We received the file LEVELQUALITYWATCHER64.EXE and detected that LEVELQUALITYWATCHER64.EXE is not good.
LEVELQUALITYWATCHER64.EXE is Adware. You should remove the file LEVELQUALITYWATCHER64.EXE.
Kill the process LEVELQUALITYWATCHER64.EXE and remove LEVELQUALITYWATCHER64.EXE from Windows.
Malware Analysis of LEVELQUALITYWATCHER64.EXE
Full path on a computer: %Program Files%\Savings Bull\v1.01\levelqualitywatcher32.exe
Detected by UnHackMe:
LEVELQUALITYWATCHER64.EXE
Default location: %Program Files%\Savings Bull\v1.01\levelqualitywatcher32.exe
Removal Results: Success
Number of reboot: 1
LEVELQUALITYWATCHER64.EXE is known as:
Adware.PUP.Optional.Savingsbull, Adware ( 0049577d1 ), Trojan.Win64.MLW.cumkqw, Adware.Adpeak, ADW_ADPEAK, Win64:BullSave-A [Adw], PUA.Adpeak., AdPeak, ApplicUnwnt, Adpeak, Adware.Adpeak.K (B), a variant of Win64.Adware.Adpeak.C, AdWare.Adpeak
LEVELQUALITYWATCHER64.EXE hash:
- MD5: 9b1e1e505b29a8f4324854da9561fbff
The file tries to download information from some web sites.
How to quickly detect LEVELQUALITYWATCHER64.EXE presence?
![]( "Registry")
Registry:
![]( "Folders")
Folders:
![]( "Files")
Files:
Registry:- HKLM\System\CurrentControlSet\Services\Level Quality Watcher\ImagePath: “%Program Files%\Savings Bull\v1.01\levelqualitywatcher32.exe run options=01110010010000000000000000000000 sourceguid=sborganic”
- HKLM\System\CurrentControlSet\Services\Level Quality Watcher\DisplayName: “Level Quality Watcher”
Folders:- %Program Files%\Savings Bull
- %Program Files%\Savings Bull\v1.01
Files:- %Program Files%\Savings Bull\v1.01\levelqualitywatcher32.exe
- %Program Files%\Savings Bull\v1.01\levelqualitywatcher64.exe