Security Stronghold security made easy

Trojan/CWS Combo Removal: Remove Trojan/CWS Combo Easily


* What is Trojan/CWS Combo

* Download WiperSoft Antispyware Malware Remediation Tool

* Remove Trojan/CWS Combo manually

* Get Professional Support

* Read Comments


Threat indicator: HIGH

Threat's profile

Name of the threat:

Command or file name:

Threat type:

Affected OS:

Trojan/CWS Combo

winupdate.exe

Spyware

Win32 (Windows XP, Vista, Seven, 8)


The US FTC (FTC) advised on the site to remove Trojan/CWS Combo, what to do when trying to fulfill Trojan/CWS Combo removal and assert from Trojan/CWS Combo with some seemly Trojan/CWS Combo removal tool. In 2006 Trojan/CWS Combo was intended one of the most numerous malicious programs running on system making an emergent dure necessity in Trojan/CWS Combo removal tools that would make apt to remove Trojan/CWS Combo and fulfill seemly Trojan/CWS Combo removals. Publicity is also a method Trojan/CWS Combo tracks user conduct and habits. Trojan/CWS Combo that acts as website proxy or Browser Helper Object can surrogate HTML links with the ones to Trojan/CWS Combo manager WWW site. Trojan/CWS Combo removal tools inspect the information contents of the system registry, computer PC files and installed programs and remove Trojan/CWS Combo that uncovers itself. Steve Gibson initiated in the new class of growing Trojan/CWS Combo removal tools.


Trojan/CWS Combo intrusion method

Trojan/CWS Combo copies its file(s) to your hard disk. Its typical file name is winupdate.exe. Then it creates new startup key with name Trojan/CWS Combo and value winupdate.exe. You can also find it in your processes list with name winupdate.exe or Trojan/CWS Combo. Also, it can create folder with name Trojan/CWS Combo under C:\Program Files\ or C:\ProgramData.

If you have further questions about Trojan/CWS Combo, please call us on the phone below. It is toll free. Or you can use programs to remove Trojan/CWS Combo automatically below.


Download Spyhunter by Enigma Software

Download this advanced removal tool and solve problems with Trojan/CWS Combo and winupdate.exe (download of fix will start immediately):

Download WiperSoft Antispyware to remove Trojan/CWS Combo

* WiperSoft Antispyware was developed to remove threats like Trojan/CWS Combo in automatic mode. Remover has active module to protect PC from hijackers, trojans, ransomware and other viruses. Trial version of SpyHunter provides detection of computer viruses for FREE. To remove malware, you have to purchase the full version of Spyhunter.

Features of WiperSoft Antispyware

* Removes all files created by viruses.

* Removes all registry entries created by viruses.

* You can activate System and Network Guards and forget about malware.

* Can fix browser problems and protect browser settings.

* Removal is guaranteed - if SpyHunter fails ask for FREE support.

* 24/7 Spyware Helpdesk Support included into the package.


Download Spyhunter Remediation Tool by Enigma Software

Download antimalware designed specifically to remove threats like Trojan/CWS Combo and winupdate.exe (download of fix will start immediately):

Download AntiMalware to remove Trojan/CWS Combo

Features of Spyhunter Remediation Tool

* Removes all files created by Trojan/CWS Combo.

* Removes all registry entries created by Trojan/CWS Combo.

* Fixes browser redirection and hijack if needed.

* "Toolbar Remover" tool will help you get rid of unwanted browser extensions.

* Removal is guaranteed - if Spyhunter Remediation Tool fails ask for FREE support.

* 24/7 Helpdesk Support and 5 hours of Remote Support via GoToAssist included into the package.

Let our support team solve your problem with Trojan/CWS Combo and repair Trojan/CWS Combo right now!

support person

Call us using the number below and describe your problem with Trojan/CWS Combo. Support team will offer you solution in several minutes and give a step-by-step instruction on how to remove Trojan/CWS Combo. Trouble-free tech support with over 10 years experience removing malware.


1-877-219-8984


Software Industry Professionals Member
Threat's description and solution are developed by Security Stronghold security team.

Here you can also learn:

* Technical details of Trojan/CWS Combo threat.

* Manual Trojan/CWS Combo removal.

* Download Trojan/CWS Combo Removal Tool.


How to remove Trojan/CWS Combo manually?

This problem can be solved manually by deleting all registry keys and files connected with Trojan/CWS Combo, removing it from starup list and unregistering all corresponding DLLs. Additionally missing DLL's should be restored from distribution in case they are corrupted by Trojan/CWS Combo.

To get rid of Trojan/CWS Combo, you should:

file logo

1. Kill the following processes and delete the appropriate files:

  • dnscleaner.exe
  • neted32.dll
  • 10915.exe
  • 13681.exe
  • 1QmvvWFJ.exe
  • 216.dll
  • 2T.exe
  • 2vrpbq.exe
  • 4savwfms.exe
  • 64 Extra Drv.exe
  • 6EyPsi0rf.exe
  • 6nat9u00.exe
  • 6XE3SZPMIJ.DLL
  • 6xo4svc841f.dll
  • 8hjrgyophlthd.exe
  • abexaxch.exe
  • abi.exe
  • AChkr.exe
  • ActPanel.exe
  • ACTSHEXT.EXE
  • acvt.exe
  • adabr.exe
  • addrk.exe
  • adgdcjaf.exe
  • adsnds74.exe
  • adverrovag.exe
  • aeuw.exe
  • ajctres2.exe
  • ajpf.dll
  • aklvzp.exe
  • al-popup-jerry bailey.html
  • aleuqvgg.exe
  • alfcmk.exe
  • all.exe
  • allbeautifulgirls.exe
  • Amok upload.exe
  • aMQCAwBN.exe
  • apieb.exe
  • apilh32.exe
  • apiol.exe
  • apius32.exe
  • apizh.exe
  • appjq32.exe
  • appta32.exe
  • APPZP32.EXE
  • ati3d1ag.exe
  • atlby32.exe
  • ATLTO.EXE
  • atlyz32.dll
  • atrace34.exe
  • autoheal.exe
  • avojcjkr.exe
  • awd71fra.exe
  • awinrar.exe
  • axuhsh.exe
  • azgnehkb.exe
  • Bash third.exe
  • bbyiuwbo.exe
  • belh.exe
  • bhbypc.exe
  • bionggb.exe
  • bird tons glue.exe
  • Blue Defy.exe
  • bmrvpn.exe
  • Body obj.dll
  • BOOTVID1.exe
  • Bows The.exe
  • buildsend.exe
  • bvqqozgb.exe
  • Byao.exe
  • Byte dvd.exe
  • bzoybt.exe
  • camocx81.exe
  • CAPESNPN.exe
  • CCBBOPB.DLL
  • CDM05411.exe
  • cdoacm.exe
  • cdrah.ini
  • chiiyc.exe
  • cijmjc.exe
  • cjeqlc.exe
  • ckbn.dll
  • ckihfc.exe
  • clb72706.exe
  • clipg.exe
  • cmcder.exe
  • cmwh.exe
  • Cnz2.exe
  • crmt.exe
  • CSRSSW.EXE
  • CTFMONSS.EXE
  • ctkpic.exe
  • cuclnp.exe
  • cvahopez.exe
  • cvszje.exe
  • cvuocd.exe
  • cwdiali.exe
  • cyygwbsp.exe
  • d3aq.exe
  • d3cr32.exe
  • d3dl.exe
  • d3ga32.exe
  • d3kh.exe
  • D3MJ32.EXE
  • d3sd.exe
  • d88gm5lfo6491thd.exe
  • dacm.dll
  • dajet.exe
  • daven.exe
  • dblswwr.exe
  • dciuirt.exe
  • ddar.exe
  • DefaultArmyPoke.exe
  • dggbub.exe
  • dhculc.exe
  • dhknqu.exe
  • disablecaps.exe
  • dje.dll
  • dkv.exe
  • dline.exe
  • Dractx.exe
  • draw cdrom.exe
  • drmv2clt.exe
  • dvdppp.exe
  • dwcg2.exe
  • dylpab.exe
  • e002lado1d0c.dll
  • e0eqgo3t.exe
  • ebcheckw.exe
  • eber.exe
  • ebsglgy.exe
  • EEIZA.exe
  • eetjanxq.exe
  • eghwjc.exe
  • eivvihdl.exe
  • ejkcom.exe
  • elersf.exe
  • EN2232V.exe
  • EPEQF.EXE
  • erfdiskp.exe
  • erfh013p.exe
  • esbecr.exe
  • eserstart.exe
  • essdc.exe
  • evqn.exe
  • ewfepc.exe
  • exrlww.exe
  • fbczbuqe.exe
  • fgtvis.exe
  • fhrkvcdk.exe
  • File vga.exe
  • flane.dll
  • flashksk.exe
  • flashshl.dll
  • flwvn.exe
  • fmszd.exe
  • fndE91lHE.exe
  • fnpefsee.exe
  • ftnrdn.exe
  • gbqnut.exe
  • gcfkdm.exe
  • ghov.exe
  • githolbu.exe
  • gjsxubad.exe
  • gK0HNJCcd.exe
  • gtkn.exe
  • gtwatch.exe
  • gvdcn.exe
  • hardc.exe
  • hdejmk.exe
  • hgkhgca.dll
  • hhnt.exe
  • hixitgf.exe
  • hmbbij.dll
  • hmbmkol.exe
  • holdreadme.exe
  • hoobyg.exe
  • hqiklg.exe
  • hrofgg.exe
  • hsaveao.exe
  • htmdefy.exe
  • huhff.exe
  • hupcnwj.exe
  • hw6rh.exe
  • hwmico.exe
  • ibglit.exe
  • iconw.exe
  • idgenp.exe
  • Idk277g.exe
  • idr_17b.exe
  • idsn.exe
  • iebq.exe
  • iegu.exe
  • iehf.exe
  • ieiv.exe
  • iemr.exe
  • ieoq.exe
  • ietlbass.dll
  • ietlbass32.dll
  • ightsl.exe
  • iinaba.dll
  • ijhrbqr.exe
  • ijqnqqdn.exe
  • ijsbsj.exe
  • ikivnp.exe
  • iloveyou.exe
  • ipgnutqz.exe
  • ipgr.exe
  • ippk32.exe
  • IPRD32.EXE
  • iprpai.exe
  • ipsvmsnap.dll
  • isbkups.exe
  • ishu.exe
  • javaew.exe
  • javafy.exe
  • javajg.exe
  • javaqq.exe
  • javaxz32.exe
  • javaye32.exe
  • jbeqjm.exe
  • JBPER.DLL
  • jckp.dll
  • jgmetm.exe
  • jhevfxad.exe
  • Jndhtaf.exe
  • jqwd.exe
  • jspdrv.exe
  • jugspoke.exe
  • jzersvq.exe
  • kalvewt32.exe
  • kalvogh32.exe
  • kkatrpv.exe
  • kkjmmc.exe
  • klcvpt.exe
  • kmofo.txt:qrbel
  • Kn1mj0.exe
  • krniqth.exe
  • KrxH5g.exe
  • kxatgv.exe
  • kxilolgl.exe
  • LAZVLFDP.EXE
  • LDKoO9K.exe
  • ldpr54rop.exe
  • LEBC.DLL
  • lem.dll
  • lfmvices.exe
  • lhggtc.exe
  • listreal.exe
  • ljfdmg.exe
  • llckyjsgp.lib
  • lmnkx.exe
  • lpqctfrm.exe
  • lrsvtmf.exe
  • lsiuiojz.exe
  • lz3rslvr.exe
  • MDDCME.DLL
  • Meruoq.exe
  • mfcsh.exe
  • mfcsu32.exe
  • mfcuq.exe
  • mfcwl32.exe
  • microsoft office.lnk
  • misswc.exe
  • Mobr9V4O.exe
  • modrcl32.exe
  • mplam6.exe
  • mprocessor.exe
  • MpsOn.exe
  • msbfqp.com
  • mseb32.exe
  • msmsgrxp.exe
  • msqyux.com
  • msrev41.dll
  • msriexec16.exe
  • msrore.exe
  • mswu.exe
  • msxv32.exe
  • mtduic.exe
  • mtuj.exe
  • mtzj63f.exe
  • mv8.exe
  • mviewd.exe
  • mvxitgmc.dll
  • neft.exe
  • netfs32.exe
  • netgr.exe
  • netim.exe
  • netng32.exe
  • netoa32.exe
  • netoj32.exe
  • netsnd.exe
  • netwizh.exe
  • NETWP32.EXE
  • ngqmmjds.exe
  • ngzaha.exe
  • nicodeu.exe
  • nkpolgb.exe
  • nnkckka.dll
  • nO9.exe
  • noktzc.exe
  • ntddetect.exe
  • NTDW32.EXE
  • ntjc32.dll
  • ntlanui2.exe
  • ntlr.exe
  • ntnd32.exe
  • ntnut32.exe
  • ntsl32.exe
  • ntsysl.exe
  • nwxab.exe
  • nyhuv.exe
  • o4svl32.exe
  • obj cast skip.exe
  • ogonuil.exe
  • ohgtg.exe
  • oiykxv.exe
  • ole2nls.exe
  • ompois.exe
  • onbgrcf.exe
  • OOUO.EXE
  • opbffcx.exe
  • orphk.dll
