Remove Malware and Viruses

Pigeon.EPP malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Pigeon.EPP:

An up-to-date copy of ExterminateIt should detect and prevent infection from Pigeon.EPP.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Pigeon.EPP manually.

To completely manually remove Pigeon.EPP malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.EPP.

1. Use Task Manager to terminate the Pigeon.EPP process.
2. Delete the original Pigeon.EPP file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
SillyDl.CXU Trojan Information
Removing Delf.ao Spyware
Removing TrojanDownloader.Win32.Tiner Trojan
Hifold Trojan Cleaner

Bancos.IGK malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Bancos.IGK:

An up-to-date copy of ExterminateIt should detect and prevent infection from Bancos.IGK.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Bancos.IGK manually.

To completely manually remove Bancos.IGK malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.IGK.

1. Use Task Manager to terminate the Bancos.IGK process.
2. Delete the original Bancos.IGK file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Clonewar Trojan Removal
Mstream.Analysis DoS Information

RockItNet malware description and removal detail
Categories:Worm
Visible Symptoms:
Files in system folders:
[%DESKTOP%]\RockItNet.lnk
[%STARTUP%]\Update RockItNet.lnk
[%DESKTOP%]\RockItNet.lnk
[%STARTUP%]\Update RockItNet.lnk

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting RockItNet:

Files:
[%DESKTOP%]\RockItNet.lnk
[%STARTUP%]\Update RockItNet.lnk
[%DESKTOP%]\RockItNet.lnk
[%STARTUP%]\Update RockItNet.lnk

Folders:
[%PROGRAMS%]\RockItNet
[%PROGRAM_FILES%]\RockItNet

Registry Keys:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\rockitnet
HKEY_LOCAL_MACHINE\software\wise solutions\wise installation system\repair\[%PROGRAM_FILES%]\rockitnet\install.log
HKEY_LOCAL_MACHINE\software\wise solutions\wiseupdate\apps\rockitnet

Registry Values:
HKEY_LOCAL_MACHINE\software\wise solutions\wiseupdate\apppaths

Removing RockItNet:

An up-to-date copy of ExterminateIt should detect and prevent infection from RockItNet.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove RockItNet manually.

To completely manually remove RockItNet malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with RockItNet.

1. Use Task Manager to terminate the RockItNet process.
2. Delete the original RockItNet file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Kather Trojan Cleaner

Backdoor.BackOrifice2K malware description and removal detail
Categories:Trojan,Backdoor
Also known as:

[Kaspersky]Backdoor.BO2K.10;
[Eset]Win32/BO2K.C trojan;
[McAfee]Orifice2K;
[F-Prot]W32/Bo2K.114618;
[Panda]Backdoor Program;
[Computer Associates]Win32.BackOrifice2000.11

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Backdoor.BackOrifice2K:

An up-to-date copy of ExterminateIt should detect and prevent infection from Backdoor.BackOrifice2K.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Backdoor.BackOrifice2K manually.

To completely manually remove Backdoor.BackOrifice2K malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Backdoor.BackOrifice2K.

1. Use Task Manager to terminate the Backdoor.BackOrifice2K process.
2. Delete the original Backdoor.BackOrifice2K file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Guptachar Trojan Symptoms

Pigeon.EKL malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Pigeon.EKL:

An up-to-date copy of ExterminateIt should detect and prevent infection from Pigeon.EKL.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Pigeon.EKL manually.

To completely manually remove Pigeon.EKL malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.EKL.

1. Use Task Manager to terminate the Pigeon.EKL process.
2. Delete the original Pigeon.EKL file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Removing MIRC.nHTMLn DoS
Wotch Tracking Cookie Removal
Remove Eagle.Boy RAT
Ghost.Keylogger Spyware Symptoms
D86asm RAT Cleaner

Claria.Screenscenes malware description and removal detail
Categories:Adware,Spyware

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting Claria.Screenscenes:

Folders:
[%PROGRAMS%]\midnight lake screensave

Registry Keys:
HKEY_CURRENT_USER\software\screenscenes
HKEY_CLASSES_ROOT\software\screenscenes\beachislands

Removing Claria.Screenscenes:

An up-to-date copy of ExterminateIt should detect and prevent infection from Claria.Screenscenes.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Claria.Screenscenes manually.

