Friday, November 28, 2008

CWS Downloader Trojan

How To Remove CWS Downloader?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
CWS Downloader is dangerous virus:
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.


CWS Downloader Symptoms:

Files:
[%PROGRAM_FILES%]\AutoPrint\srvany.exe
[%PROGRAM_FILES%]\AXIS Communications\AXIS ThinWizard\SRVANY.EXE
[%PROGRAM_FILES%]\Favorite Ware\Reminder.exe
[%PROGRAM_FILES%]\Gateway\EzTune\DTSRVC.exe
[%PROGRAM_FILES%]\Gateway\EzTune\dtsslsrv.exe
[%PROGRAM_FILES%]\gnway\ddns\gnsrv.exe
[%PROGRAM_FILES%]\LAN-Control\srvany.exe
[%PROGRAM_FILES%]\Network Monitor\netmon.exe
[%PROGRAM_FILES%]\Power Translator\LogoMedia TranslateDotNet Server.exe
[%PROGRAM_FILES%]\Priva\Priva Office\tools\srvany.exe
[%PROGRAM_FILES%]\RAdmin\r_server.exe
[%PROGRAM_FILES%]\Remote Task Manager\rtmservice.exe
[%PROGRAM_FILES%]\SAMSUNG\FW LiveUpdate\FWManager.exe
[%PROGRAM_FILES%]\SAPpc\SapGui\srvany.exe
[%PROGRAM_FILES%]\timbuktu pro\tb2launch.exe
[%PROGRAM_FILES%]\WinAntiVirus 2005 Pro\AVKernel.exe
[%PROGRAM_FILES%]\WinAntiVirus Pro 2006\FWSvc.exe
[%PROGRAM_FILES_COMMON%]\SNAPST~1\Common\X10nets.exe
[%PROGRAM_FILES_COMMON%]\WinTools\WToolsS.exe
[%PROGRAM_FILES_COMMON%]\X10\Common\X10nets.exe
[%SYSTEM%]\$sys$filesystem\$sys$DRMServer.exe
[%SYSTEM%]\acs.exe
[%SYSTEM%]\altsvc.exe
[%SYSTEM%]\aniServ.exe
[%SYSTEM%]\CfgSrvc.exe
[%SYSTEM%]\dllcache\win32\winlogon.exe
[%SYSTEM%]\drivers\etc\smss.exe
[%SYSTEM%]\FreezeScreenSaver.exe
[%SYSTEM%]\lsas.exe
[%SYSTEM%]\msCMTsrvc.exe
[%SYSTEM%]\ndesjcoq6.exe
[%SYSTEM%]\rtmservice.exe
[%SYSTEM%]\r_server.exe
[%SYSTEM%]\slee503.exe
[%SYSTEM%]\SnoopFreeSvc.exe
[%SYSTEM%]\Srvany.exe
[%SYSTEM%]\ujqdrj.exe
[%SYSTEM%]\windlls.exe
[%SYSTEM%]\x10nets.exe
[%WINDOWS%]\am9yZGFu\command.exe
[%WINDOWS%]\aQ\command.exe
[%WINDOWS%]\b3duZXI\command.exe
[%WINDOWS%]\c2FpZg\command.exe
[%WINDOWS%]\cmFj\command.exe
[%WINDOWS%]\IA\command.exe
[%WINDOWS%]\iejs.exe
[%WINDOWS%]\IGRvbg\command.exe
[%WINDOWS%]\Lg\command.exe
[%WINDOWS%]\QmFyYmFyYSBNIEhhd2tpbnM\command.exe
[%WINDOWS%]\QnJpYW4\command.exe
[%WINDOWS%]\QWFyb25z\command.exe
[%WINDOWS%]\RGFycmVu\command.exe
[%WINDOWS%]\RmFtLiBkZSBHcmVlZg\command.exe
[%WINDOWS%]\RWR3YXJkIEZvcnRlc2N1ZQ\command.exe
[%WINDOWS%]\S3Jpc3Rlbg\command.exe
[%WINDOWS%]\SG9tZQ\command.exe
[%WINDOWS%]\Sm9lIFN0ZXJu\command.exe
[%WINDOWS%]\SmFtYWhs\command.exe
[%WINDOWS%]\SmFtZXMgRCBWb3lsZXM\command.exe
[%WINDOWS%]\SmFtZXMgTGF1cmVuY2UgV2hpdGluZw\command.exe
