Computing.Net > Forums > Security and Virus > TR/Winad.A Virus

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

TR/Winad.A Virus

Reply to Message Icon

Name: Pariah
Date: September 9, 2004 at 12:33:47 Pacific
OS: Win xp sp2
CPU/Ram: amd athlon 2000xp+/384mb
Comment:

My anti virus software is finding the virus TR/Winad.A but it says it can't get rid of it because it is an archive cab file.I can't find the source because the route and file it shows doesn't exist(or I can't find it).Adware and Xcleaner don't even find it.Does anyone know what it is? What it does? and how to get rid of it? HELP ME PLEASE

THE PARIAH



Sponsored Link
Ads by Google

Response Number 1
Name: indigian
Date: September 9, 2004 at 17:37:06 Pacific
Reply:

Have you enabled the option to see 'hidden & system files'?


Tt Lanfire
nf7-s v2.0
XP-m 2500@200x11
SP 97
1GB pc3200
Jou Jye 550w psu
FX5600
WDCaviar 60gb
Seagate Barracuda 80gb

;~}


0

Response Number 2
Name: Pariah
Date: September 9, 2004 at 17:45:23 Pacific
Reply:

yes,but still no joy!

THE PARIAH


0

Response Number 3
Name: murve
Date: September 9, 2004 at 20:01:51 Pacific
Reply:

hi parish,
here's the manual removal:
disable your system restore, get the latest defs for your anti-virus, adaware and spybot.
reboot into safe mode.
scan your computer with all of these and delete all files they come up with.
next:
do a control alt delete to open up box showing your process list and do this
Kill these processes if they exist:
winad.exe
WNAD.EXE
next go into your registry and delete these registry values:

HKEY_CLASSES_ROOT\clsid\{53d3c442-8fee-4784-9a21-6297d39613f0}
HKEY_LOCAL_MACHINE\software\classes\clsid\{53d3c442-8fee-4784-9a21-6297d39613f0}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{53d3c442-8fee-4784-9a21-6297d39613f0}

next do a search for this dll and delete it.
winad2.dll

next delete these files if found in your windows and or windows system32 directory:
winad.exe,
winad2.dll
wnad.exe,
wnad.dat,
wnad-update.exe

also delete the entry WNAD found in this registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WNAD

reboot into normal mode and re enable your system restore.

all the best,
murve


0

Response Number 4
Name: dynamite219
Date: September 13, 2004 at 07:54:51 Pacific
Reply:

I have the same problem. I have winad.exe running in my task process list, but everytime I try to end the process, it jumps to the top of the list. Same goes with the winclt.exe process.



0

Response Number 5
Name: golden222
Date: September 13, 2004 at 11:34:11 Pacific
Reply:

I got rid of it by going to control panel and click the Internet Options icon and clicked on delete files and erase history. Ran the scan again and it was gone.


0

Related Posts

See More



Response Number 6
Name: Nick42069
Date: September 19, 2004 at 18:08:18 Pacific
Reply:

Hi, I've tried Options icon and clicked on delete files and erase history, still detects the virus, plus tried to go to my registery! that winad wasn't there HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run thats all! couldn't find the Winad should I be worried? plus it doesn't show on my windows task manager running at all, only win thing there is, is Winlogon.exe


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: TR/Winad.A Virus

is TR/Small.DwnLdr.1 a virus? www.computing.net/answers/security/is-trsmalldwnldr1-a-virus/4764.html

Can't open task manager think i have a virus www.computing.net/answers/security/cant-open-task-manager-think-i-have-a-virus/25829.html

do i have a virus???? www.computing.net/answers/security/do-i-have-a-virus/735.html