The following instructions have been created to help you to get rid of "Clipgenie.DownloadWare" manually.
Use this guide at your own risk; software should usually be better suited to remove malware, since it is able to look deeper.

If this guide was helpful to you, please consider donating towards this site.

Threat Details:

  • spyware

The execution of the file dwcg2.exe will show the license agreement, add an AutoRun entry and, at process kill, connect to internet without user consent. It installs on "download" --> download means download and not install
- automatically runs in background
- adds to AutoRun without user consent
- does not show anything on screen when running.
Supposed Functionality:
supposed "ClipGenie Direct
the internet application that brings rich media content to you,
directly to your hard drive. Now you can get all the best
movies, games and programs downloaded directly to your computer
... while you sleep! And the best part is ... it's absolutely,
totally FREE!

Once you've subscribed to your favorite channels, just
click on the ClipGenie Direct icon on your desktop and there
it is: all the media content you can handle, delivered to
your computer on a regular basis. Just like a magazine subscription.
Any time new content is available, ClipGenie Direct will
download it automatically as soon as you connect to
the internet."

And the best part is, it's right there on your hard drive. That
means you get the cleanest, clearest, fastest-playing clips
possible. No more waiting for movies to download. No more
buffering. No more choppy videos with lousy sound. Just a
constant supply of the best movies and games that the
internet has to offer.
Privacy Statement:
Anonymous demographic information is collected for the purposes of delivering marketing messages that better match your interests and demographic profile.
If you visit our Web site, we collect and store only the following nonpersonally-identifying information from you: the name of the domain name from which you access the Internet (e.g.,, if you are connecting from an America OnlineTM account); the date and time you access our site; and the Internet address of the Web site from which you linked directly to our site. We use this information to measure the number of visitors to the different sections of our Web site and to help us make our site more useful to visitors.
Personally identifying information we collect and store about you is the information you choose to provide to us when you subscribe to or purchase items at ClipGenie registration process may require you to give us contact information (like your name and email address), unique identifiers (like your social security number), financial information (like your account or credit card numbers), and demographic information (like your zip code, age, or income level). We use customer contact information from the registration form to send you information about our company, promotional material from some of our partners, and third parties.

Upon installation of ClipGenie Direct, your computer is assigned a unique numerical identifier. This unique identifier allows ClipGenie' servers to measure and report aggregate information (such as the number of people who read an advertisement, or the number of times an advertisement is seen) to advertisers. It also allows ClipGenie to collect information regarding your use of and interaction with advertising so that we can deliver advertising content that is more relevant to your own particular wants and needs, and avoid subjecting you to overly repetitive ads.
Cookies ClipGenie may also use "cookie" technology to monitor user activity on the ClipGenie Web site. A "cookie" is a small amount of data that is created by a Web server and stored on your local hard drive upon your first visit to a Web site. Cookies identify you to, and can only be accessed by, the Web server that assigned the cookie. Cookies streamline and personalize your Web browsing experience by storing passwords, purchases, and personal preferences like Web page layouts, Web content, stock symbols, etc., so that you do not have to reenter this information every time you visit a particular Web page.
Technology from ClipGenie Direct resides on your local system and operates when active in the background, dynamically collecting and transmitting volunteered anonymous demographic information and volunteered personally identifying information about you. The demographic information collected and transmitted may also include information about your operating system, Internet Protocol Address, and Internet service provider (ISP).

Anonymous demographic information collected by ClipGenie may include, but is not limited to, your: (a) gender; (b) age; (c) zip code; (d) operating system; (e) Internet protocol address. Such demographic information may be collected whenever you provide it to ClipGenie, or to other third parties while interacting with the application. Information such as (a) what advertising messages you have seen in ClipGenie; (b) what advertising messages you have clicked on inside ClipGenie; (c) how many advertisements you have viewed inside ClipGenie may be collected at any time, even if ClipGenie is not active.

Personally identifying information collected by ClipGenie may include, but is not limited to, your: (a) first and last name; (b) home or other physical address including street name and number, and name of city or town; (c) email address, and; (d) telephone number (e) credit card or other financial information. Such personally identifying information is collected only when you VOLUNTARILY provide it to ClipGenie.

The demographic and personally identifying information collected by ClipGenie may be maintained separately and/or combined to create user profiles. The demographic and personally identifying information, and/or the user profiles may also be supplemented by information derived from third-party information vendors. The demographic and personally identifying information collected by ClipGenie, and/or the user profiles, may be used by ClipGenie, its licensees, licensors, agents, and assigns, and/or its client software companies and developers, as well as shared, rented, leased, sold, or otherwise made available to third-party marketing entities, advertisers, and other parties and entities, at the sole discretion of ClipGenie. Some of ClipGenie 's clients may use the demographic and personally identifying information to personalize Web pages and target ads, products and services to consumers.

Please address any questions or comments regarding the ClipGenie privacy practices to:
New Harmony Enterprises Limited
2001 Central Plaza, 18 Harbour Road
Wanchai, Hong Kong HK

Removal Instructions:


Please use Spybot-S&D, RunAlyzer or msconfig.exe to remove the following autorun entries.
  • Entries named "ClipGenie Installer".


Please use Windows Explorer or another file manager of your choice to locate and delete these files.
  • The file at "<$WINDIR>\clipg.exe".
  • The file at "<$WINDIR>\dwcg2.exe".
  • A file with an unknown location named "dwcg2.exe".
  • A file with an unknown location named "clipg.exe".
  • The file at "<$PROGRAMFILES>\DownloadWare\dw.exe".
  • The file at "<$LOCALSETTINGS>\Temp\ins5.tmp".
  • The file at "<$WINDIR>\Downloaded Program Files\ActiveInstall.dll".
  • The file at "<$WINDIR>\Downloaded Program Files\ActiveInstall.inf".
Make sure you set your file manager to display hidden and system files. If Clipgenie.DownloadWare uses rootkit technologies, use our RootAlyzer or our Total Commander anti-rootkit plugins.
You will have to use a global search for files without a name specified. Be extra careful, because just the name might not be enough to identify files!


You can use regedit.exe (included in Windows) to locate and delete these registry entries.
  • A key in HKEY_CLASSES_ROOT\ named "ActiveInstall.Installer2.1", plus associated values.
  • Delete the registry key "{B4573B12-BE33-44B6-9798-A1F5A95D4392}" at "HKEY_CLASSES_ROOT\CLSID\".
  • Delete the registry key "{EB6AFDAB-E16D-430B-A5EE-0408A12289DC}" at "HKEY_CLASSES_ROOT\CLSID\".
  • References to the file "Downloaded Program Files/ActiveInstall.dll" at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\.
  • References to the file "<$WINDIR>\Downloaded Program Files\ActiveInstall.dll" at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls\.
If Clipgenie.DownloadWare uses rootkit technologies, use our RegAlyzer, RootAlyzer or our Total Commander anti-rootkit plugins.

Final Words:

If neither Spybot-S&D nor self help did resolve the issue or you would prefer one on one help,
  1. Please read these instructions before requesting assistance,
  2. Then start your own thread in the Malware Removal Forum where a volunteer analyst will advise you as soon as available.