Remove Malware and Viruses

Pigeon.AWG malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Pigeon.AWG:

An up-to-date copy of ExterminateIt should detect and prevent infection from Pigeon.AWG.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Pigeon.AWG manually.

To completely manually remove Pigeon.AWG malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AWG.

1. Use Task Manager to terminate the Pigeon.AWG process.
2. Delete the original Pigeon.AWG file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Bat.qz15 Trojan Cleaner

Pigeon.ACG malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Pigeon.ACG:

An up-to-date copy of ExterminateIt should detect and prevent infection from Pigeon.ACG.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Pigeon.ACG manually.

To completely manually remove Pigeon.ACG malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.ACG.

1. Use Task Manager to terminate the Pigeon.ACG process.
2. Delete the original Pigeon.ACG file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Donn Trojan
Adware.BlogCn Adware Symptoms
TrojanRunner.GwBinder Trojan Symptoms

Goh malware description and removal detail
Categories:Trojan,Backdoor,RAT
Also known as:

[Eset]Win32/Goh.01 trojan;
[Computer Associates]Backdoor/Goh.0_1

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Goh:

An up-to-date copy of ExterminateIt should detect and prevent infection from Goh.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Goh manually.

To completely manually remove Goh malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Goh.

1. Use Task Manager to terminate the Goh process.
2. Delete the original Goh file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Pigeon.AVMP Trojan Removal instruction
Removing Bancos.FXW Trojan

checkstat.nl malware description and removal detail
Categories:Tracking Cookie

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing checkstat.nl:

An up-to-date copy of ExterminateIt should detect and prevent infection from checkstat.nl.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove checkstat.nl manually.

To completely manually remove checkstat.nl malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with checkstat.nl.

1. Use Task Manager to terminate the checkstat.nl process.
2. Delete the original checkstat.nl file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
webmd.com Tracking Cookie Symptoms
Bancos.BNQ Trojan Information
SillyDl.CIK Trojan Removal
Win.Keylog!Trojan Trojan Removal
Hastings Trojan Removal instruction

Bancos.HJT malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Bancos.HJT:

An up-to-date copy of ExterminateIt should detect and prevent infection from Bancos.HJT.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Bancos.HJT manually.

To completely manually remove Bancos.HJT malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.HJT.

1. Use Task Manager to terminate the Bancos.HJT process.
2. Delete the original Bancos.HJT file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove SuperUtilBar Toolbar
Netbus.dr RAT Removal instruction
Windows.AdStatus Adware Removal instruction

Bancos.IBG malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Bancos.IBG:

An up-to-date copy of ExterminateIt should detect and prevent infection from Bancos.IBG.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Bancos.IBG manually.

To completely manually remove Bancos.IBG malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.IBG.

1. Use Task Manager to terminate the Bancos.IBG process.
2. Delete the original Bancos.IBG file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove IROffer.2b9 Backdoor
Golden.Cicada.Abnormal.Engine Trojan Information
Giana.com Tracking Cookie Cleaner

Alibaba malware description and removal detail
Categories:Toolbar

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting Alibaba:

Registry Keys:
HKEY_CLASSES_ROOT\alibabaietoolbar.alibababutton
HKEY_CLASSES_ROOT\alibabaietoolbar.alibababutton.1
HKEY_CLASSES_ROOT\alibabaietoolbar.alibabasearchbar
HKEY_CLASSES_ROOT\alibabaietoolbar.alibabasearchbar.1
HKEY_CLASSES_ROOT\alibabaietoolbar.showbarobject
HKEY_CLASSES_ROOT\alibabaietoolbar.showbarobject.1
HKEY_CLASSES_ROOT\clsid\{09f59435-7814-48ed-a73a-96ff861a91eb}
HKEY_CLASSES_ROOT\clsid\{0c588f7d-a2b3-4001-b59b-d856c1bf3ad7}
HKEY_CLASSES_ROOT\clsid\{850b69e4-90db-4f45-8621-891bf35a5b53}
HKEY_CLASSES_ROOT\interface\{42cb709c-a1d6-4c3a-9f9c-b077ff86a760}
HKEY_CLASSES_ROOT\interface\{63c8af31-ad6e-417c-bf8b-48b96e95dc25}
HKEY_CLASSES_ROOT\interface\{ab44756f-fce0-454d-af29-930b89bb44d2}
HKEY_CLASSES_ROOT\typelib\{448f1bd5-c41a-4551-83cf-8cd2309abc66}
HKEY_LOCAL_MACHINE\software\ablibaba\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{09f59435-7814-48ed-a73a-96ff861a91eb}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{13b0c05c-ef05-4bf6-b0ea-f6111af25544}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\alibaba toolbar

Removing Alibaba:

An up-to-date copy of ExterminateIt should detect and prevent infection from Alibaba.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Alibaba manually.

