Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

17bac 33.33%
38f93 66.67%
(Note, the developer publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent process
Child process

PE structurePE file structure
Show functions
Import table
avcodec-55.dll
av_free_packet, av_init_packet, av_lockmgr_register, avcodec_alloc_frame, avcodec_close, avcodec_decode_audio4, avcodec_decode_video2, avcodec_find_decoder, avcodec_free_frame, avcodec_open2, avpicture_fill, avpicture_get_size
avformat-55.dll
av_read_frame, av_register_all, avformat_alloc_context, avformat_close_input, avformat_open_input, avio_alloc_context
avutil-52.dll
av_frame_free, av_free, av_malloc, av_samples_get_buffer_size
gdi32.dll
SetBkColor, SetStretchBltMode, StretchDIBits, SetDIBitsToDevice, CreateCompatibleBitmap, SelectObject, CreateCompatibleDC, DeleteObject, DeleteDC, GetStockObject
kernel32.dll
IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, IsProcessorFeaturePresent, GetStartupInfoW, HeapSetInformation, InterlockedCompareExchange, InterlockedExchange, DecodePointer, QueryPerformanceCounter, WaitForMultipleObjects, GetCurrentProcessId, ReleaseMutex, CreateMutexW, OpenMutexW, GetSystemInfo, GetDiskFreeSpaceExA, GetVolumeInformationW, CreateMutexA, CreateEventW, CloseHandle, GetTickCount, GetCurrentThreadId, GetSystemTimeAsFileTime, GetProcAddress, GetModuleHandleA, ResetEvent, SetEvent, InterlockedDecrement, EncodePointer, GetCommandLineW, GetSystemDirectoryA, LoadLibraryA, Sleep, WaitForSingleObject, GetLastError, InterlockedIncrement
msvcp100.dll
DllMain
msvcr100.dll
DllMain
qtcore4.dll
DllMain
qtgui4.dll
DllMain
shell32.dll
SHAppBarMessage
shlwapi.dll
SHGetValueA
swscale-2.dll
sws_freeContext, sws_getCachedContext, sws_scale
user32.dll
SetCursor, UnregisterClassA, GetMessagePos, TrackMouseEvent, LoadIconW, RegisterClassExA, SystemParametersInfoW, GetSystemMetrics, SetWindowPos, EnumDisplayMonitors, SetPropA, GetPropA, ShowWindow, DefWindowProcW, CreateWindowExA, GetWindowRect, GetWindowLongW, SetWindowLongW, ReleaseDC, DestroyWindow, SetRect, GetDC, UpdateLayeredWindow, GetWindowTextA, EnumWindows, DrawTextA, FillRect, RegisterHotKey, UnregisterHotKey, RemovePropA, GetLastInputInfo, WindowFromPoint, GetCapture, GetWindowThreadProcessId, CallNextHookEx, UnhookWindowsHookEx
winmm.dll
timeGetTime

vghd.exe

Remove vghd.exe
MD5:   38f930507f746e611b95cfed6b1b91cd
SHA1:   7e3c1658156865d7b005d6100d25b6a44f63707a

Overview

vghd.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. During installation, it (or a shortcut) is added to the user's startup folder which is designed to automatically launch when the user logs into Windows. It is installed with a couple of know programs including DeskBabes version 1.1.0.34 published by Totem Entertainment and VirtuaGirl version 1.1.0.38 published by Totem Entertainment.

DetailsDetails

File name:vghd.exe
Typical file path:C:\users\user\appdata\local\vghd\bin\vghd.exe
Size:3.03 MB (3,181,056 bytes)
Build date:7/30/2013 6:16 AM
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 10.0
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
DeskBabes
 Totem Entertainment
23% remove
VirtuaGirl
 Totem Entertainment
19% remove
“VirtuaGirl displays nice girls dancing directly on your computer taskbar as in a real club. The free version of this software delivers nice new girls everyday.No adware, spyware, virus. Among our models, you can find most beautiful babes of the Internet.You can buy the virtual girls and enjoy their 30 to 45 minutes stripping show on your desktop. Girls get naked on your desktop just like you would see in a live bar. Also get bonus photo...”

BehaviorsBehaviors

User start menu folder
Shortcut pointer placed in '%appdata%\Microsoft\Windows\Start Menu'
  • Shortcut to 'vghd.exe'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00087163%
0.028634%
Kernel CPU:0.00077180%
0.013761%
User CPU:0.00009983%
0.014873%
Kernel CPU time:165,918,438 ms/min
100,923,805ms/min
CPU cycles:2,639,447/sec
17,470,203/sec
Context switches:308/sec
284/sec
Memory
Private memory:114.65 MB
21.59 MB
Private (maximum):102.12 MB
Private (minimum):1.65 MB
Non-paged memory:114.65 MB
21.59 MB
Virtual memory:308.92 MB
140.96 MB
Virtual memory (peak):386.08 MB
169.69 MB
Working set:41.67 MB
18.61 MB
Working set (peak):134.93 MB
37.95 MB
Page faults:1,473,233/min
2,039/min
I/O
I/O read transfer:902.5 KB/sec
1.02 MB/min
I/O read operations:14/sec
343/min
I/O write transfer:2.16 KB/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:2.84 KB/sec
448.09 KB/min
I/O other operations:152/sec
1,671/min
Resource allocations
Threads:11
12
Handles:492
600
GUI GDI count:224
103
GUI GDI peak:218
142
GUI USER count:112
49
GUI USER peak:116
71

BehaviorsProcess properties

Tray notification:Yes
Integrety level:Medium
Platform:32-bit
Command lines:
  • "C:\users\user\appdata\local\vghd\bin\vghd.exe" -fromstartup
  • "C:\Documents and Settings\user\Application data\vghd\bin\vghd.exe" -fromstartup
Owner:User
Parent process:explorer.exe (Windows Explorer by Microsoft Corporation)

ResourcesThreads

Averages
 
vghd.exe (main module)
Total CPU:0.00167890%
0.272967%
Kernel CPU:0.00091264%
0.107585%
User CPU:0.00076626%
0.165382%
CPU cycles:1,850,213/sec
5,741,424/sec
Context switches:26/sec
79/sec
Memory:3.35 MB
1.16 MB
msvcr100.dll (Microsoft Visual Studio 2010 by Microsoft)
Total CPU:0.00045757%
Kernel CPU:0.00005720%
User CPU:0.00040038%
CPU cycles:28,035/sec
Memory:764 KB
quartz.dll
Total CPU:0.00000229%
Kernel CPU:0.00000229%
User CPU:0.00000000%
CPU cycles:13,052/sec
Memory:1.46 MB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 66.67%
Microsoft Windows XP 33.33%

Distribution by countryDistribution by country

United States installs about 33.33% of vghd.exe.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Compaq 66.67%
Acer 33.33%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE