WiniBlueSoft is a fake anti-spyware remover. WiniBlueSoft creates many fake malware files on user's computer, usually in C:\Windows and C:\Windows\System32 folders. Those files are actually innocuous and were made only to scare the user. The main goal of WiniBlueSoft is to make the user believe that his computer is badly infected and to offer paid removal service.
"Windows Security Alerts
Your computer is infected with spyware. It could damage your critical files or expose your private data on the Internet. Click here to register your copy of WiniBlueSoft and remove spyware threats from your PC."
"Infiltration Alert!
Your computer is being attacked by an Internet Virus. It could be a password-stealing attack, a trojan-dropper or similar."
WiniBlueSoft snapshot:
WiniBlueSoft manual removal
Kill processes:
- WiniBlueSoft.exe 1395
- 1spzmb9t5a2.exe 14041
- hackt5zl99.exe
- uninstall.exe 19524
- spyze9.exe 19991not-a-v5rzs1c9.exe
- 19z43hacktoo965f.exe
how to kill malicious processes
Delete registry values:
HKEY_CURRENT_USER\Software\WiniBlueSoft
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WiniBlueSoft
HKEY_LOCAL_MACHINE\SOFTWARE\WiniBlueSoft
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "setup2.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WiniBlueSoft"
HELP:
how to remove registry entries
Unregister DLLs:
111znot-a-v5rus998.dll 11797tzoj595.dll 12946sz5mbot79c.dll 129cvir1z58.dll 12bbszy5ar91941.dll 19945hzcktool65b.dll
HELP:
how to unregister malicious DLLs
Delete files:
- always_skip.xml
- data.bin
- License.txt
- main_config.xml
- uninstall.exe
- WiniBlueSoft.exe
- WiniBlueSoft.lnk
- Homepage.lnk
- Uninstall.lnk
- WiniBlueSoft.lnk
- 102959roz2b45.ocx
- 10325virusz955.ocx
- 10355h9eat227z2.cpl
- 111znot-a-v5rus998.dll
- 115z1vi9us3e85.ocx
- 11797tzoj595.dll
- 1197addwaze16915.ocx
- 127b95ief305z.ocx
- 12946sz5mbot79c.dll
- 129cvir1z58.dll
- 12bbszy5ar91941.dll
- 13323w95mz1b.ocx
- 135zvir1929.cpl
- 1393z5or9df.ocx
- 13951spzmb9t5a2.exe
- 14041hackt5zl99.exe
- 19199hackt5zl7a1.bin
- 19524spyze9.exe
- 19544spy6fbz.ocx
- 19945hzcktool65b.dll
- 19991not-a-v5rzs1c9.exe
- 19z43hacktoo965f.exe
- 1a59dow9lozder1735.ocx
- 1b20z9a5se2186.bin
how to remove harmful files
Delete directories:
c:\Program Files\WiniBlueSoft Software
c:\Program Files\WiniBlueSoft Software\WiniBlueSoft
c:\Documents and Settings\All Users\Start Menu\Programs\WiniBlueSoft
0 comments: