"Ads by Word Proser" uninstall guide

What is Word Proser?

Word Proser is a advertising application which purpose is to display diffirent kinds of advertisements around web pages. Word Proser also installs browser extension:
Word Proser extension

Word Proser belongs to Vitruvian family of malware and can be named by different malware scanners also as:
  • Adware.Vitruvian (Gridinsoft Trojan Killer) 
  • InfoAtoms (fs)
  • Adware.Plugin
  • Win32/Adware.Vitruvian
  • PUP.Optional.WordProser
  • Adware.AdPage

How to figure out that your computer is infected with Word Proser?

Here are some symptoms that indicate that your computer is infected with Word Proser:
  • you see any kind of "deals" along with your search results;
  • you have seen at least one of the following icons on your computer or in your browsers:
  • at least one of the following folders is present on your computer: 
    • C:\Program Files\WordProser_1.10.0.9
    • C:\Program Files\WordProser_1.10.0.1
    • C:\Program Files\WordProser_1.10.0.6
    • C:\Program Files\WordProser_1.10.0.5
    • C:\Program Files\WordProser_1.10.0.4
    • C:\Program Files\WordProser_1.10.0.2
  • at least one of the following registry items is present on your computer:
    • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WordProser_1.10.0.9
    • HKLM\SOFTWARE\WordProser_1.10.0.9
    • HKLM\SYSTEM\CurrentControlSet\services\wpnfd_1_10_0_9
    • HKLM\SYSTEM\CurrentControlSet\services\wpsvc_1.10.0.9
    • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WordProser_1.10.0.1
    • HKLM\SOFTWARE\WordProser_1.10.0.1
    • HKLM\SYSTEM\CurrentControlSet\services\wpnfd_1_10_0_1
    • HKLM\SYSTEM\CurrentControlSet\services\wpsvc_1.10.0.1
    • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WordProser_1.10.0.6
    • HKLM\SOFTWARE\WordProser_1.10.0.6
    • HKLM\SYSTEM\CurrentControlSet\services\wpnfd_1_10_0_6
    • HKLM\SYSTEM\CurrentControlSet\services\wpsvc_1.10.0.6
    • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WordProser_1.10.0.5
    • HKLM\SOFTWARE\WordProser_1.10.0.5
    • HKLM\SYSTEM\CurrentControlSet\services\wpnfd_1_10_0_5
    • HKLM\SYSTEM\CurrentControlSet\services\wpsvc_1.10.0.5
    • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WordProser_1.10.0.4
    • HKLM\SOFTWARE\WordProser_1.10.0.4
    • HKLM\SYSTEM\CurrentControlSet\services\wpnfd_1_10_0_4
    • HKLM\SYSTEM\CurrentControlSet\services\wpsvc_1.10.0.4
    • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WordProser_1.10.0.2
    • HKLM\SOFTWARE\WordProser_1.10.0.2
    • HKLM\SYSTEM\CurrentControlSet\services\wpnfd_1_10_0_2
    • HKLM\SYSTEM\CurrentControlSet\services\wpsvc_1.10.0.2
  • at least one of the following files is running on your computer:
    • wpsvc.exe
    • wordproserclientie.dll
    • wordproser-setup-1.10.0.9.exe
    • wpnfd_1_10_0_9.sys
    • wordproser-setup-1.10.0.1.exe
    • wpnfd_1_10_0_1.sys
    • wordproser-setup-1.10.0.6.exe
    • wpnfd_1_10_0_6.sys
    • wordproser-setup-1.10.0.5.exe
    • wpnfd_1_10_0_5.sys
    • wordproser-setup-1.10.0.4.exe
    • wpnfd_1_10_0_4.sys
    • wordproser-setup-1.10.0.2.exe
    • wpnfd_1_10_0_2.sys
  • at least one of the following services is present on your computer:
    • wpnfd_1_10_0_9
    • Word Proser 1.10.0.9 Client Service
    • wpnfd_1_10_0_1
    • Word Proser 1.10.0.1 Client Service
    • wpnfd_1_10_0_6
    • Word Proser 1.10.0.6 Client Service
    • wpnfd_1_10_0_5
    • Word Proser 1.10.0.5 Client Service
    • wpnfd_1_10_0_4
    • Word Proser 1.10.0.4 Client Service
    • wpnfd_1_10_0_2
    • Word Proser 1.10.0.2 Client Service
  • at least one file with the following MD5 hashes is present on your computer:
    • 1c733dcbdd909cab08af6ca244643b89
    • 5237fcdff306cf9dcb85742bb287b399
    • b25922683bff1e1aa8164dc99e25f6e3
    • d2ab95aa537ac59e3de674256cd9b164
    • 8526f363543890038b07bb0c3e737b13
    • 4de3c71b8e0da71042bde8b81d28601e
    • 7adc5aac8a455872eb5c050211980719
    • 0bf1004d2d528539c36acdb718c5b6b5
    • e529d2ff77681dfdc3482dfd0ccd4db0
    • 79230be78437b4835d32a05e34d8cdf2
    • 4a5a090f28520793eedcb7a2f142ce55
    • 42ee2738a6d3128e7336ee4b0e438961
    • 61b93641d2f0f062848255717876e913
    • df3ea706962e3cfbbd6df016b4cfc0cb
    • 7844662377d534c8d2ab24d1dd2c8334
    • 17aa25f4ddd583f4510bf05470483dfc
    • f8971170ff3b508e47ecd2367558892e
    • af6498872a8b94207824bcd728744921
    • 76856cd4c95f6be28e429e3a2ac5750d
    • b4e7a73bd9080a4a137ba3fcf86301b1

