Remove WinAD. Description and removal instructions
McAfee identifies it as WinAd.A and WinAd.B. It is believed that winAD is the same program as Wnad which installs when 'Yo Mama, Osama!' game is installed. It is a memory resident application which periodically connects to a web server to download and display pop-up window advertisements. WinAD properties: • Shows commercial adverts • Connects itself to the internet • Hides from the user • Stays resident in background Automatic WinAD removal:remover for WinAD
WinAD manual removal:Kill processes:winad.exe, WNAD.EXE Delete registry values: HKEY_CLASSES_ROOT\\clsid\\{53d3c442-8fee-4784-9a21-6297d39613f0} HKEY_LOCAL_MACHINE\\software\\classes\\clsid\\{53d3c442-8fee-4784-9a21-6297d39613f0} HKEY_LOCAL_MACHINE\\software\\microsoft\\windows\\currentversion\\ explorer\\browser helper objects\\{53d3c442-8fee-4784-9a21-6297d39613f0} Unregister DLLs: winad2.dll, ClientCom.dll Delete files: winad.exe, winad2.dll, WNAD.EXE, WNAD.DAT, WNAD-UPDATE.EXE, WinClt.exe, ClientCom.dll Misc: WNAD creates a registry run key to load itself at startup and does not uninstall itself: Some versions has their own uninstaller. Other programs to remove WinAD:• Malwarebytes Anti Malware - Review - Download• Malwarebytes Anti Malware - Review - Download • Windows Defender - Review - Download Information added: 28/08/04 Information updated: 16/04/05 Additional resources related to WinAD:Attention: If you know or you have a website or page about WinAD removal, feel free to add a link to this list: add url
more resources Post Comment:Attention: Use this form only if you have additional information about WinAD parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
|
Latest spyware news:
 Rogue security applications impersonate leading anti-virus manufacturers Attack of Waledac Worm is schedulled on July 4 Another Parasite Attack Spreads Via Twitter Free security product vets Twitter links Mac trojan targets game sites to infect users Security Threat at Fanny Mae Some web sites to avoid for today British Government will track all e-mail's YOUR SISTER NAKED LOLZ com “intervalhehehe” popupSubscribe to news 
Similar parasites:
 SPAM Relayer SmartAdware Ultimate Defender OpenSite Web Secure Alert Total Security Protection Center NavHelper TheLocalSearch SearchExe A Better InternetRelated discussions:
|
FORUM:
HELP:
Comments from visitors:
1. re: comment about WinAD by B Redd. 2005-04-09 16:04:18
No one would write an article unless they tested the results. More than likely the original version did not restart itself, now there' s a new version that restarts the process as soon as it is stopped, and has a .dll file. it's located in x:program fileswinad client (x=drive that contains your windows installation)
Add/Remove Programs (accessed from "the start button>Control Panel>Add/Remove Programs>Winad Client" works for this version (which is not detected by virus scanners)
For the first version, follow the directions supplied here.
Run regedit, remove all references to winad, and wnad. Remove all files int eh c:windowsprefetch directory. Reboot, Winad all gone.
Do the same for Web_Rebates.