmagician.com
Some products
Qbit-PC-Speedup
Qbit Optimizer Pro
Qbit-System-Care
Qbit Clean Pro
System CleanUp Tool
mBytes System Care
Advanced Driver Booster
System Cleaner Tool
Adroit System Care
Xtron System Care
Full PC Care
Xtron Optimizer Pro
Xtron Cleanup Pro
ITL Driver Updater
Xbits Speedup Pro
Universal PC Care
IObyte System Care
Win Magician
MD5 encryption
838B8C7FE640CFBE1E6B86A8A22E14F9
5130B2599475E8924327972FD9890124
CA58C57195DB2E5E8FF41B62C9B271A8
C8A86A32536464DFC297A50BE48B080E
32BD90CE1FA76765DA60351722C8CA0B
0B8A093283BA08403F2A798DAA9CA51B
76666C50C522E736C0DF838E928097C2
Serial number
008B99B016D8A936E000F5F85E9CCCFC6C
00D5AEB0E7B050CD1A962756D872F691A1
050471B7495129A93B726886706811AC
5460B24540CF8494B3755E17481D8DEF
72C655CBC952BE98D1CAA57C971D3E4A
00F2526D106BCA9C6A4B7A1EFE94B35887
How to Remove Win Magician?