[%WINDOWS%]\SmVhbmV0dGUgTGV1c2luaw\command.exe
[%WINDOWS%]\SmVmZiBNb3JhbGVz\command.exe
[%WINDOWS%]\SmVmZnJleQ\command.exe
[%WINDOWS%]\SnU\command.exe
[%WINDOWS%]\SnVhbiBGIExlemFtYQ\command.exe
[%WINDOWS%]\srvany.exe
[%WINDOWS%]\svcproc.exe
[%WINDOWS%]\SW5tYW4\command.exe
[%WINDOWS%]\SYSTEM\DRIVER\ntsrv.exe
[%WINDOWS%]\SYSTEM\DRIVER\ntuser.exe
[%WINDOWS%]\T0VN\command.exe
[%WINDOWS%]\T3duZXI\command.exe
[%WINDOWS%]\TGFycnkgTWFjaW9jaQ\command.exe
[%WINDOWS%]\TGlhbmUgV2hpdG5leQ\command.exe
[%WINDOWS%]\Tm9taXM\command.exe
[%WINDOWS%]\TmljayBTdGVyY3phbGE\command.exe
[%WINDOWS%]\TUlOSCBMRQ\command.exe
[%WINDOWS%]\TW9sbHkgQXJub2xk\command.exe
[%WINDOWS%]\twain_32\SiPix\SCBlink2\srvany.exe
[%WINDOWS%]\TWF0dCBaZXR6\command.exe
[%WINDOWS%]\TWU\command.exe
[%WINDOWS%]\U2V3YSBTaW5nYWw\command.exe
[%WINDOWS%]\U3RhbiBTbWl0aA\command.exe
[%WINDOWS%]\U3RlcGhlbiBBcndpbmU\command.exe
[%WINDOWS%]\UEI\command.exe
[%WINDOWS%]\UGF0IERlc2hhdw\command.exe
[%WINDOWS%]\UHJlZmVycmVkIEN1c3RvbWVy\command.exe
[%WINDOWS%]\UkQ\command.exe
[%WINDOWS%]\Um9iZXJ0bw\command.exe
[%WINDOWS%]\UXVhbGNvbW0\command.exe
[%WINDOWS%]\V2lsbCBNaXRjaGVsbA\command.exe
[%WINDOWS%]\VXNlcg\command.exe
[%WINDOWS%]\WGlhb0Jyb3RoZXI\command.exe
[%WINDOWS%]\YmI\command.exe
[%WINDOWS%]\YmVybmFyZCBj\command.exe
[%WINDOWS%]\YWRtaW4\command.exe
[%WINDOWS%]\zeta.exe
[%WINDOWS%]\ZHk\command.exe
[%WINDOWS%]\Zm8\command.exe
[%PROGRAM_FILES%]\AutoPrint\srvany.exe
[%PROGRAM_FILES%]\AXIS Communications\AXIS ThinWizard\SRVANY.EXE
[%PROGRAM_FILES%]\Favorite Ware\Reminder.exe
[%PROGRAM_FILES%]\Gateway\EzTune\DTSRVC.exe
[%PROGRAM_FILES%]\Gateway\EzTune\dtsslsrv.exe
[%PROGRAM_FILES%]\gnway\ddns\gnsrv.exe
[%PROGRAM_FILES%]\LAN-Control\srvany.exe
[%PROGRAM_FILES%]\Network Monitor\netmon.exe
[%PROGRAM_FILES%]\Power Translator\LogoMedia TranslateDotNet Server.exe
[%PROGRAM_FILES%]\Priva\Priva Office\tools\srvany.exe
[%PROGRAM_FILES%]\RAdmin\r_server.exe
[%PROGRAM_FILES%]\Remote Task Manager\rtmservice.exe
[%PROGRAM_FILES%]\SAMSUNG\FW LiveUpdate\FWManager.exe
[%PROGRAM_FILES%]\SAPpc\SapGui\srvany.exe
[%PROGRAM_FILES%]\timbuktu pro\tb2launch.exe
[%PROGRAM_FILES%]\WinAntiVirus 2005 Pro\AVKernel.exe
[%PROGRAM_FILES%]\WinAntiVirus Pro 2006\FWSvc.exe
[%PROGRAM_FILES_COMMON%]\SNAPST~1\Common\X10nets.exe
[%PROGRAM_FILES_COMMON%]\WinTools\WToolsS.exe
[%PROGRAM_FILES_COMMON%]\X10\Common\X10nets.exe
[%SYSTEM%]\$sys$filesystem\$sys$DRMServer.exe
[%SYSTEM%]\acs.exe
[%SYSTEM%]\altsvc.exe
[%SYSTEM%]\aniServ.exe
[%SYSTEM%]\CfgSrvc.exe