  • orsc.exe
  • otmvta.exe
  • ouor.exe
  • owdn.exe
  • owns film city.exe
  • oxgxut.exe
  • p0z8y.dll
  • pbefh.dll
  • pboptions.exe
  • pc32.exe
  • pcdljkb.dll
  • pdf2bb2.dll
  • pead.exe
  • pilmx.dll
  • PLJB.DLL
  • pmssig.exe
  • pnj.dll
  • pntolm.exe
  • popupdefence.dll
  • preInMPP.exe
  • psexesvc.exe
  • ptuilc.exe
  • pxrtmgri.exe
  • pyglew.exe
  • pzabbv.exe
  • qadm.exe
  • qarbpvmc.exe
  • qbfwbk.exe
  • qdgrx.exe
  • qecfxp.exe
  • qgcr6bpgz.exe
  • qJd1.exe
  • qlgt.exe
  • qnkf.exe
  • qorwefzf.exe
  • qpicxqkd.exe
  • qpwnhxdg.dll
  • qvwp.exe
  • qwagntdr.exe
  • qwetcm.exe
  • qzdsxo.exe
  • qzkt.exe
  • qzzktc.exe
  • raoxkvmb.exe
  • rbkfcu.exe
  • rdnviax.exe
  • rect exit.exe
  • regs flaw.dll
  • replacer.exe
  • restun.exe
  • riqmkmebl.exe
  • rofijgv.exe
  • rounstlP.exe
  • roxkih.exe
  • ryhlzo.exe
  • scansdisk.exe
  • schk32.exe
  • scmzit.exe
  • scr win body.exe
  • sdckill.exe
  • sdkbv32.dll
  • sdkcf.exe
  • secure.exe
  • setfgi.dll
  • setup ace keep.exe
  • sfjpxlt.exe
  • SHOMW.exe
  • silentapp.exe
  • sjtes40m.exe
  • skip face.exe
  • skttbost.exe
  • slyrwnwb.exe
  • snmp32w.exe
  • SnuQDCP5.exe
  • spbde40m.exe
  • Srtv.exe
  • ssrunscript.exe
  • start boob.exe
  • svcimsdo.exe
  • swgznc.exe
  • swreso.exe
  • swtv.exe
  • sxml3am.exe
  • sxs.exe
  • SxxrR5Uy.exe
  • sxyt.exe
  • syf9524v.exe
  • sysbz.exe
  • sysmtd32.exe
  • sysqe32.exe
  • SYSSP32.DLL
  • systy32.exe
  • SYSZA32.EXE
  • szargjor.exe
  • tah.exe
  • tblwdrg.exe
  • texmr.exe
  • tgqdnyb.exe
  • thrt.exe
  • tio412n.exe
  • tJfwzpS.exe
  • tkkhxpcl.exe
  • tpbbqc.exe
  • tpmchz.exe
  • tpz.exe
  • trustras.exe
  • tss.exe
  • tthk90wl.exe
  • tukfy.exe
  • twsaim.exe
  • tyjdvxqt.exe
  • tzbmfi.exe
  • u99xki.exe
  • ubtt.exe
  • uhjejc.exe
  • Uit99525.exe
  • ujytob.exe
  • ulxrvb.exe
  • umdetup.exe
  • up base view.exe
  • UpdInstall.exe
  • usrsapi.exe
  • utczctux
  • uwqgvqc.exe
  • vcjqxe.exe
  • vct32163.exe
  • vfswue.exe
  • vgmto8q.exe
  • vgxncfev.exe
  • vtdqkzf.exe
  • vtmg.dll
  • vub.exe
  • wadpxay.exe
  • wcbrcc.exe
  • wcfkpvdf.exe
  • winb.dll
  • windp32.exe
  • winld.exe
  • winmsdc.exe
  • winpack.exe
  • WINWH.EXE
  • wjjnewa.exe
  • wmdevice.exe
  • wpeROape.exe
  • wuwqow.exe
  • wwjatmq.exe
  • wzcsapi.exe
  • xboglc.exe
  • xenbse32.exe
  • Xhrmy.exe
  • xmuogc.exe
  • xyn.exe
  • xywfsc.exe
  • yhilfm.exe
  • ylbwqddi.exe
  • ylkp.exe
  • ylwjol.exe
  • ypbrgbj.exe
  • yqjywccd.dll
  • yrkl.exe
  • yrqlea.exe
  • ywivgg.exe
  • ywokvd.exe
  • yxcd.exe
  • yzuvglkd.exe
  • zapkxzkg5.exe
  • zbtqyc.exe
  • zdjhjp.exe
  • ZLWt.exe
  • znzubvs.exe
  • zpfujj.exe
  • zqruknk.exe
  • zrkiic.exe
  • zsxcwiac.exe
  • zunarmx.exe
  • zxgenvtw.exe

