How to remove WinCoDecPRO
Thursday, March 5th, 2009 at 7:52 amHome » Rogue Antispyware » WinCoDecPRO
WinCoDecPRO description
WinCoDecPRO is annoying rogue application. It pretends to be a useful tool dedicated to increase quality of audio and video after you pay either $49.99 or $79.99. User doesn’t get a functional version after they pay because the only function of WinCoDecPRO codec is loading pop-ups and asking for money.
WinCoDecPRO infection is pretty easy to recognize. The malware warns people about corrupt multimedia system problems and prompts to pay for fixing the issue. WinCoDec PRO also changes wallpaper into “Warning! Fatal error:” message. Don’t trust WinCoDecPRO and delete that fraudulent software as soon as possible.
WinCoDecPRO loads the following pop-ups:
“WARNING
Fatal Error: Windows can’t play the following media formats: AVI; ASF; WMV; AVS; FLV; MKV; MOV; 3GP; MP4; MPG; MPEG; MP3; AAC; WAV; WMA; CDA; FLAC; M4A; MID. Update your video codec to resolve the issue.”
“Warning! Media codec has been destroyed. Risk of losing all your audio video files high. To resolve this issue, update your media codec immediately.”
Get rid of WinCoDecPRO
WinCoDecPRO is a Rogue Antispyware software
How to manually remove WinCoDecPRO
To remove WinCoDecPRO spyware you must block WinCoDecPRO sites, stop and remove processes, unregister DLL files, search and delete all other WinCoDecPRO files and registry utility. Follow the WinCoDecPRO detection and removal instructions below.
The most typical software removal method is to remove WinCoDecPRO by using "Add or Remove Programs" service. However there may be hidden WinCoDecPRO files, running processes and registries in your computer, so WinCoDecPRO may recreate all other files after reboot.
WinCoDecPRO manual removal instructions
Block WinCoDecPRO sites:
wincodecpro.com
Read more how to block WinCoDecPRO sites
Stop and remove WinCoDecPRO processes:
wextract.exe
Read more how to kill WinCoDecPRO processes
Locate and delete WinCoDecPRO registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “WinCodecPRO”
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Image File Execution Options\taskmgr.exe
Read more how to delete WinCoDecPRO registry entries
Download RegistryBooster 2010 to scan errors caused by WinCoDecPRO
Detect and delete other WinCoDecPRO files:
%UserProfile%\Application Data\WinCodecPRO\Autorun.ico
%UserProfile%\Application Data\WinCodecPRO\Process.ico
%UserProfile%\Application Data\WinCodecPRO\Service.ico
%UserProfile%\Application Data\WinCodecPRO\settings.ini
%UserProfile%\Application Data\WinCodecPRO\uill.ini
%\WINDOWS%\system32\wextract.exe
We strongly recommend you to use spyware remover to track WinCoDecPRO and automaticaly remove WinCoDecPRO processes, registries and files as well as other spyware threats.
March 9th, 2009 at 10:01 am
god this thing is so annoying it doesnt let you do anything at all it really pisses you off
Reply
October 22nd, 2009 at 4:13 pm
I have tried all the steps for manual removal and still i have the WinCoDecPRO virus
i have run all the spyware programs including pctool spyware doctor, registry mech
anic and of course mcafee.
all these have failed.
Reply
Luciana Reply:
October 22nd, 2009 at 10:58 pm
Have you tried removing WinCodecPro in a safe mode? This way the removal is usually more effective.
Reply
October 28th, 2009 at 3:59 am
I’m assuming you already bought Spyware Doctor. Update it to the latest software and definiton versions. It works. Run it and reboot.
Reply
October 31st, 2009 at 7:39 am
I did a restore back to 10/1 and it appears to be gone. I’m in process of running the free pctools spyware doctor from cnet.com to verify. Save a buck!
Reply
November 3rd, 2009 at 8:37 pm
This is a nasty virus. I used SmitFraud, I scanned with Malwarebytes twice, SuperAnti twice, etc. Nothing worked. Finally I did a System Restore as mentioned above. . that worked. I wish I would of thought of that earlier before I wasted a whole day on this.
Reply
November 4th, 2009 at 12:16 pm
Found this today on one of our computers. Removed using Malwarebytes scanner. All references to the virus appears to be gone. This was installed in \program files\common files\HP\memories disk\2.0\3ghpodlog3.exe
Reply
November 5th, 2009 at 5:52 am
Once removed, will my screen settings and audio be back functioning? I’ve lost my resolution and it blocks me from doing anything about it.
Reply