To completely manually remove Alibaba malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Alibaba.

1. Use Task Manager to terminate the Alibaba process.
2. Delete the original Alibaba file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Win32.TrojanDownloader.Easto Downloader Cleaner
BSV Trojan Removal instruction
Removing Generic.Dialer Adware
Remove Vienna.Vio.Lite Trojan
Roger Trojan Removal instruction

IEBAR malware description and removal detail
Categories:Hijacker,Toolbar
Visible Symptoms:
Files in system folders:
[%WINDOWS%]\Downloaded Program Files\barhelp24.0.dll
[%WINDOWS%]\Downloaded Program Files\iebar.inf
[%WINDOWS%]\Downloaded Program Files\iebar23.0.dll
[%WINDOWS%]\Downloaded Program Files\barhelp24.0.dll
[%WINDOWS%]\Downloaded Program Files\iebar.inf
[%WINDOWS%]\Downloaded Program Files\iebar23.0.dll

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting IEBAR:

Files:
[%WINDOWS%]\Downloaded Program Files\barhelp24.0.dll
[%WINDOWS%]\Downloaded Program Files\iebar.inf
[%WINDOWS%]\Downloaded Program Files\iebar23.0.dll
[%WINDOWS%]\Downloaded Program Files\barhelp24.0.dll
[%WINDOWS%]\Downloaded Program Files\iebar.inf
[%WINDOWS%]\Downloaded Program Files\iebar23.0.dll

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{56a7dc70-e102-4408-a34a-ae06fef01586}
HKEY_CURRENT_USER\software\hdt
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\ext\stats\{56a7dc70-e102-4408-a34a-ae06fef01586}
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\ext\stats\{b1d147e7-873e-4909-8127-695d9bb78728}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{56a7dc70-e102-4408-a34a-ae06fef01586}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:\windows\downloaded program files\barhelp24.0.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:\windows\downloaded program files\iebar23.0.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:\windows\downloaded program files\toolbar.bmp
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:\windows\downloaded program files\winio.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:\windows\downloaded program files\winio.sys
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:\windows\downloaded program files\winio.vxd
HKEY_CLASSES_ROOT\clsid\{3b076ce5-601e-4a74-9548-4197fd5b4b1e}
HKEY_CLASSES_ROOT\clsid\{b1d147e7-873e-4909-8127-695d9bb78728}
HKEY_CLASSES_ROOT\downloadbho.t2bho
HKEY_CLASSES_ROOT\downloadbho.t2bho.1
HKEY_CLASSES_ROOT\interface\{5e186ddb-6152-4c73-a7d4-4899140178e9}
HKEY_CLASSES_ROOT\interface\{691cc615-cd3f-41ff-920d-60769d3dcf5b}
HKEY_CLASSES_ROOT\interface\{9aaabfe1-22a9-4e0d-8f4a-48b9696a199b}
HKEY_CLASSES_ROOT\interface\{b93a0050-ac9e-4609-b55b-a4064bfd0059}
HKEY_CLASSES_ROOT\lanbar3.multimediasite
HKEY_CLASSES_ROOT\lanbar3.multimediasite.1
HKEY_CLASSES_ROOT\lan_bar.lan_barobj
HKEY_CLASSES_ROOT\lan_bar.lan_barobj.1
HKEY_CLASSES_ROOT\typelib\{1f77f67e-bd08-4932-af5a-15fd532eedb1}
HKEY_CLASSES_ROOT\typelib\{e35306d7-b44c-4530-a2ce-94c60f8cc4dc}
HKEY_CURRENT_USER\software\lan\lanbar
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{b1d147e7-873e-4909-8127-695d9bb78728}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]\downloaded program files\barhelp24.0.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]\downloaded program files\iebar23.0.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]\downloaded program files\toolbar.bmp
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]\downloaded program files\urlinfo.xml
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]\downloaded program files\winio.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]\downloaded program files\winio.sys
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]\downloaded program files\winio.vxd
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\lanbar

Registry Values:
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/hdtbar.xml
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/hdtbar.xml
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls

Removing IEBAR:

An up-to-date copy of ExterminateIt should detect and prevent infection from IEBAR.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove IEBAR manually.

To completely manually remove IEBAR malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with IEBAR.

1. Use Task Manager to terminate the IEBAR process.
2. Delete the original IEBAR file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Win16.Cluck Trojan Cleaner
Cracking.Tool Trojan Cleaner

BackDoor.ASR malware description and removal detail
Categories:Backdoor,Hacker Tool
Also known as:

[McAfee]BackDoor-ASR;
[Panda]Bck/Xayflu.srv

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing BackDoor.ASR:

An up-to-date copy of ExterminateIt should detect and prevent infection from BackDoor.ASR.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove BackDoor.ASR manually.

