How to remove PlayMP3Z.biz Adware (Uninstall instructions)
Posted by admin on Sunday, May 31st, 2009 | 26,367 views
PlayMP3Z.biz is a new adware program that displays annoying popups, installs malicious files and also a Browser Helper Object that is used to control and hijack your Internet Explorer web browser.
Make sure to not fall in this scam, if your computer is infected with PlayMP3Z.biz, it is recommended to remove it immediately and to scan your system with a real security software.
Symptoms of infection
- The process PlayMP3.exe is running in your system
- The process ADVPro_reg.exe is running in your system
- The process ADVa.exe is running in your system
- Internet connections with malicious domain playmp3z.biz
- Slow computer performance
- Repeated security warnings, alerts and system scans
- Web sites that suddenly are shown on your desktop
Malicious web sites and urls:
1 2 | playmp3z.biz context-tool.com |
Internet traffic on port 80:
1 2 3 4 5 6 7 8 9 10 | GET /request?stage=install&request=27276269 HTTP/1.1 User-Agent: Mozilla Host: playmp3z.biz Cache-Control: no-cache ... hxxp://data2.playmp3z.biz/exe/data-4653cb30a91.exe hxxp://data2.playmp3z.biz/exe/data-71107d22b1c.exe hxxp://data2.playmp3z.biz/exe/data-735a384382d.exe hxxp://context-tool.com/new?app=P&flag= hxxp://data.context-tool.com/P/%s.xml? |
When the program is executed, it creates the following files:
1 2 3 4 5 6 7 8 9 10 11 | %ProgramFiles%\PlayMP3z %ProgramFiles%\PlayMP3z\PlayMP3.exe %User%\Start Menu\Programs\PlayMP3z %User%\Start Menu\Programs\PlayMP3z\Run PlayMP3z.lnk %ProgramFiles%\PlayMP3z\uninstall.exe %AllUsers%\Documents\Popsicle %AllUsers%\Documents\Popsicle\unins000.exe C:\DOCUME~1\user\LOCALS~1\Temp\is-HS4CD.tmp\ADVPro.dll %AllUsers%\Documents\Popsicle\ADVPro.dll %AllUsers%\Documents\Popsicle\ADVPro_reg.exe %AllUsers%\Documents\Popsicle\ADVa.exe |
How to remove PlayMP3Z.biz (manual removal) ?
- Terminate all the PlayMP3Z.biz processes
- Unregister all the PlayMP3Z.biz DLLs
- Delete all the PlayMP3Z.biz registry entries and BHOs
- Delete all the PlayMP3Z.biz files
How to remove PlayMP3Z.biz (automatic removal) ?
- Download and Install NoVirusThanks Malware Remover
- Update the database
- Click the button Scan
- Delete infected files
Leave a Reply