Remove Malware and Viruses

Pigeon.AVBZ malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Pigeon.AVBZ:

An up-to-date copy of ExterminateIt should detect and prevent infection from Pigeon.AVBZ.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Pigeon.AVBZ manually.

To completely manually remove Pigeon.AVBZ malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AVBZ.

1. Use Task Manager to terminate the Pigeon.AVBZ process.
2. Delete the original Pigeon.AVBZ file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
BlackStone Trojan Removal instruction
Yahoo Hacker Tool Removal instruction
Delf.ax Backdoor Removal instruction
Win32.Connect4 Trojan Removal instruction

Kavar malware description and removal detail
Categories:Trojan,Backdoor,RAT
Also known as:

[Kaspersky]Backdoor.Kavar;
[Eset]Win32/Kavar.10 trojan;
[Panda]Backdoor Program.LC;
[Computer Associates]Backdoor/Kavar!Server

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Kavar:

An up-to-date copy of ExterminateIt should detect and prevent infection from Kavar.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Kavar manually.

To completely manually remove Kavar malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Kavar.

1. Use Task Manager to terminate the Kavar process.
2. Delete the original Kavar file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Leszcz RAT
Remote.Control Backdoor Symptoms
Galaxon Trojan Symptoms

Noon malware description and removal detail
Categories:Trojan,Backdoor,Downloader,DoS
Also known as:

[Kaspersky]Karlik.1666;
[Panda]Malaise;
[Computer Associates]Poledne

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Noon:

An up-to-date copy of ExterminateIt should detect and prevent infection from Noon.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Noon manually.

To completely manually remove Noon malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Noon.

1. Use Task Manager to terminate the Noon process.
2. Delete the original Noon file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Playgame Trojan Information
Remove Zarruta Trojan
Removing Stel Trojan

MyCoolScreen malware description and removal detail
Categories:Adware

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing MyCoolScreen:

An up-to-date copy of ExterminateIt should detect and prevent infection from MyCoolScreen.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove MyCoolScreen manually.

To completely manually remove MyCoolScreen malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with MyCoolScreen.

1. Use Task Manager to terminate the MyCoolScreen process.
2. Delete the original MyCoolScreen file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove Awnent Trojan
H2Hack RAT Cleaner
Keypress Trojan Information

Desktop.Spy malware description and removal detail
Categories:Spyware

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting Desktop.Spy:

Folders:
[%PROGRAMS%]\Desktop Spy 4.0
[%PROGRAM_FILES%]\DS
[%WINDOWS%]\DHPY

Registry Keys:
HKEY_LOCAL_MACHINE\software\microsoft\nkjbmp
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\desktop spy 4.0
HKEY_LOCAL_MACHINE\software\ngbdefault

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing Desktop.Spy:

An up-to-date copy of ExterminateIt should detect and prevent infection from Desktop.Spy.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Desktop.Spy manually.

To completely manually remove Desktop.Spy malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Desktop.Spy.

1. Use Task Manager to terminate the Desktop.Spy process.
2. Delete the original Desktop.Spy file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
CWS.Control Hijacker Removal instruction
Removing securityinfohere.com Hijacker
Bancos.HBO Trojan Removal instruction

Unexplained.Server malware description and removal detail
Categories:Trojan,Backdoor

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Unexplained.Server:

An up-to-date copy of ExterminateIt should detect and prevent infection from Unexplained.Server.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Unexplained.Server manually.

To completely manually remove Unexplained.Server malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Unexplained.Server.

1. Use Task Manager to terminate the Unexplained.Server process.
2. Delete the original Unexplained.Server file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Lythium Trojan Cleaner
SubSeven.v21G RAT Symptoms
Removing Bancos.HBJ Trojan
Removing Bancos.BNA Trojan

Bw.Mayberry.Andy malware description and removal detail
Categories:Trojan,Backdoor,Downloader,DoS
Also known as:

[Kaspersky]BW-based;
[Eset]Bw.Mayberry.Andy virus;
[Panda]Univ

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Bw.Mayberry.Andy:

An up-to-date copy of ExterminateIt should detect and prevent infection from Bw.Mayberry.Andy.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Bw.Mayberry.Andy manually.

To completely manually remove Bw.Mayberry.Andy malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bw.Mayberry.Andy.

1. Use Task Manager to terminate the Bw.Mayberry.Andy process.
2. Delete the original Bw.Mayberry.Andy file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Removing PSpy Trojan
Bagle.AY Worm Information

Ampmess malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Ampmess:

An up-to-date copy of ExterminateIt should detect and prevent infection from Ampmess.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Ampmess manually.

