Home > Rogue Anti-Spyware > WinCodec Pro

How to remove WinCodec Pro?

March 9th, 2009

What is WinCodec Pro?

WinCodec Pro is a new rogue codec pack, even though the idea seems outlandish at best. This parasite enters the system by using trojans, such as Zlob or Vundo, which can be found in various websites of dubious nature. This parasite also goes of name WinCodecPro, though there is nothing professional in it. 

Once inside and active, WinCodec Pro will flood the user with popups and fake system notifications, supposedly to inform him of codecs that could greatly increase image and sound quality. WinCodec Pro is not the answer, if you need codecs, download Klite and skip paying for this bogus tool altogether.

The home of WinCodec Pro (wincodecpro.com) is a rare example of the Engrish language. According to Alex, NY:

“Just super! Older come was on a half-day tune codecs, and now only two minuty and lose all the films are. A quality – generally superior. I do not think that this can be increase it. Thanks for the cool program.”

I think I’ve made my point.


WinCodec Pro is Extremely dangerous

arrow WinCodec Pro is a corrupt Anti-Spyware program
arrow WinCodec Pro may spread via Trojans
arrow WinCodec Pro may display fake security messages
arrow WinCodec Pro may install additional spyware to your computer
arrow WinCodec Pro may repair its files, spread or update by itself
arrow WinCodec Pro violates your privacy and compromises your security
Download Spyware Doctor
for WinCodec Pro detection

Note: Spyware Doctor trial provides detection of parasite like WinCodec Pro and assists in its removal for free. You can remove detected files, processes and registry entries yourself or purchase a full version.



WinCodec Pro screenshots


WinCodec Pro fake application

Manual WinCodec Pro removal


Important Note: Although it is possible to manually remove WinCodec Pro, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend using Spyware Doctor or other malware and spyware removal applications found on 2-viruses.com.
Stop these WinCodec Pro processes:
Remove these WinCodec Pro Registry Entries:
Remove these WinCodec Pro files:
It is impossible to list all file names and locations of modern parasites. You can identify remaining parasites, other WinCodec Pro infected files and get help in WinCodec Pro removal by using free Spyware Doctor scanner. It comes with free real-time protection module that helps preventing WinCodec Pro and similar threats.

WinCodec Pro is classified as Rogue Anti-Spyware. After infecting a user’s system, it proceeds to scare its victim into buying the “product” by displaying fake security messages, stating that your computer is infected with spyware and only WinCodec Pro can help you to remove it after you download the trial version. As soon as the victim downloads WinCodec Pro trial version, it pretends to scan your computer and shows a grossly exaggerated amount of non-existent errors. Then, WinCodec Pro offers to buy the full version to fix these false errors. If the user agrees, WinCodec Pro does not only fix the errors, but it also takes the user’s money and may even install additional spyware into the victim’s computer.

Some Rogue Anti-Spyware, such as WinCodec Pro, may offer users to buy it after the victim clicks on a banner or a pop-up while surfing the internet. Usually, a Trojan is installed to a victim’s computer after clicking on the advertisement. It then proceeds to download or even install WinCodec Pro, which is another way for Rogue Anti-Spyware to spread itself.

Most of rogue Anti-Spyware, such as WinCodec Pro, is nearly impossible to remove manually.


How to tell if your PC has been infected by a Rogue Anti-Spyware such as WinCodec Pro?

Numerous undesirable and annoying pop-ups: A typical Rogue Anti-Spyware parasite keeps track of your internet browsing habits, sending your browsing history data to remote servers, owned by third party companies that use this information to advertise their products via numerous pop-ups, toolbars, hijacked homepages and spam letters. All these undesirable advertising methods are used on the victims of Rogue Anti-Spyware.
Changed or new icons: Sometimes, Rogue Anti-Spyware installs unwanted software to a victim’s PC without user’s knowledge and consent. This may lead to slower PC performance and stability, as well as more unwanted programs you can't remove.

Rogue Anti-Spyware

  1. rod
    March 10th, 2009 at 13:59 | #1

    im goin to format my computer and stay off the internet im fed up of spyware and other crap

  2. questor
    March 10th, 2009 at 21:51 | #2

    @rod
    Reformat?? Then the terrorists win.
    In all seriousness reformat is always the way to go imho….
    I am currently doing a reformat and clean install for someone infected by this garbage. Coming from a Mac environment, I just cannot believe the grief encountered by PC users. And NO, this is not a Mac vs PC babble. Just a simple observation…

  3. questor
    March 10th, 2009 at 22:21 | #3

    Actually forgot to mention, I have used Malwarebytes to successfully remove this WinCodecPro crap. I still recommend a reformat and clean install to be 100% sure of any virus/spyware removal. I have not tried some of the other products listed on this page. Perhaps others can add testimony to there effectiveness.

  4. April 29th, 2009 at 21:19 | #4

    I am infected with WinCodec Pro, but do not have any of the files or Registry keys you mentioned above. Are there other areas of my machine I need to look at? Also, you folks mention reformatting; is that a practical option given the need to re-install all the apps etc? Thanks for the help.

    • April 30th, 2009 at 08:53 | #5

      This is a case of multiple infections of different strain of trojans. I would recommend using reputable scanner to check your PC.

  5. Inquiring
    April 30th, 2009 at 19:15 | #6

    Like PMol, my pc is infected too and I haven’t found any of the files or registry keys. I first tried removing it manually, no luck. I then tried Norton Internet Security 2009, no luck. And then used Spyware Doctor, no luck. Does anyone know how to get this crap removed?

  6. AZL
    May 7th, 2009 at 18:48 | #7

    So i searched for the wextract.exe process and it came up with three files called wextract. One was in system 32, one was in system 32, in a file called dllcache and the other was in a place called SoftwareDistribution. Which one do i delete?

  7. Tracy Johnson
    May 27th, 2009 at 03:11 | #8

    I manually deleted a couple files using “regedit” to delete registry keys, and no more pop-ups are coming. (Thank God!)

    But I still can’t watch videos, when I try to watch a video saved on my hard drive, it stops playing and I see the message about not being able to play videos.

    What key registry did I miss that I should delete????

  8. skyler
    October 29th, 2009 at 04:09 | #9

    all you need to do is run smitfraudfix in NORMAL mode … not safemode … it will not detect the program in safemode being that it is ran from the hive and not a temp dir … =D

  9. Chetto
    November 4th, 2009 at 05:35 | #10

    i hate this s**t it f***ed up my computer and now i have to like do stuff and stuff also it messes with iTunes and is pi**es me off.

  10. Tim
    November 4th, 2009 at 11:56 | #11

    Fiance contracted this POS and it took me a night to get rid of it. I don’t really have an easy way of getting rid of it just manual cleaning. The process turned out to be hnsyntpeh. This is close to the process syntpeh which is synaptic mouse program. Deleted any reference I could find of the previously mentioned name. I’m still looking for the intial point of contraction but so far it appears to be cleared up.

  1. No trackbacks yet.