“Exciting Fear Girl” windows process

I have a computer in my shop infected with the SSOption browser hijacker (among other things). It is controlling a process and a service called “Exciting Fear Girl”. I thought with a name like that it would be easy to find more information about it, but I’ve come up empty. There’s no mention of it even where I could find info on SSOption. I’m going to remove it, of course, but I wonder if I should capture it on a thumb drive to preserve it for research.