To completely manually remove Ampmess malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Ampmess.

1. Use Task Manager to terminate the Ampmess process.
2. Delete the original Ampmess file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove AXVenore Adware
Remove SillyDl.AZI Trojan
Drunk.joke Trojan Symptoms
Warfare DoS Cleaner

Amitis.Server malware description and removal detail
Categories:Trojan,Backdoor

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Amitis.Server:

An up-to-date copy of ExterminateIt should detect and prevent infection from Amitis.Server.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Amitis.Server manually.

To completely manually remove Amitis.Server malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Amitis.Server.

1. Use Task Manager to terminate the Amitis.Server process.
2. Delete the original Amitis.Server file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
HueyIns RAT Removal
TrojanDownloader.Win32.Small.gu Downloader Removal instruction

NOT.Pest malware description and removal detail
Categories:Adware

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing NOT.Pest:

An up-to-date copy of ExterminateIt should detect and prevent infection from NOT.Pest.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove NOT.Pest manually.

To completely manually remove NOT.Pest malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with NOT.Pest.

1. Use Task Manager to terminate the NOT.Pest process.
2. Delete the original NOT.Pest file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Pigeon.EMJ Trojan Cleaner
SillyDl.BYD Trojan Information
Frethog Trojan Symptoms
Pigeon.ECM Trojan Removal instruction

SillyDl.CVC malware description and removal detail
Categories:Trojan
Also known as:

[Kaspersky]Trojan-Downlaoder.Win32.Small.eqz;
[Other]Win32/SillyDl.CVC,Downloader

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing SillyDl.CVC:

An up-to-date copy of ExterminateIt should detect and prevent infection from SillyDl.CVC.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove SillyDl.CVC manually.

To completely manually remove SillyDl.CVC malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SillyDl.CVC.

1. Use Task Manager to terminate the SillyDl.CVC process.
2. Delete the original SillyDl.CVC file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Removing 123counts.com Tracking Cookie
Removing Bat.Metallica Trojan

Grams malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Grams:

An up-to-date copy of ExterminateIt should detect and prevent infection from Grams.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Grams manually.

To completely manually remove Grams malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Grams.

1. Use Task Manager to terminate the Grams process.
2. Delete the original Grams file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Doomob Trojan Removal instruction
Removing MagicLink Trojan
Remove Win32.PSW.Prostor Trojan
Bancos.FYF Trojan Removal instruction

DamnByte malware description and removal detail
Categories:Trojan
Also known as:

[Panda]Trj/DamnByte.5;
[Computer Associates]DamnByte.5!Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing DamnByte:

An up-to-date copy of ExterminateIt should detect and prevent infection from DamnByte.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove DamnByte manually.

To completely manually remove DamnByte malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with DamnByte.

1. Use Task Manager to terminate the DamnByte process.
2. Delete the original DamnByte file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Bancos.GNR Trojan Removal
Removing BO2K.IDEA.Encryption Trojan
krollontrack.com Tracking Cookie Information

Eyeblaster malware description and removal detail
Categories:Tracking Cookie

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Eyeblaster:

An up-to-date copy of ExterminateIt should detect and prevent infection from Eyeblaster.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Eyeblaster manually.

To completely manually remove Eyeblaster malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Eyeblaster.

1. Use Task Manager to terminate the Eyeblaster process.
2. Delete the original Eyeblaster file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Pigeon.BAY Trojan Removal
Vxidl.BBX Trojan Information
THCK.100b Trojan Removal

Crack malware description and removal detail
Categories:Trojan,Hacker Tool
Also known as:

[Panda]Trj/Crack,Trj/Darkman;
[Computer Associates]Crack,Darkman

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Crack:

An up-to-date copy of ExterminateIt should detect and prevent infection from Crack.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Crack manually.

To completely manually remove Crack malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Crack.

1. Use Task Manager to terminate the Crack process.
2. Delete the original Crack file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Delf.FN.Server Trojan Removal
BAT.Brng Trojan Information
kenmartinhao Trojan Information
Help.Express Adware Information

Pigeon.AEF malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Pigeon.AEF:

An up-to-date copy of ExterminateIt should detect and prevent infection from Pigeon.AEF.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Pigeon.AEF manually.

To completely manually remove Pigeon.AEF malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AEF.