To completely manually remove BackDoor.ASR malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with BackDoor.ASR.

1. Use Task Manager to terminate the BackDoor.ASR process.
2. Delete the original BackDoor.ASR file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Trembler Trojan Removal
Remove ICQ.ToolzY2K DoS
Removing Backdoor.SatanCrew Backdoor
REG.Startpage Trojan Removal

SillyDl.CNC malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing SillyDl.CNC:

An up-to-date copy of ExterminateIt should detect and prevent infection from SillyDl.CNC.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove SillyDl.CNC manually.

To completely manually remove SillyDl.CNC malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SillyDl.CNC.

1. Use Task Manager to terminate the SillyDl.CNC process.
2. Delete the original SillyDl.CNC file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Gnayum!PWS!Trojan Trojan Removal

Tiny.cc malware description and removal detail
Categories:Downloader

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Tiny.cc:

An up-to-date copy of ExterminateIt should detect and prevent infection from Tiny.cc.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Tiny.cc manually.

To completely manually remove Tiny.cc malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Tiny.cc.

1. Use Task Manager to terminate the Tiny.cc process.
2. Delete the original Tiny.cc file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Removing TrojanDownloader.Win32.Small.bg Trojan

Macro.Word97.Emelia malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Macro.Word97.Emelia:

An up-to-date copy of ExterminateIt should detect and prevent infection from Macro.Word97.Emelia.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Macro.Word97.Emelia manually.

To completely manually remove Macro.Word97.Emelia malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Macro.Word97.Emelia.

1. Use Task Manager to terminate the Macro.Word97.Emelia process.
2. Delete the original Macro.Word97.Emelia file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Banker.CNQ Trojan Cleaner
Downloader.BBS Downloader Removal
Removing Spmbot Trojan
Remove Delf.GEN Trojan
Removing Pigeon.AVHT Trojan

Pigeon.ELP malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Pigeon.ELP:

An up-to-date copy of ExterminateIt should detect and prevent infection from Pigeon.ELP.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Pigeon.ELP manually.

To completely manually remove Pigeon.ELP malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.ELP.

1. Use Task Manager to terminate the Pigeon.ELP process.
2. Delete the original Pigeon.ELP file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Bancos.GSS Trojan
Remove artistdirect.com Tracking Cookie
NiceDay Trojan Cleaner
Uhrnf Trojan Symptoms
CryptExrt.dll BHO Cleaner

IPInsight malware description and removal detail
Categories:BHO
Visible Symptoms:
Files in system folders:
[%PROFILE_TEMP%]\alchem.exe
[%WINDOWS%]\sentry.ini
[%PROFILE%]\locals~1\temp\alchem.exe
[%PROFILE%]\saly umber\local settings\temp\sentry.exe
[%PROFILE_TEMP%]\sentry.exe
[%SYSTEM%]\ipinsigt.dll
[%SYSTEM%]\ipinsigt.inf
[%WINDOWS%]\inf\ipinsigt.inf
[%WINDOWS%]\ipinsigt.dll
[%WINDOWS%]\lastgood\inf\ipinsigt.inf
[%WINDOWS%]\lastgood\inf\ipinsigt.pnf
[%WINDOWS%]\sentry.exe
[%WINDOWS%]\system\ipinsigt.dll
[%PROFILE_TEMP%]\alchem.exe
[%WINDOWS%]\sentry.ini
[%PROFILE%]\locals~1\temp\alchem.exe
[%PROFILE%]\saly umber\local settings\temp\sentry.exe
[%PROFILE_TEMP%]\sentry.exe
[%SYSTEM%]\ipinsigt.dll
[%SYSTEM%]\ipinsigt.inf
[%WINDOWS%]\inf\ipinsigt.inf
[%WINDOWS%]\ipinsigt.dll
[%WINDOWS%]\lastgood\inf\ipinsigt.inf
[%WINDOWS%]\lastgood\inf\ipinsigt.pnf
[%WINDOWS%]\sentry.exe
[%WINDOWS%]\system\ipinsigt.dll

In order to ensure that the IPInsight is launched automatically each time the system is booted, the IPInsight adds a link to its executable file in the system registry:
HKLM\Microsoft\Windows\CurrentVersion\Run
[%PROFILE_TEMP%]\alchem.exe
[%PROFILE%]\locals~1\temp\alchem.exe
[%PROFILE%]\saly umber\local settings\temp\sentry.exe
[%PROFILE_TEMP%]\sentry.exe
[%WINDOWS%]\sentry.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista