Remove Timeserv. Removal instructions

Severity scale:

(62 / 100)

Timeserv is a rapidly spreading Internet worm that spreads by e-mail through messages with infected executable attachments. Timeserv letters trick the user into believing that they have been sent by Microsoft Customer Support.

Once executed, the parasite installs itself to the system and runs a spreading routine. It sends bogus e-mail messages to all the contacts in the Windows Address Book.

The worm's payload is quite dangerous. Timeserv opens a back door providing the attacker with unauthorized remote access to the compromised computer. The intruder can manage the system and steal user sensitive information. The parasite also injects malicious code into legitimate system processes. This may cause the infected system to crash and restart without asking for user permission.

Timeserv runs on every Windows startup.

Timeserv properties:
• Allows remote user connection
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Timeserv removal:

remover for Timeserv

SpyHunter is recommended remover to uninstall Timeserv. You should confirm using free trial that it detects current version of parasite.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove Timeserv using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.

STOPzilla

download | review

We are testing STOPzilla's efficiency at removing Timeserv (2006-06-09 09:49:58)

Malwarebytes Anti Malware

download | review

We are testing Malwarebytes Anti Malware's efficiency at removing Timeserv (2006-06-09 09:49:58)

Spyware Doctor

download | review | tutorial

We are testing Spyware Doctor's efficiency at removing Timeserv (2006-06-09 09:49:58)

XoftSpySE Anti Spyware

download | review

Timeserv manual removal:

FORUM:
Discuss Timeserv in
spyware removal forum

Kill processes:
timesrv.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\timesrv

HELP:
how to remove registry entries

Delete files:
timesrv.exe

HELP:
how to remove harmful files

Misc:
Timeserv uses TCP port 9999.

The timesrv.exe file resides in the default system directory, which is one of the following: C:\Windows\System, C:\Windows\System32, C:\Winnt\System32.

Timeserv e-mail messages have the following body:

Hello Dear.

In programm maintenance of corporation Microsoft critical vulnerabilyty has been found in processing wmf files. Programmers Microsoft have let out critical updating for Windows 98/2000/XP. We urgently recommend you and to estabilish updating. One copy of updating packet in attach for this letter.
Detalis: http://support.microsoft.com

With best regards,
Microsoft Customer Support.

Information added: 2006-06-09 07:12:43
Information updated: 2006-06-09 07:12:43

Additional resources related to Timeserv:

Attention: If you know or you have a website or page about Timeserv removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Timeserv parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.