Warning: you should delete only those files which checksums are listed as malicious. There may be valid files with the same names in your system. We recommend you to use WiperSoft Antispyware Malware Remediation Tool for safe problem solution.

**Trial version of SpyHunter provides detection of computer viruses for FREE. To remove malware, you have to purchase the full version of Spyhunter.

windows folder logo

2. Delete the following malicious folders:

  • %appdata%\16 Multi Thunk Four\
  • %favorites%\i-lookup favorites\
  • %programfiles%\{vxtuuxr\
  • %programfiles%\antecurbfile\
  • %programfiles%\dupeth~1\
  • %programfiles%\gluedefy\
  • %programfiles%\mprocessor\
  • %programfiles%\saveba~1\
  • %programfiles%\closef~1\
  • temp%\
  • %appdata%\PROGRA~1\
  • %system%\hcwc\
  • %windows%\repair\
  • %system%\services\
  • %programfiles%\allbeautifulgirls\
  • Documents and Settings\All Users\Application Data\BASENOUNARMYMPEG\
  • %appdata%\HEARTS~1\
  • %appdata%\GLOBAL~1\
  • Documents and Settings\All Users\Application Data\That sect remote frag\
  • %programfiles%\WIPETI~1\
  • %appdata%\THATVG~1\
  • %appdata%\Flaw Eggs Amen Each\
  • %programfiles%\Izbnj\
  • Documents and Settings\All Users.WINDOWS\Application Data\glue chic bore build\
  • %windows%\cursors\
  • %profile%\locals~1\temp\
  • %appdata%\AXISFI~1\
  • %programfiles%\support.com\charter\bin\
  • Documents and Settings\All Users\Application Data\Wave roam grid bits\
  • %appdata%\meta heck default mp3\
  • %programfiles%\dataca~1\
  • %programfiles%\bagspr~1\
  • Documents and Settings\All Users\Application Data\Proxy inter book for\
  • %system%\ctrdppa\
  • %programfiles%\Injyr\
  • Documents and Settings\All Users\Application Data\The blue 4 01\
  • %windows%\mshosts\
  • %programfiles%\thiskn~1\
  • %programfiles%\ultimate popup defence pro\
  • Documents and Settings\All Users\Application Data\flaw sign regs keep\
  • %programfiles%\idolnu~1\
  • %programfiles%\realba~1\
  • Documents and Settings\All Users.WINDOWS\Application Data\default copy cash city\
  • %appdata%\THUNKH~1\
  • %programfiles%\launch manager\
  • %system%\ikjxl\

windows registry logo

3. Delete the following malicious registry entries and\or values:

  • Key: CLSID\{13f90341-ad79-4a9f-9b57-0234675670d6}
  • Key: CLSID\{1e1b2879-88ff-11d2-8d96-d7acac97972f}
  • Key: CLSID\{29a38549-af6f-11d4-89d6-bc1dfd912b00}
  • Key: CLSID\{4e7bd74f-2b8d-469e-a58d-8f6fa787ad2d}
  • Key: CLSID\{5cf8a355-f8c6-4883-9c25-49d01a7d25be}
  • Key: CLSID\{75b3573b-a881-4d03-9d55-eecba889ac24}
  • Key: CLSID\{920cb957-3665-45e5-92e9-a37b58af2758}
  • Key: CLSID\{97847d03-bd75-43d2-bf56-74d59b54b81e}
  • Key: CLSID\{A9A674BF-771F-42E5-A440-D20DDA85A862}
  • Key: CLSID\{d879a0f1-2b3b-4409-8879-fad6e49e1ea9}
  • Key: CLSID\{f36c1198-fc6b-4012-9928-dfa76fb56cc3}
  • Key: CLSID\{fa040b34-fbe9-4bef-9d85-f90becaaca99}
  • Key: CLSID\{fc4c5eae-66ee-11d4-bc67-0000e8e582d2}
  • Key: typelib\{0d4ef487-bbb7-4d83-b064-88126e45d4f0}
  • Key: software\bssgglgllllfrie
  • Key: software\classes\clsid\{13f90341-ad79-4a9f-9b57-0234675670d6}
  • Key: software\classes\clsid\{1e1b2879-88ff-11d2-8d96-d7acac97972f}
  • Key: software\classes\clsid\{29a38549-af6f-11d4-89d6-bc1dfd912b00}
  • Key: software\classes\clsid\{4e7bd74f-2b8d-469e-a58d-8f6fa787ad2d}
  • Key: software\classes\clsid\{5cf8a355-f8c6-4883-9c25-49d01a7d25be}
  • Key: software\classes\clsid\{75b3573b-a881-4d03-9d55-eecba889ac24}
  • Key: software\classes\clsid\{97847d03-bd75-43d2-bf56-74d59b54b81e}
  • Key: software\classes\clsid\{d879a0f1-2b3b-4409-8879-fad6e49e1ea9}
  • Key: software\classes\clsid\{f36c1198-fc6b-4012-9928-dfa76fb56cc3}
  • Key: software\classes\clsid\{fc4c5eae-66ee-11d4-bc67-0000e8e582d2}
  • Key:
    software\microsoft\code store database\distribution units\{00000ef1-0786-4633-87c6-1aa7a44296da}
  • Key:
    software\microsoft\code store database\distribution units\{9c691a33-7dda-4c2f-be4c-c176083f35cf}
  • Key:
    software\microsoft\code store database\distribution units\{bd11a280-2e73-11cf-b6cf-00aa00a74daf}
  • Key:
    software\microsoft\code store database\distribution units\{d61570b1-61e1-6851-cbf7-b7915cbdfa4e}
  • Key: software\microsoft\windows\currentversion\explorer\browser helper objects
    \{13f90341-ad79-4a9f-9b57-0234675670d6}
  • Key: software\microsoft\windows\currentversion\explorer\browser helper objects
    \{1e1b2879-88ff-11d2-8d96-d7acac97972f}
  • Key: software\microsoft\windows\currentversion\explorer\browser helper objects
    \{29a38549-af6f-11d4-89d6-bc1dfd912b00}
  • Key: software\microsoft\windows\currentversion\explorer\browser helper objects
    \{4e7bd74f-2b8d-469e-a58d-8f6fa787ad2d}
  • Key: software\microsoft\windows\currentversion\explorer\browser helper objects
    \{5a04c6ca-9f26-4a84-b5c4-e67e817d9bc7}
  • Key: software\microsoft\windows\currentversion\explorer\browser helper objects
    \{97847d03-bd75-43d2-bf56-74d59b54b81e}
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
    \{A9A674BF-771F-42E5-A440-D20DDA85A862}
  • Key: software\microsoft\windows\currentversion\explorer\browser helper objects
    \{d879a0f1-2b3b-4409-8879-fad6e49e1ea9}
  • Key: software\microsoft\windows\currentversion\explorer\browser helper objects
    \{f36c1198-fc6b-4012-9928-dfa76fb56cc3}
  • Key: software\microsoft\windows\currentversion\explorer\browser helper objects
    \{fa040b34-fbe9-4bef-9d85-f90becaaca99}
  • Key: software\microsoft\windows\currentversion\explorer\browser helper objects
    \{fc4c5eae-66ee-11d4-bc67-0000e8e582d2}
  • Key:
    software\microsoft\internet explorerinternet0%\URLSearchHooks\{1204A789-0139-F9B1-BF9E-4BECFF8288F8}
  • Key:
    software\microsoft\internet explorerinternet0%\URLSearchHooks\{FA239BAA-E441-30B6-0ABB-3EAAF567B877}
  • Key: CLSID\{422CB822-000B-4721-8B75-693145DB8154}
  • Key: CLSID\{5a04c6ca-9f26-4a84-b5c4-e67e817d9bc7}
  • Key: CLSID\{9C0B8641-9AC7-11D8-9961-00E00128BE47}
  • Key: CLSID\{9E592E9C-2A67-4124-9973-D463E7223803}
  • Key: Interface\{422CB822-000B-4721-8B75-693145DB8154}
  • Key: Interface\{9C0B8641-9AC7-11D8-9961-00E00128BE47}
  • Key: Interface\{9E592E9C-2A67-4124-9973-D463E7223803}
  • Key: Interface\{A9A674BF-771F-42E5-A440-D20DDA85A862}