To completely manually remove Claria.Screenscenes malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Claria.Screenscenes.

1. Use Task Manager to terminate the Claria.Screenscenes process.
2. Delete the original Claria.Screenscenes file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Bancos.CXU Trojan Removal
Sockets Trojan Symptoms

Backdoor.Death.Server.family malware description and removal detail
Categories:Trojan,BHO,Backdoor
Also known as:

[Kaspersky]Backdoor.Death.26.e;
[Eset]Win32/Death.26.E trojan;
[McAfee]BackDoor-FP.svr;
[F-Prot]security risk or a "backdoor" program;
[Computer Associates]Win32.Death.26.K

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Backdoor.Death.Server.family:

An up-to-date copy of ExterminateIt should detect and prevent infection from Backdoor.Death.Server.family.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Backdoor.Death.Server.family manually.

To completely manually remove Backdoor.Death.Server.family malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Backdoor.Death.Server.family.

1. Use Task Manager to terminate the Backdoor.Death.Server.family process.
2. Delete the original Backdoor.Death.Server.family file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Removing ICQ.Notify Trojan

PSW.Lmir.lj malware description and removal detail
Categories:Trojan,Hacker Tool
Also known as:

[Panda]Trj/Legmir.gen

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing PSW.Lmir.lj:

An up-to-date copy of ExterminateIt should detect and prevent infection from PSW.Lmir.lj.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove PSW.Lmir.lj manually.

To completely manually remove PSW.Lmir.lj malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with PSW.Lmir.lj.

1. Use Task Manager to terminate the PSW.Lmir.lj process.
2. Delete the original PSW.Lmir.lj file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Pigeon.EQB Trojan Removal
Bancos.HPO Trojan Cleaner
Removing register.com Tracking Cookie

Bad.Brains malware description and removal detail
Categories:Trojan,Backdoor,Downloader,DoS
Also known as:

[Kaspersky]Leprosy.BadBrains.570,Leprosy.BadBrains.554,Leprosy.TheThing.554,Leprosy.TheThing.756;
[Eset]Leprosy.Badbrns.570 virus,Leprosy.Badbrns.554.B virus;
[Panda]Bad Brain,Bad-Brain2,The thing.554.B;
[Computer Associates]Bad Brains.570,Leprosy.Bad_Brains.570,Bad Brains.554

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Bad.Brains:

An up-to-date copy of ExterminateIt should detect and prevent infection from Bad.Brains.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Bad.Brains manually.

To completely manually remove Bad.Brains malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bad.Brains.

1. Use Task Manager to terminate the Bad.Brains process.
2. Delete the original Bad.Brains file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
MondayLot Backdoor Cleaner
PSW.Lmir.gen Trojan Removal
PWS.QQThief Trojan Information

Langweile malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Langweile:

An up-to-date copy of ExterminateIt should detect and prevent infection from Langweile.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Langweile manually.

To completely manually remove Langweile malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Langweile.

1. Use Task Manager to terminate the Langweile process.
2. Delete the original Langweile file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Xtractor.Plus Adware
NetMama Spyware Removal
Remove Win32.Terrorist Trojan
QDel121 Trojan Removal instruction
Cropo Trojan Symptoms

Vxidl.AFT malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Vxidl.AFT:

An up-to-date copy of ExterminateIt should detect and prevent infection from Vxidl.AFT.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Vxidl.AFT manually.

To completely manually remove Vxidl.AFT malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.AFT.

1. Use Task Manager to terminate the Vxidl.AFT process.
2. Delete the original Vxidl.AFT file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Sinnum Trojan Symptoms

BPV2s.dll malware description and removal detail
Categories:BHO

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing BPV2s.dll:

An up-to-date copy of ExterminateIt should detect and prevent infection from BPV2s.dll.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove BPV2s.dll manually.

To completely manually remove BPV2s.dll malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with BPV2s.dll.

1. Use Task Manager to terminate the BPV2s.dll process.
2. Delete the original BPV2s.dll file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Free Trojan Removal instruction
Removing StartPage.oj Trojan
Remove Veslorn Trojan
Pigeon.AKT Trojan Symptoms

New.Future.0b1 malware description and removal detail
Categories:Backdoor,RAT
Also known as:

[Kaspersky]Backdoor.Nefutur;
[McAfee]BackDoor-ACW;
[F-Prot]security risk or a "backdoor" program;
[Panda]Backdoor Program;
[Computer Associates]Win32.NewFuture.10,Win32/NewFuture.10!Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing New.Future.0b1:

An up-to-date copy of ExterminateIt should detect and prevent infection from New.Future.0b1.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove New.Future.0b1 manually.

To completely manually remove New.Future.0b1 malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with New.Future.0b1.

1. Use Task Manager to terminate the New.Future.0b1 process.
2. Delete the original New.Future.0b1 file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Sh.FreeBSD Trojan Cleaner
Bancos.HAJ Trojan Cleaner
T543 Backdoor Removal
Removing BOWhack RAT

SillyDl.DLD malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting SillyDl.DLD:

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing SillyDl.DLD:

An up-to-date copy of ExterminateIt should detect and prevent infection from SillyDl.DLD.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove SillyDl.DLD manually.

To completely manually remove SillyDl.DLD malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SillyDl.DLD.

1. Use Task Manager to terminate the SillyDl.DLD process.
2. Delete the original SillyDl.DLD file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Ebspy Trojan Removal
Remove Keylogger.King.Free Spyware
Vxidl.BDG Trojan Removal

Expext.MetaDirect malware description and removal detail
Categories:BHO,Hijacker
Visible Symptoms:
Files in system folders:
[%SYSTEM%]\expext.dll
[%WINDOWS%]\system\expext.dll
[%SYSTEM%]\expext.dll
[%WINDOWS%]\system\expext.dll

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting Expext.MetaDirect:

Files:
[%SYSTEM%]\expext.dll
[%WINDOWS%]\system\expext.dll
[%SYSTEM%]\expext.dll
[%WINDOWS%]\system\expext.dll

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{23bc1ccf-4be7-497f-b154-6ada68425fbb}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{23bc1ccf-4be7-497f-b154-6ada68425fbb}
HKEY_LOCAL_MACHINE\software\classes\clsid\{23bc1ccf-4be7-497f-b154-6ada68425fbb}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{23bc1ccf-4be7-497f-b154-6ada68425fbb}

Removing Expext.MetaDirect:

An up-to-date copy of ExterminateIt should detect and prevent infection from Expext.MetaDirect.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Expext.MetaDirect manually.

To completely manually remove Expext.MetaDirect malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Expext.MetaDirect.

1. Use Task Manager to terminate the Expext.MetaDirect process.
2. Delete the original Expext.MetaDirect file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Zlob.Fam.Image Access ActiveX Object Trojan Information

Hsow malware description and removal detail
Categories:Trojan,Backdoor
Also known as:

[Kaspersky]Trojan.Win32.Inject.aa,Trojan-Proxy.Win32.Xorpix.ag,Backdoor.Win32.Agent.acl,Trojan-Dropper.Win32.Agent.atb,Trojan-Proxy.Win32.Xorpix.v,Trojan-Proxy.Win32.Xorpix.u,Trojan.Win32.Agent.acr,Trojan-Proxy.Win32.Xorpix.ar,Trojan-Proxy.Win32.Xorpix.ax,Trojan-Proxy.Win32.Xorpix.bk,Trojan-Proxy.Win32.Xorpix.ck,Trojan-Proxy.Win32.Xorpix.cq,Backdoor.Win32.Small.cms,Backdoor.Win32.Small.cmm;
[McAfee]Proxy-Agent.AI,BackDoor-CXJ,Proxy-Agent.ai,Generic BackDoor.c;
[F-Prot]W32/Trojan.ASKN,W32/Thread-HLLSI-based!Maximus;
[Other]Win32/Hsow.AI,TROJ_XORPIX.AI,Win32/Hsow!generic,Win32.Hsow.AH,Backdoor.Trojan,Win32/Hsow.AG,Backdoor.Eterok.C,Win32/Hsow.AD,Win32/Hsow.AE,Win32/Hsow.AS,Backdoor.Eterok,Win32/Hsow.AT,W32/Xorpix.CW,Win32/Hsow.BM,W32/Malware.BGXR,Win32/Hsow.BQ,Troj/Small-EKU,BKDR_AGENT.AEKI
Visible Symptoms:
Files in system folders:
[%PROFILE_TEMP%]\v3x1.g22me
[%PROFILE_TEMP%]\v4x3.ga2me
[%PROFILE_TEMP%]\v4x6.gam5e
[%PROFILE_TEMP%]\v5x2.g3ame
[%PROFILE_TEMP%]\v5x4.ga2me
[%PROFILE_TEMP%]\v6xt4.game
[%PROFILE_TEMP%]\vx1t1.game
[%PROFILE_TEMP%]\vx1t3.game
[%PROFILE_TEMP%]\vx3t2.game
[%SYSTEM%]\update228.exe
[%SYSTEM%]\vxga1me4t1.exe
[%SYSTEM%]\vxga8me6.exe
[%WINDOWS%]\ZServ.dll
[%PROFILE%]\Documents\Settings\bot.dll
[%PROFILE%]\Documents\Settings\partnership.dll
[%SYSTEM%]\svshost.dll
[%SYSTEM%]\vxg4am1et2.exe
[%SYSTEM%]\vxg6ame4.exe
[%SYSTEM%]\vxga4me1.exe
[%SYSTEM%]\wininet.exe
[%PROFILE_TEMP%]\v3x1.g22me
[%PROFILE_TEMP%]\v4x3.ga2me
[%PROFILE_TEMP%]\v4x6.gam5e
[%PROFILE_TEMP%]\v5x2.g3ame
[%PROFILE_TEMP%]\v5x4.ga2me
[%PROFILE_TEMP%]\v6xt4.game
[%PROFILE_TEMP%]\vx1t1.game
[%PROFILE_TEMP%]\vx1t3.game
[%PROFILE_TEMP%]\vx3t2.game
[%SYSTEM%]\update228.exe
[%SYSTEM%]\vxga1me4t1.exe
[%SYSTEM%]\vxga8me6.exe
[%WINDOWS%]\ZServ.dll
[%PROFILE%]\Documents\Settings\bot.dll
[%PROFILE%]\Documents\Settings\partnership.dll
[%SYSTEM%]\svshost.dll
[%SYSTEM%]\vxg4am1et2.exe
[%SYSTEM%]\vxg6ame4.exe
[%SYSTEM%]\vxga4me1.exe
[%SYSTEM%]\wininet.exe

In order to ensure that the Hsow is launched automatically each time the system is booted, the Hsow adds a link to its executable file in the system registry:
HKLM\Microsoft\Windows\CurrentVersion\Run
[%SYSTEM%]\update228.exe
[%SYSTEM%]\vxga1me4t1.exe
[%SYSTEM%]\vxga8me6.exe
[%SYSTEM%]\vxg4am1et2.exe
[%SYSTEM%]\vxg6ame4.exe
[%SYSTEM%]\vxga4me1.exe
[%SYSTEM%]\wininet.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista