Welcome Guest (Log In | Create Account)
New Member? Join for free.
   This is an undesirable program.

This file has been identified as a program that is undesirable to have running on your computer. This consists of programs that are misleading, harmful, or undesirable.

If the description states that it is a piece of malware, you should immediately run an antivirus and antispyware program. If that does not help, feel free to ask us for assistance in the forums.
Name: Remote ClipBook Viewer
Filename: clipbk.exe
Command: C:\Windows\System32\clipbk.exe
Description:
Added by the W32/Mofei-Q network worm.

W32/Mofei-Q provides backdoor access and control over the computer by creating
a port (backdoor) and then listening for instructions being sent from a remote
client.

The remote intruder will be able to carry out a variety of actions, including
getting a Windows command shell, getting a content listing for selected folders,
deleting files and folders, executing files and downloading files from the
internet.
File Location: %System%
Startup Type: This startup entry is installed as a Windows service.
Service Name: clipsvr
Service Display Name: Remote ClipBook Viewer
HijackThis Category: O23 Entry
Note: %System% is a variable that refers to the Windows System folder. By default this is C:\Windows\System for Windows 95/98/ME, C:\Winnt\System32 for Windows NT/2000, or C:\Windows\System32 for Windows XP/Vista/7.
Removal Instructions: How to remove a Trojan, Virus, Worm, or other Malware

  This entry has been requested 1463 times.

Disclaimer
It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. BleepingComputer.com will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Advertise   |   About Us   |   User Agreement   |   Privacy Policy   |   Contact Us   |   Sitemap   |   Chat   |   Tutorials   |   Uninstall List
Discussion Forums   |   The Computer Glossary   |   Resources   |   RSS Feeds   |   Startups   |   The File Database   |   Virus Removal Guides   |   Downloads


Portions of this database © Paul Collins
© 2003-2012 All Rights Reserved Bleeping Computer LLC.