  • Key: SOFTWARE\Classes\CLSID\{1CB13C88-96B6-11d6-9AF5-D12D26EE1F36}
  • Key: SOFTWARE\Classes\CLSID\{8FB4C800-6AFD-11D9-B4DD-0040C13A1371}
  • Key: SOFTWARE\Classes\CLSID\{A673D519-E680-499E-AA66-255D3A7214A1}
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
    \{039A2790-6CCF-4A57-A5EB-856D6F5CDD7C}
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
    \{1A94240C-29A6-4669-844C-D6C33E5816D4}
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
    \{386FBB8D-E1E9-4D92-9A54-E07205BA73B1}
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
    \{3FF1357C-9436-0D95-D054-10557CF37B6D}
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
    \{422CB822-000B-4721-8B75-693145DB8154}
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
    \{42393D69-260C-406E-A1C6-0EE8DFE2E3E5}
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
    \{483094D2-1A36-49D3-A4ED-702E2BB26313}
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
    \{4C1B116F-2860-46db-8E6C-B4BFC4DFD683}
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
    \{5742F79A-1D91-42c4-990C-B46CF55A6478}
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
    \{6CD2385E-C763-5FC5-D970-65550D812C12}
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
    \{73662C48-BA2F-4287-93B0-ADEA0EAD3A0D}
  • Key: software\microsoft\windows\currentversion\explorer\browser helper objects
    \{76F30C6C-4DFA-4092-8B75-1CCA31EC02FF}
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
    \{81D1BD81-5218-5EBA-1C22-2CF008BD699B}
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
    \{9084EE11-BDFB-4E47-AC1F-FE2E09779A81}
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
    \{90AC6A48-3C20-B126-8E7D-EFEF0381C98A}
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
    \{92C9C0BC-4A1E-4541-A244-2CD63754A5BD}
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
    \{98BEE562-A984-68F6-3C3D-5BA8C901DC71}
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
    \{9C0B8641-9AC7-11D8-9961-00E00128BE47}
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
    \{9C3F905D-AD42-4A7D-A0E5-0E129A70D5BF}
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
    \{9E592E9C-2A67-4124-9973-D463E7223803}
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
    \{B22E8FC3-DFE1-03EF-A9E8-5969A72242ED}
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
    \{B8D2C8BF-153D-46E3-96E3-E9423550019E}
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
    \{D44724B2-CD91-41AA-9DED-ED7647D143A2}
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
    \{D4D6E938-A715-0A71-38BD-176F21ADA2F9}
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
    \{D8F31A52-4A98-397B-48A7-1CA3B87C457E}
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
    \{E89E65D9-6496-47DF-BB32-7E939CF39D02}
  • Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
    \{E98DDD14-95AB-47D0-9C3E-B7E5F5880A48}
  • Key: SOFTWARE\motoin
  • Key: TypeLib\{422CB822-000B-4721-8B75-693145DB8154}
  • Key: TypeLib\{9C0B8641-9AC7-11D8-9961-00E00128BE47}
  • Key: TypeLib\{9E592E9C-2A67-4124-9973-D463E7223803}
  • Key: TypeLib\{A9A674BF-771F-42E5-A440-D20DDA85A862}
  • Key: voiddummy
  • Key: software\microsoft\internet explorerinternet0%\toolbar
    Value: {4e7bd74f-2b8d-469e-a58d-8f6fa787ad2d}
  • Key: software\microsoft\internet explorerinternet0%\toolbar
    Value: {5cf8a355-f8c6-4883-9c25-49d01a7d25be}
  • Key: software\microsoft\internet explorerinternet0%\toolbar
    Value: {75b3573b-a881-4d03-9d55-eecba889ac24}
  • Key: software\microsoft\internet explorerinternet0%\toolbar\webbrowser
    Value: {339BB23F-A864-48C0-A59F-29EA915965EC}
  • Key: software\microsoft\internet explorerinternet0%\toolbar\webbrowser
    Value: {4BF85800-B52A-C88D-3E1A-BC6726585FA5}
  • Key: software\microsoft\internet explorerinternet0%\toolbar\webbrowser
    Value: {C5183ABC-EB6E-4E05-B8C9-500A16B6CF94}
  • Key: software\microsoft\internet explorerinternet0%\URLSearchHooks
    Value: {C47F26FB-2717-FEB3-9E41-FD54EB783896}
  • Key:
    SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects

