Remove Timeserv. Description and removal instructions

Title: Timeserv
Type: Worms	Severity scale: (62 / 100)

Timeserv is a rapidly spreading Internet worm that spreads by e-mail through messages with infected executable attachments. Timeserv letters trick the user into believing that they have been sent by Microsoft Customer Support.

Once executed, the parasite installs itself to the system and runs a spreading routine. It sends bogus e-mail messages to all the contacts in the Windows Address Book.

The worm's payload is quite dangerous. Timeserv opens a back door providing the attacker with unauthorized remote access to the compromised computer. The intruder can manage the system and steal user sensitive information. The parasite also injects malicious code into legitimate system processes. This may cause the infected system to crash and restart without asking for user permission.

Timeserv runs on every Windows startup.

FORUM:
Discuss Timeserv in
spyware removal forum

Timeserv properties:
• Allows remote user connection
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Timeserv removal:

remover for Timeserv

Timeserv manual removal:

Kill processes:
timesrv.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\timesrv

HELP:
how to remove registry entries

Delete files:
timesrv.exe

HELP:
how to remove harmful files

Misc:
Timeserv uses TCP port 9999.

The timesrv.exe file resides in the default system directory, which is one of the following: C:\Windows\System, C:\Windows\System32, C:\Winnt\System32.

Timeserv e-mail messages have the following body:

Hello Dear.

In programm maintenance of corporation Microsoft critical vulnerabilyty has been found in processing wmf files. Programmers Microsoft have let out critical updating for Windows 98/2000/XP. We urgently recommend you and to estabilish updating. One copy of updating packet in attach for this letter.
Detalis: http://support.microsoft.com

With best regards,
Microsoft Customer Support.

Other programs to remove Timeserv:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 09/06/06
Information updated: 09/06/06

Additional resources related to Timeserv:

Attention: If you know or you have a website or page about Timeserv removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Timeserv parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.