How to remove PlayMP3Z.biz Adware (Uninstall instructions)

PlayMP3Z.biz is a new adware program that displays annoying popups, installs malicious files and also a Browser Helper Object that is used to control and hijack your Internet Explorer web browser.

Make sure to not fall in this scam, if your computer is infected with PlayMP3Z.biz, it is recommended to remove it immediately and to scan your system with a real security software.

Symptoms of infection

• The process PlayMP3.exe is running in your system
• The process ADVPro_reg.exe is running in your system
• The process ADVa.exe is running in your system
• Internet connections with malicious domain playmp3z.biz
• Slow computer performance
• Repeated security warnings, alerts and system scans
• Web sites that suddenly are shown on your desktop

Malicious web sites and urls:

1
2

playmp3z.biz
context-tool.com

Internet traffic on port 80:

1
2
3
4
5
6
7
8
9
10

GET /request?stage=install&request=27276269 HTTP/1.1
User-Agent: Mozilla
Host: playmp3z.biz
Cache-Control: no-cache
...
hxxp://data2.playmp3z.biz/exe/data-4653cb30a91.exe
hxxp://data2.playmp3z.biz/exe/data-71107d22b1c.exe
hxxp://data2.playmp3z.biz/exe/data-735a384382d.exe
hxxp://context-tool.com/new?app=P&flag=
hxxp://data.context-tool.com/P/%s.xml?

When the program is executed, it creates the following files:

1
2
3
4
5
6
7
8
9
10
11

%ProgramFiles%\PlayMP3z
%ProgramFiles%\PlayMP3z\PlayMP3.exe
%User%\Start Menu\Programs\PlayMP3z
%User%\Start Menu\Programs\PlayMP3z\Run PlayMP3z.lnk
%ProgramFiles%\PlayMP3z\uninstall.exe
%AllUsers%\Documents\Popsicle
%AllUsers%\Documents\Popsicle\unins000.exe
C:\DOCUME~1\user\LOCALS~1\Temp\is-HS4CD.tmp\ADVPro.dll
%AllUsers%\Documents\Popsicle\ADVPro.dll
%AllUsers%\Documents\Popsicle\ADVPro_reg.exe
%AllUsers%\Documents\Popsicle\ADVa.exe

How to remove PlayMP3Z.biz (manual removal) ?

• Terminate all the PlayMP3Z.biz processes
• Unregister all the PlayMP3Z.biz DLLs
• Delete all the PlayMP3Z.biz registry entries and BHOs
• Delete all the PlayMP3Z.biz files

How to remove PlayMP3Z.biz (automatic removal) ?

• Download and Install NoVirusThanks Malware Remover
• Update the database
• Click the button Scan
• Delete infected files