    Value: {1DAA3154-C544-0EB2-8753-60550DF3794A}
  • Key:
    SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects

    Value: {C8276581-6814-11D9-B4DD-0040469CF72B}
  • Key: software\microsoft\windows\currentversion\runonce
    Value: aol instent messenger
  • Key: software\microsoft\windows\currentversion\runonce
    Value: hw6rh.exe
  • Key: Software\Microsoft\Windows\CurrentVersion\RunOnce
    Value: iehf32.exe
  • Key: software\microsoft\windows\currentversion\runOnce
    Value: javaew.exe
  • Key: Software\Microsoft\Windows\CurrentVersion\RunOnce
    Value: systy32.exe
  • Key: software\microsoft\windows\currentversion\runonce
    Value: u99xki.exe

Warning: if value is listed for some registry entries, you should only clear these values and leave keys with such values untouched. We recommend you to use WiperSoft Antispyware Malware Remediation Tool for safe problem solution.


4. Manually fix browser problems

Trojan/CWS Combo can affect your browsers which results in browser redirection or search hijack. We recommend you to use free option "Reset Browsers" under "Tools" in Spyhunter Remediation Tool to reset all the browsers at once. Mention that you need to remove all files and kill all processes belonging to Trojan/CWS Combo before doing this. To reset your browsers manually and restore your homepage perform the following steps:

internet explorer logo

Internet Explorer

  • If you use Windows XP, click Start, and then click Run. Type the following in the Open box without quotes, and press Enter: "inetcpl.cpl"

  • If you use Windows 7 or Windows Vista, click Start. Type the following in the Search box without quotes, and press Enter: "inetcpl.cpl"

  • Click the Advanced tab

  • In Reset Internet Explorer settings, click Reset. Click Reset in opened window again.

  • Select Delete personal settings checkbox to remove browsing history, search providers, homepage

  • After Internet Explorer finishes resetting, click Close in the Reset Internet Explorer Settings dialog box

Warning: In case this option will not work use free option Reset Browsers under Tools in Spyhunter Remediation Tool.

google chrome logo

Google Chrome

  • Go to the installation folder of Google Chrome: C:\Users\"your username"\AppData\Local\Google\Chrome\Application\User Data.

  • In the User Data folder, look for a file named as Default and rename it to DefaultBackup.

  • Launch Google Chrome and a new clean Default file will be created.

Warning: This option might not work if in Google Chrome you use online synchronization between PCs. In this case use free option Reset Browsers under Tools in Spyhunter Remediation Tool.

mozilla firefox logo

Mozilla Firefox

  • Open Firefox

  • Go to Help > Troubleshooting Information in menu.

  • Click the Reset Firefox button.

  • After Firefox is done, it will show a window and create folder on the desktop. Click Finish.

Warning: This option will also clean all your account passwords for all websites. If you don't want it use free option Reset Browsers under Tools in Spyhunter Remediation Tool.

Information provided by: Aleksei Abalmasov

DMCA.com Protection Status

Here are the descriptions of problems connected with Trojan/CWS Combo and winupdate.exe we received earlier:

Problem Summary: Internet Explorer does not shut down when closed

computer was running slow. Found in the task manager that Internet Explorer was still running in back ground. Manually closed these processes for the Task Manager. Computer was running fine until the next time i visited internet explorer with the same results. From what i found that it is a trojan.cws problem

Problem was successfully solved. Ticket was closed.

« Back to catalog

Home | Partners | Shop | Support | Terms of use | Contact Us | Privacy Policy | Sitemap

Copyright © 2021 Security Stronghold. All Rights Reserved. All content on this website is protected and belongs to Security Stronghold LLC.