Display not shutting down at set time.

Question

I have an HP Slim Desktop that has recently refused to shut the display off after the set time. No new apps have been added lately. I have deleted any extensions, cleared the cache, checked the task manager, and ran full scans with both McAffee and Windows Defender with no success. I also uninstalled the recent update KB5074109 that is said to have caused some problems. Per online recommendations I ran "powercfg -requests" and attached the result. I don't know if the named file is legitimate or malware. Python is not installed on the computer. I'm at a loss from here on as my memory with DOS commands is a little sketchy. Thanks in advance for any help. Screenshot 2026-02-06 123903.png. I hope I attached the file correctly.

Answer 1

The file path and process name you've encountered are highly suspicious. In Windows, it is a classic red flag for malware to use a legitimate-sounding name like pythonw.exe inside a randomly named folder (such as 63ge17JBee) within the C:\ProgramData directory—especially if you haven't installed Python yourself.

Is it legitimate?

Almost certainly not. While pythonw.exe is a real Windows process used to run Python scripts without a command window, it should live in a standard installation directory (like C:\Python39 or C:\Users\...\AppData\Local\Programs\Python).

• The Random Folder: Random alphanumeric folder names in ProgramData are frequently used by "resource-stealing" malware or "adware" to hide their components.

The Power Issue: This process is actively making a "Power Request" to keep your display on. This is often done by malicious background processes to ensure they aren't interrupted or to simulate user activity.

---

How to Fix It

Since your antivirus scans didn't catch it, the file might be a "new" variant or simply a script that doesn't trigger traditional signature-based detection. Here is how to handle it:

1. Identify and Stop the Process

Before you can delete the file, you have to stop it from running:

Right-click the Taskbar and select Task Manager.

Go to the Details tab.

Look for pythonw.exe.

Right-click it and select Open file location. (Keep this folder window open).

Go back to Task Manager, right-click pythonw.exe, and select End Task.

2. Clean the Files

In the folder window that opened (likely C:\ProgramData\63ge17JBee), go up one level to ProgramData.

Delete the entire 63ge17JBee folder.

Note: If Windows says the file is in use, you may need to boot into Safe Mode to delete it.

3. Override the Power Request (The DOS Command)

If the display still won't turn off, you can tell Windows to explicitly ignore that specific process. Since your DOS memory is "sketchy," here is the exact command to copy/paste:

Click Start, type cmd, right-click it, and select Run as Administrator.

Type (or copy/paste) the following:

powercfg -requestsoverride PROCESS "pythonw.exe" DISPLAY

Press Enter. This tells Windows: "Even if pythonw.exe asks to keep the screen on, ignore it."

4. Check for Persistence

Malware often sets itself to come back after a reboot.

Press Win + R, type msconfig, and look at the Services tab (check "Hide all Microsoft services").

Press Ctrl + Shift + Esc, go to the Startup tab, and disable anything that looks like Python or references that random folder.

---

Suggested Next Step

I recommend downloading and running a scan with Malwarebytes (the free version is fine). It is often much better at catching these "random folder" script-based threats than McAfee or Windows Defender.

Hope it is useful 😁