    How to get rid of Word Proser?

    Follow this guide to remove Word Proser from your computer completely.

    Step 1.  Try to remove Word Proser using tools of Windows operating system.

    If you have installed Windows 8, press Start button on the screen or Windows button on your keyboard, start typing "programs and features" and choose "Programs and Features" in the appeared menu:
    Programs and Features
    If you are using Windows 7, press Start button and choose "Control panel": 
    Windows 7 start menu

    Look for Word Proser in the list of installed programs, select it and press Uninstall button:
    Word Proser uninstall
    Now reboot your computer and check the result. If the advertising is still present, please move to the next step.

    Step 2. Remove Word Proser completely using Gridinsoft Trojan Killer tool

    Gridinsoft Trojan Killer is a powerful all-in-one tool aimed to kill diffirent kinds of malware. It has no analogues on the quality of malware and browser hijackers removal. Gridinsoft Trojan Killer also has professional support team that can resolve your problem remotely even though Trojan Killer didn't find any threat on your PC.
    Please, follow the guide below to remove Word Proser malware from your computer.
    • Close all your programs and browsers
    • Install Gridinsoft Trojan Killer and run it by double-clicking on the icon on your desktop 
      Trojan Killer icon on the desktop
    • Run Standart scan using Scan tab of your Trojan Killer
      Scan tab of Trojan Killer
    • After the scanning completed mark all items as Move to quarantine and press Apply button to remove all dangerous items from your computer. Reboot your PC if Trojan Killer asks about it:
      Example of scan results
    • Now you have to clean all your browsers. Go to Tools tab and press Reset browser settings button:
      Tools tab of Trojan Killer
    • Mark all your browsers as shown below and press Reset button:
      Resetting browser settings
    • Reboot your PC and check the result
    Now your computer should be cleaned of Word Proser virus. If you still notice any signs of Word Proser, please send your request to the Trojan Killer Support. Specialists from Gridinsoft will help you to remove any kind of threats.

    Please, notice that Trojan Killer Support service is able for registred users only. 
    Posted by
    Labels: ,

    No comments:

    Post a Comment

    Subscribe to: Post Comments (Atom)