[%SYSTEM%]\dllcache\win32\winlogon.exe
[%SYSTEM%]\drivers\etc\smss.exe
[%SYSTEM%]\FreezeScreenSaver.exe
[%SYSTEM%]\lsas.exe
[%SYSTEM%]\msCMTsrvc.exe
[%SYSTEM%]\ndesjcoq6.exe
[%SYSTEM%]\rtmservice.exe
[%SYSTEM%]\r_server.exe
[%SYSTEM%]\slee503.exe
[%SYSTEM%]\SnoopFreeSvc.exe
[%SYSTEM%]\Srvany.exe
[%SYSTEM%]\ujqdrj.exe
[%SYSTEM%]\windlls.exe
[%SYSTEM%]\x10nets.exe
[%WINDOWS%]\am9yZGFu\command.exe
[%WINDOWS%]\aQ\command.exe
[%WINDOWS%]\b3duZXI\command.exe
[%WINDOWS%]\c2FpZg\command.exe
[%WINDOWS%]\cmFj\command.exe
[%WINDOWS%]\IA\command.exe
[%WINDOWS%]\iejs.exe
[%WINDOWS%]\IGRvbg\command.exe
[%WINDOWS%]\Lg\command.exe
[%WINDOWS%]\QmFyYmFyYSBNIEhhd2tpbnM\command.exe
[%WINDOWS%]\QnJpYW4\command.exe
[%WINDOWS%]\QWFyb25z\command.exe
[%WINDOWS%]\RGFycmVu\command.exe
[%WINDOWS%]\RmFtLiBkZSBHcmVlZg\command.exe
[%WINDOWS%]\RWR3YXJkIEZvcnRlc2N1ZQ\command.exe
[%WINDOWS%]\S3Jpc3Rlbg\command.exe
[%WINDOWS%]\SG9tZQ\command.exe
[%WINDOWS%]\Sm9lIFN0ZXJu\command.exe
[%WINDOWS%]\SmFtYWhs\command.exe
[%WINDOWS%]\SmFtZXMgRCBWb3lsZXM\command.exe
[%WINDOWS%]\SmFtZXMgTGF1cmVuY2UgV2hpdGluZw\command.exe
[%WINDOWS%]\SmVhbmV0dGUgTGV1c2luaw\command.exe
[%WINDOWS%]\SmVmZiBNb3JhbGVz\command.exe
[%WINDOWS%]\SmVmZnJleQ\command.exe
[%WINDOWS%]\SnU\command.exe
[%WINDOWS%]\SnVhbiBGIExlemFtYQ\command.exe
[%WINDOWS%]\srvany.exe
[%WINDOWS%]\svcproc.exe
[%WINDOWS%]\SW5tYW4\command.exe
[%WINDOWS%]\SYSTEM\DRIVER\ntsrv.exe
[%WINDOWS%]\SYSTEM\DRIVER\ntuser.exe
[%WINDOWS%]\T0VN\command.exe
[%WINDOWS%]\T3duZXI\command.exe
[%WINDOWS%]\TGFycnkgTWFjaW9jaQ\command.exe
[%WINDOWS%]\TGlhbmUgV2hpdG5leQ\command.exe
[%WINDOWS%]\Tm9taXM\command.exe
[%WINDOWS%]\TmljayBTdGVyY3phbGE\command.exe
[%WINDOWS%]\TUlOSCBMRQ\command.exe
[%WINDOWS%]\TW9sbHkgQXJub2xk\command.exe
[%WINDOWS%]\twain_32\SiPix\SCBlink2\srvany.exe
[%WINDOWS%]\TWF0dCBaZXR6\command.exe
[%WINDOWS%]\TWU\command.exe
[%WINDOWS%]\U2V3YSBTaW5nYWw\command.exe
[%WINDOWS%]\U3RhbiBTbWl0aA\command.exe
[%WINDOWS%]\U3RlcGhlbiBBcndpbmU\command.exe
[%WINDOWS%]\UEI\command.exe
[%WINDOWS%]\UGF0IERlc2hhdw\command.exe
[%WINDOWS%]\UHJlZmVycmVkIEN1c3RvbWVy\command.exe
[%WINDOWS%]\UkQ\command.exe
[%WINDOWS%]\Um9iZXJ0bw\command.exe
[%WINDOWS%]\UXVhbGNvbW0\command.exe
[%WINDOWS%]\V2lsbCBNaXRjaGVsbA\command.exe
[%WINDOWS%]\VXNlcg\command.exe
[%WINDOWS%]\WGlhb0Jyb3RoZXI\command.exe
[%WINDOWS%]\YmI\command.exe
[%WINDOWS%]\YmVybmFyZCBj\command.exe
[%WINDOWS%]\YWRtaW4\command.exe
[%WINDOWS%]\zeta.exe
[%WINDOWS%]\ZHk\command.exe
[%WINDOWS%]\Zm8\command.exe

Registry Keys:
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy__11f*00df*00e4*0006#*00b7*00ba*00c4*00d6`i
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ 11F%DF%E4%06#%B7%BA%C4%D6`I
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\$sys$DRMServer
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\%8F 6Q%D4%F5%13'%AA%B4%C6%D08
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ACS
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ANISERVICE
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AppSched
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AppSched10
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Asset Management Daemon
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AutoPrintPro
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AVKernel
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Blink2PnP
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CfgSrvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\cmdservice
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DanaReg
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DanaSubst
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DistRestart
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Domino
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DTSRVC
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Endcust
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FreezeScreenSaver
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FWSvc
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\GHServer
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gnwayDDNS
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HsspConfig
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IBAffinity
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LAN-MySQL
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LogDataMgr
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LogoMedia TranslateDotNet Server
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Maximizer1
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msCMTSrvc
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netbios Helper Service
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netddehard
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Network Monitor
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Network Switching Alerter
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTBOOT
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTLOAD
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTSVCMGR
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Office Mail
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PosysMirror
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\promtdbmsserver
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\promtmonitor
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PSecret
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PsqlWge
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\QcomPostInstall
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RecTracBroker
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RRAANXGN
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RTM
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\r_server
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SAP IGS Service
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SLEE_503_SERVICE
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SnoopFreeSvc
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SurferService
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SvcProc
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sv_logger
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tadxrgsb6
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tb2Launch
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ThinWizard
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TunnelBroker
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Windows smss
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\wintoolssvc
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\x10nets
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ZESOFT

Registry Values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Keylogger Trojan Symptoms
RegClean Ransomware Symptoms

No comments: