Remove Exploit.winamp.pls. Description and removal instructions

 
Title: Exploit.winamp.pls

Type: Malware
Severity scale:Exploit.winamp.pls severity is 75  (75 / 100)
 



Related files: addas32.exe, atlya32.exe, f2install.exe, iepn32.exe, javaee32.exe, mfcsp32.exe, netef32.exe, netrl.exe, ntbe.exe, ntxo32.exe, sdkuk32.exe, spysheriff.exe, winstall.exe, [X1]32.exe, [X2].tmp.exe, iesecurity.dll, procmon.dll, [X3]32.dll, desktop.html, wallpaper.html, x.pls

Exploit.winamp.pls properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Exploit.winamp.pls removal:

remover for Exploit.winamp.pls

Exploit.winamp.pls manual removal:

Kill processes:
addas32.exe, atlya32.exe, f2install.exe, iepn32.exe, javaee32.exe, mfcsp32.exe, netef32.exe, netrl.exe, ntbe.exe, ntxo32.exe, sdkuk32.exe, spysheriff.exe, winstall.exe, [X1]32.exe, [X2].tmp.exe
Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\SNInstall
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\SpySheriff
HKEY_CLASSES_ROOT\CLSID\{202B0EFD-2CB9-039B-2B11-A3579D6D56A3}
HKEY_CLASSES_ROOT\CLSID\{7C43E35C-A398-7C5F-B1BA-7E87073BE150}
HKEY_CLASSES_ROOT\CLSID\{9CB4CE93-8CC7-9E03-1037-2DD837E3A52E}
HKEY_CURRENT_USER\Software\SpySheriff
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Uninstall\SpySheriff
Delete files:
addas32.exe, atlya32.exe, f2install.exe, iepn32.exe, javaee32.exe, mfcsp32.exe, netef32.exe, netrl.exe, ntbe.exe, ntxo32.exe, sdkuk32.exe, spysheriff.exe, winstall.exe, [X1]32.exe, [X2].tmp.exe, iesecurity.dll, procmon.dll, [X3]32.dll, desktop.html, wallpaper.html, x.pls
Delete directories:
C:\Program Files\SpySheriff
C:\Documents and Settings\[Current User]\Start Menu\Programs\SpySheriff

Other programs to remove Exploit.winamp.pls:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 03/02/06
Information updated: 20/12/07

Additional resources related to Exploit.winamp.pls:

Attention: If you know or you have a website or page about Exploit.winamp.pls removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Exploit.winamp.pls parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Related news:
Similar parasites: