Home & Home OfficeBusinessPartnersClubAbout Security Stronghold

Removal of TSCash - How to deal with Dialers

Dialers - is quite rare type of threats nowadays but they still can cause serious problems to you. The matter is that computer dialer uses you phone line to dial special phone numbers (most popular are adult content dialers). Calling those numbers will cost you lot of money thats why removing dialer from your PC is urgent and necassary procedure. Learn more about particular type of dialers - TSCash - and read how you can remove it without extra efforts.

TSCash Removal Solution

TSCash usually doesn't create visible folders in, for example, Program Files folder, or somewhere else. Main executable file of TSCash is tstime.exe but it alos created some additional .exe and .dll files, We developed specual utility to remove TSCash. Click here to download it:

Download TSCash Removal Tool

Threat's description and solution are developed by Security Stronghold security team.

On this page you can also read about:

Definition of TSCash? Technical details of TSCash threat.

Tutorial on manual TSCash removal.

Dialers's profile

Name of the dialer:

Command or file name:

Threat type:

Affected OS:

TSCash

tstime.exe

Dialer

Win32 (Windows 9x, Windows XP, Windows Vista, Windows Seven)

A connection is made by dialing a preordained phone number. Malicious TSCash is designed to use international or premium rate parochial phone numbers to establish connection evasion the topical Wide-Area Network service provider. TSCash Revises web browser's default home and search pages and averts a consumer from restoring initial settings. TSCash Connects a discredited PC to the Wide-Area Network through high-cost phone numbers. Moreover, some TSCashs secure accession only to several ordained WWW resources, and other sites and servers cannot be accessed at all. Downloading software or music, watching online video or animation, browsing sophisticated multimedia WWW sites are almost impossible tasks for consumers whose machines are dirty with TSCashs.

TSCash infection

Dialers have not a real difference from other computer virus when they get installed onto your computer without your knowledge. If your antivirus software let TSCash get to your PC commonly it is unable to remove it as well. Firewalls are great tools to prevent dialer from accessing premium rate numbers. Generally, TSCash copies its file(s) to your hard disk. Its typical file name is tstime.exe. Then it creates new startup key with name TSCash and value tstime.exe. You can also find it in your processes list with name tstime.exe or TSCash.

How to remove TSCash?

In most cases your basic antivirus fails to get rid of a certain dialer. Solution from SecurityStronghold.com is intended to remove TSCash, and we provide manual dialer removal instructions as well as autimatic removal tool. Instructions allow the experienced user manually remove all the files, directories, registry entries and other objects that belong to TSCash. If you consider yourself a "novice" we strongly recommend you to use TSCash Removal Tool.

So, to solve problem with TSCash on your PC, you need to:

1. Remove the following processes and delete the appropriate files:

no information

2. Remove the following directories:

• class, tsplugin.dll in %downloaded_program_files%

3. Remove the following malicious registry entries and\or values:

Key: software\classes\clsid\{13258718-b804-4092-8496-55f80aedbf1f}

Key: software\classes\tsplugin.tscplugin

Key: software\microsoft\code store database\distribution units\{13258718-b804-4092-8496-55f80aedbf1f}

Key: software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/tsplugin.dll

Key: software\microsoft\windows\currentversion\moduleusage\c:/windows/system32/sysupd.exe

Key: software\microsoft\windows\currentversion\moduleusage\c:/windows/system32/tscore.dll

Key: software\microsoft\windows\currentversion\moduleusage\c:/windows/system32/tstime.exe

Key: software\microsoft\windows\currentversion\run\sysupd
Value: @

Key: CLSID\{13258718-b804-4092-8496-55f80aedbf1f}

Key: software\classes\tsplugin.tscplugin.1

Attention: If you can't locate certain files or folders we recommend you to use

Next threat: Ttad.exe »

Learn more about TSCash and tstime.exe »

« Back to catalog