Unknown.startup.125

Overview

Unknown.startup.125 is the detection name for a group of software components with unknown purpose which we have not yet been able to classify.

Unknown.startup.125 runs at startup and is mentioned at some of the security forums, where its removal is recommended [1] [2]. You may want to examine this software component to determine if it is something you really need on your system. You can find more information how to disable Unknown.startup.125 from running on your computer in the removal instructions.

Unknown.startup.125 can be identified by 'UsbD', 'vmss', 'Dvx', 'PrivacyScanner', 'webHancer Survey Companion', 'Spyware remover', '98D0CE0C16B1', '{12EE7A5E-0674-42f9-A76B-000000004D00}' and 'Tsa' located in the registry at the following locations:

'HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run',
'HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ RunServices'
'HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ RunOnce'
'HKCU \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run'
'HKCU \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ RunServices'
'HKCU \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ RunOnce'

Classification

Unknown

Files

svhost32.exe, vmss.exe, wsxsvc.exe, pscan.exe, whSurvey.exe, Remove_spyware.exe, stlb2.dll, tsm.exe

If you have any of the files related to Unknown.startup.125 on your system, please send them for additional analysis. Generally, I have only analysed a few versions for each software component listed at this web site. With your help I will be able to look at both old and more recent versions of the Unknown.startup.125 software. Thank you very much for your time!

Log references

Vendor

Unknown

Privacy policy

No privacy policy available.

Detection

Bazooka Adware and Spyware Scanner detects Unknown.startup.125. Bazooka is freeware and detects spyware, adware, foistware, trojan horses, viruses, worms and other potentially unwanted applications. Read more »

Uninstall Unknown.startup.125 with FreeFixer

I'm working on a general purpose tool for removing unwanted software. The tool is called FreeFixer and can help you remove unwanted Browser Helper Objects, Internet Explorer toolbars and software that starts automatically when you reboot your computer, so it can offer some assistance while uninstalling Unknown.startup.125. The manual removal instructions listed below will help you to identify what to delete with FreeFixer.

Read more about FreeFixer.

Manual removal

Please follow the instructions below if you would like to remove Unknown.startup.125 manually. Please notice that you must follow the instructions very carefully and delete everything that is mentioned. In most cases the removal will fail if one single item is not deleted. If Unknown.startup.125 remains on your system after stepping through the removal instructions, please double-check by stepping through them again. Do not delete anything unless you are 100% sure that Unknown.startup.125 is a threat.

1. Start your computer in safe mode.
2. Start the registry editor. This is done by clicking Start then Run. (The Run dialog will appear.) Type regedit and click OK. (The registry editor will open.)
3. Browse to the key:
   'HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run'
4. In the right pane, delete the values called 'UsbD', 'vmss', 'Dvx', 'PrivacyScanner', 'webHancer Survey Companion', 'Spyware remover', '98D0CE0C16B1', '{12EE7A5E-0674-42f9-A76B-000000004D00}' and 'Tsa', if they exists. Remember the name of the file (**) it points to. (Deleting this value prevents Unknown.startup.125 from running next time you reboot your machine.)
5. Browse to the key:
   'HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ RunServices'
6. In the right pane, delete the values called 'UsbD', 'vmss', 'Dvx', 'PrivacyScanner', 'webHancer Survey Companion', 'Spyware remover', '98D0CE0C16B1', '{12EE7A5E-0674-42f9-A76B-000000004D00}' and 'Tsa', if they exists. Remember the name of the file (**) it points to. (Deleting this value prevents Unknown.startup.125 from running next time you reboot your machine.)
7. Browse to the key:
   'HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ RunOnce'
8. In the right pane, delete the values called 'UsbD', 'vmss', 'Dvx', 'PrivacyScanner', 'webHancer Survey Companion', 'Spyware remover', '98D0CE0C16B1', '{12EE7A5E-0674-42f9-A76B-000000004D00}' and 'Tsa', if they exists. Remember the name of the file (**) it points to. (Deleting this value prevents Unknown.startup.125 from running next time you reboot your machine.)
9. Browse to the key:
   'HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run'
10. In the right pane, delete the values called 'UsbD', 'vmss', 'Dvx', 'PrivacyScanner', 'webHancer Survey Companion', 'Spyware remover', '98D0CE0C16B1', '{12EE7A5E-0674-42f9-A76B-000000004D00}' and 'Tsa', if they exists. Remember the name of the file (**) it points to. (Deleting this value prevents Unknown.startup.125 from running next time you reboot your machine.)
11. Browse to the key:
    'HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ RunServices'
12. In the right pane, delete the values called 'UsbD', 'vmss', 'Dvx', 'PrivacyScanner', 'webHancer Survey Companion', 'Spyware remover', '98D0CE0C16B1', '{12EE7A5E-0674-42f9-A76B-000000004D00}' and 'Tsa', if they exists. Remember the name of the file (**) it points to. (Deleting this value prevents Unknown.startup.125 from running next time you reboot your machine.)
13. Browse to the key:
    'HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ RunOnce'
14. In the right pane, delete the values called 'UsbD', 'vmss', 'Dvx', 'PrivacyScanner', 'webHancer Survey Companion', 'Spyware remover', '98D0CE0C16B1', '{12EE7A5E-0674-42f9-A76B-000000004D00}' and 'Tsa', if they exists. Remember the name of the file (**) it points to. (Deleting this value prevents Unknown.startup.125 from running next time you reboot your machine.)
15. Exit the registry editor.
16. Start Windows Explorer and delete:
    The file (**) mentioned above

Problems uninstalling? Click here.

I'm looking for your help!

Thank you for using my site, I hope you find it useful. I'm looking for help from all users, please read more.

Contact information for Unknown.startup.125's vendor

In order to provide correct, accurate and updated information about Unknown.startup.125 I encourage the vendor to contact me if any part of this write-up needs a revision.