Remove WinAD. Description and removal instructions

 
Title: WinAD
Also known as: win AD, wnad
Type: Adware
Severity scale:WinAD severity is 26  (26 / 100)
 
WinAD is a software which shows commercial advertisements. Silently uploads new updates to itself.
McAfee identifies it as WinAd.A and WinAd.B.

It is believed that winAD is the same program as Wnad which installs when 'Yo Mama, Osama!' game is installed. It is a memory resident application which periodically connects to a web server to download and display pop-up window advertisements.



WinAD properties:
• Shows commercial adverts
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic WinAD removal:

remover for WinAD

WinAD manual removal:

Kill processes:
winad.exe, WNAD.EXE
Delete registry values:
HKEY_CLASSES_ROOT\\clsid\\{53d3c442-8fee-4784-9a21-6297d39613f0}
HKEY_LOCAL_MACHINE\\software\\classes\\clsid\\{53d3c442-8fee-4784-9a21-6297d39613f0}
HKEY_LOCAL_MACHINE\\software\\microsoft\\windows\\currentversion\\
explorer\\browser helper objects\\{53d3c442-8fee-4784-9a21-6297d39613f0}
Unregister DLLs:
winad2.dll, ClientCom.dll

Delete files:
winad.exe, winad2.dll, WNAD.EXE, WNAD.DAT, WNAD-UPDATE.EXE, WinClt.exe, ClientCom.dll
Misc:
WNAD creates a registry run key to load itself at startup and does not uninstall itself:

Some versions has their own uninstaller.

Other programs to remove WinAD:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 28/08/04
Information updated: 16/04/05

Additional resources related to WinAD:

Attention: If you know or you have a website or page about WinAD removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about WinAD parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:


Comments from visitors:


1. re: comment about WinAD by B Redd. 2005-04-09 16:04:18
The orgin of winad is listed as media AccX.dll

2. re: comment about WinAD by guest. 2005-03-25 08:03:11
Winad is running on my computer and does not appear in the Add/Remove section of control panel.

3. Lawsuit against these companies by Guest. 2004-12-03 09:12:17
Recently my underage children had this program appear on their computer. It stole resources, messed up the computer and forced me to have to spend considerable time fixing the problem. I have decided to file a lawsuit against the maker of the software...however I have no idea who it is. Does anyone here know?

4. Finally! by Guest. 2004-11-01 18:11:06
I allowed WinAd to install itself to startup, then successfully uninstalled from add/remove programs in control panel. Advice: Get WinPatrol (free) and this shouldn't happen again.

5. Can't kill processes by Guest. 2004-11-01 09:11:03
They automatically restart. locate the folder the files are in, right-click on each file and rename it, change the .exe to anything else. You can then delete the files and kill the processes and remove winad completely.

6. by Guest. 2004-10-24 05:10:16
Add/Remove in the control panel worked for me

7. by Guest. 2004-10-17 19:10:11
add and remove work for me

8. by Guest. 2004-10-16 00:10:44
go off line go to add and remove programs,remove winad.scan again and delete if any remaining files.should delete them now.

9. None of this works... by Guest. 2004-10-05 21:10:27
The restarting version I have runs even in SafeMode, even when you uncheck it, and REMAINS on the computer even after you run the add/remove in the control panel. I'm an IT manager and my office is baffeled at getting rid of this one. A call in to our business client support at Symantec had no help for us, but explained it posses little to no threat...

10. silly people by Guest. 2004-09-25 00:09:15
Apparently there's a new version. . .

No one would write an article unless they tested the results. More than likely the original version did not restart itself, now there' s a new version that restarts the process as soon as it is stopped, and has a .dll file. it's located in x:program fileswinad client (x=drive that contains your windows installation)

Add/Remove Programs (accessed from "the start button>Control Panel>Add/Remove Programs>Winad Client" works for this version (which is not detected by virus scanners)

For the first version, follow the directions supplied here.

11. MSCONFIG by Guest. 2004-09-23 06:09:56
Startup tab - untick Winad.exe and that stops it running on reboot - then just delete from C:Program FilesWinad

12. Hey Crybabies... by Guest. 2004-09-21 19:09:20
UGH...people, why manually delete it when you can download the automatic removal program to delete it? Stop crying you can't delete it...you CAN.

13. winad by Guest. 2004-09-21 11:09:05
i went through all the steps including task manager and the deleted winad just kept reappearing. finally used add remove programs from controlpanel and got rid of it.

14. add/remove promgrams by Guest. 2004-09-21 11:09:59
add and remover programs worked for me too

15. Kill Winad in safe mode by Guest. 2004-09-21 01:09:41
Launch XP in safe mode. Remove c:program filesWinad directory.

Run regedit, remove all references to winad, and wnad. Remove all files int eh c:windowsprefetch directory. Reboot, Winad all gone.

Do the same for Web_Rebates.

16. ffhk1 by Guest. 2004-09-19 13:09:36
add or remove programs its WinAd Client you can remove it there that is the best way

17. Lot of lights and sounds..... by Guest. 2004-09-18 09:09:12
That guide made it seems like someone knew what they were talking about. But, it was TRULY worthless. Winad.exe and Winclt.exe processes stop up the second you end one. Also, scanned the registy, no help there.

18. Help is on the way. by Guest. 2004-09-10 15:09:44
Add / Remove programs worked for me.

19. owned by spyware by Guest. 2004-09-09 12:09:16
there is an uninstaller in control panel add remove programs

20. by Guest. 2004-09-07 03:09:46
remove execute permissions for yourself, then stop the processes, the delete them

See more comments about WinAD >>>
Latest spyware news:
Similar parasites:
Related discussions: