Apr 20, 2009

Remove WiniBlueSoft - WiniBlueSoft Removal Instructions

WiniBlueSoft is new rogue antispyware product that uses old but effective scare tactics. Under scare tactics we mean – fake security alerts, annoying pop-ups, fake screens of death and fake Windows Security Center alerts. Parasite creates numerous fake infected files with random filenames in order to convince computer users that their PC’s are seriously infected. But you must remember that all those files are not executable and can’t cause any damage to your computer. WiniBlueSoft is promoted through the use of internet advertisements that pretend to be online anti-malware scanners. But in reality this scanners are fake that always list infections, even on absolutely clean systems. Once installed WiniBlueSoft will configure itself to run automatically every time you turn on your computer. Also it will perform full system scan and list you variety of infections that was generated by WiniBlueSoft and cannot be removed until you first purchase licensed version. Typical spyware, remove it as soon as possible manually or using automatic removal tool.

Type: Rogue Anti-Spyware
Malware Author: Unknown

Threat Level: Critical
Screenshot:


How to remove WiniBlueSoft manually:
It's possible to remove WiniBlueSoft manually, but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

c:\Program Files\WiniBlueSoft Software
c:\Program Files\WiniBlueSoft Software\WiniBlueSoft
c:\Program Files\WiniBlueSoft Software\WiniBlueSoft\always_skip.xml
c:\Program Files\WiniBlueSoft Software\WiniBlueSoft\data.bin
c:\Program Files\WiniBlueSoft Software\WiniBlueSoft\License.txt
c:\Program Files\WiniBlueSoft Software\WiniBlueSoft\main_config.xml
c:\Program Files\WiniBlueSoft Software\WiniBlueSoft\uninstall.exe
c:\Program Files\WiniBlueSoft Software\WiniBlueSoft\WiniBlueSoft.exe
c:\Documents and Settings\All Users\Desktop\WiniBlueSoft.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\WiniBlueSoft
c:\Documents and Settings\All Users\Start Menu\Programs\WiniBlueSoft\Homepage.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\WiniBlueSoft\Uninstall.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\WiniBlueSoft\WiniBlueSoft.lnk
c:\WINDOWS\102959roz2b45.ocx
c:\WINDOWS\10325virusz955.ocx
c:\WINDOWS\10355h9eat227z2.cpl
c:\WINDOWS\111znot-a-v5rus998.dll
c:\WINDOWS\115z1vi9us3e85.ocx
c:\WINDOWS\11797tzoj595.dll
c:\WINDOWS\1197addwaze16915.ocx
c:\WINDOWS\127b95ief305z.ocx
c:\WINDOWS\12946sz5mbot79c.dll
c:\WINDOWS\129cvir1z58.dll
c:\WINDOWS\12bbszy5ar91941.dll
c:\WINDOWS\13323w95mz1b.ocx
c:\WINDOWS\135zvir1929.cpl
c:\WINDOWS\1393z5or9df.ocx
c:\WINDOWS\13951spzmb9t5a2.exe
c:\WINDOWS\14041hackt5zl99.exe
c:\WINDOWS\system32\19199hackt5zl7a1.bin
c:\WINDOWS\system32\19524spyze9.exe
c:\WINDOWS\system32\19544spy6fbz.ocx
c:\WINDOWS\system32\19945hzcktool65b.dll
c:\WINDOWS\system32\19991not-a-v5rzs1c9.exe
c:\WINDOWS\system32\19z43hacktoo965f.exe
c:\WINDOWS\system32\1a59dow9lozder1735.ocx
c:\WINDOWS\system32\1b20z9a5se2186.bin

Remove registry entries:

HKEY_CURRENT_USER\Software\WiniBlueSoft
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WiniBlueSoft
HKEY_LOCAL_MACHINE\SOFTWARE\WiniBlueSoft
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "setup2.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WiniBlueSoft"


Please be careful because manual removal of WiniBlueSoft may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.

No comments:

/