1. Use Task Manager to terminate the Pigeon.AEF process.
2. Delete the original Pigeon.AEF file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Frethog.ADR Trojan Cleaner

Batcompi malware description and removal detail
Categories:Trojan
Also known as:

[Kaspersky]Trojan.Batcompi;
[Eset]Batcompi.A trojan;
[Panda]Batcompi.6730,Trojan Horse;
[Computer Associates]Batcompi,Boling

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Batcompi:

An up-to-date copy of ExterminateIt should detect and prevent infection from Batcompi.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Batcompi manually.

To completely manually remove Batcompi malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Batcompi.

1. Use Task Manager to terminate the Batcompi process.
2. Delete the original Batcompi file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove xn.zhler.gra.de Tracking Cookie
BeSeen.com Tracking Cookie Removal instruction
Destruction DoS Information

Fexper malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Fexper:

An up-to-date copy of ExterminateIt should detect and prevent infection from Fexper.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Fexper manually.

To completely manually remove Fexper malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Fexper.

1. Use Task Manager to terminate the Fexper process.
2. Delete the original Fexper file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Win32.VB.tg Trojan Symptoms
FameLeads Tracking Cookie Cleaner
FrontPage.PWS32 DoS Symptoms
Realbot Trojan Symptoms
One.13th Trojan Symptoms

VBS.Slogod malware description and removal detail
Categories:Trojan
Also known as:

[Other]VBS.Solow.D

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing VBS.Slogod:

An up-to-date copy of ExterminateIt should detect and prevent infection from VBS.Slogod.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove VBS.Slogod manually.

To completely manually remove VBS.Slogod malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with VBS.Slogod.

1. Use Task Manager to terminate the VBS.Slogod process.
2. Delete the original VBS.Slogod file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Boba Trojan Removal instruction
Remove Admin.Basher Trojan
Remove Bancos.GJB Trojan
SSBY.com Tracking Cookie Removal instruction

CWS.Time malware description and removal detail
Categories:Trojan,Backdoor,Hijacker,Hacker Tool
Also known as:

[Kaspersky]Backdoor.Goweh.d;
[Eset]Win32/Goweh.D trojan;
[Panda]Trj/StartPage.AV;
[Computer Associates]Backdoor/Goweh.d!Server
Visible Symptoms:
Files in system folders:
[%PROGRAM_FILES_COMMON%]\services\autorun.exe
[%PROGRAM_FILES_COMMON%]\services\clrssn.exe
[%PROGRAM_FILES_COMMON%]\services\iexplorer.exe
[%PROGRAM_FILES_COMMON%]\services\inetinf.exe
[%PROGRAM_FILES_COMMON%]\services\initial.sys
[%PROGRAM_FILES_COMMON%]\services\sistem.exe
[%PROGRAM_FILES_COMMON%]\services\systemxp.sys
[%PROGRAM_FILES_COMMON%]\services\time.exe
[%PROGRAM_FILES_COMMON%]\services\users32.exe
[%PROGRAM_FILES_COMMON%]\services\volume.exe
[%PROGRAM_FILES_COMMON%]\services\win64.exe
[%PROGRAM_FILES_COMMON%]\services\autorun.exe
[%PROGRAM_FILES_COMMON%]\services\clrssn.exe
[%PROGRAM_FILES_COMMON%]\services\iexplorer.exe
[%PROGRAM_FILES_COMMON%]\services\inetinf.exe
[%PROGRAM_FILES_COMMON%]\services\initial.sys
[%PROGRAM_FILES_COMMON%]\services\sistem.exe
[%PROGRAM_FILES_COMMON%]\services\systemxp.sys
[%PROGRAM_FILES_COMMON%]\services\time.exe
[%PROGRAM_FILES_COMMON%]\services\users32.exe
[%PROGRAM_FILES_COMMON%]\services\volume.exe
[%PROGRAM_FILES_COMMON%]\services\win64.exe

In order to ensure that the CWS.Time is launched automatically each time the system is booted, the CWS.Time adds a link to its executable file in the system registry:
HKLM\Microsoft\Windows\CurrentVersion\Run
[%PROGRAM_FILES_COMMON%]\services\autorun.exe
[%PROGRAM_FILES_COMMON%]\services\clrssn.exe
[%PROGRAM_FILES_COMMON%]\services\iexplorer.exe
[%PROGRAM_FILES_COMMON%]\services\inetinf.exe
[%PROGRAM_FILES_COMMON%]\services\sistem.exe
[%PROGRAM_FILES_COMMON%]\services\time.exe
[%PROGRAM_FILES_COMMON%]\services\users32.exe
[%PROGRAM_FILES_COMMON%]\services\volume.exe
[%PROGRAM_FILES_COMMON%]\services\win64.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista