removing wmpscfgs.exe virus

The article describes the procedure of removing wmpscfgs.exe virus, a dangerous Trojan agent. The methods described here are simple and correct to the date. It is, however, recommended that users follow and implement these accurately. It will essentially save them from facing problems and eventually looking for online virus removal support options. Wmpscfgs.exe virus is a nasty and hard-to-remove Trojan virus. It can hijack all the processes or applications currently running in your system. Common symptoms of this virus include warning in the Internet Explorer that it is not your default browser, oddly behaving Windows UAC, or Microsoft Security Essentials showing your startup programs as a virus. Don't worry as we are here to help you. The guide mentioned below will help you step-by-step to completely eliminate this beast from your system and make it healthy again.

Instructions: Reboot your computer in Safe Mode. To do so, restart your computer and start pressing the F8 key on the keyboard before the Windows logo appears. Continue pressing the key until the Windows shows you the Advanced Boot options. Launch Windows Explorer from the Start menu and then navigate to All Programs> Accessories> and then Windows Explorer. Click on the Tools tab and then select Folder Options. When the Folder Options window opens up, click on the View tab, scroll down and then select the Show hidden files and folders option. Also make sure that the option Hide Extensions for known file types is not checked. Click on the Apply button and then OK to exit the current window. Ads by Google Open Task Manager by right clicking anywhere on the taskbar. Highlight the Processes tab, click to select the box Show processes from all users, select the wmpscfgs.exe process, and then click on the End Process button to stop it from running. For Windows Vista users, go to the directories C:\> Program Files> Internet Explorer as well as C:\> Users> AppData> Local> Temp. Look into both the locations for wmpscfgs.exe and remove the file or folder from there. Click on the Start menu and navigate to Run. When the Run window appears, type ‘regedit' (without quotes and as is) in the box and click on the OK button. If prompted for an admin password, key it in to proceed to the Windows Registry Editor. Before you begin and if you are not sure, take help of a techie friend or an expert to modify the Windows Registry. A wrongly modified registry can leave your computer partially or fully non-operational. You can also take backup of your registry before starting the modifications. Click on the ‘+' sign (to expand it) next to HKEY LOCAL MACHINE and navigate to Software> Microsoft> Windows> CurrentVersion> and Run. Search for the ‘%ProgramFiles%\Internet Explorer\wmpscfgs.exe' entry and delete it. Keep searching for this entry and deleting it until you stop seeing it in search results. Use the Find dialog box to search the entry. Press Ctrl + F keys together on the keyboard to bring up the box. Copy and paste this entry in the box and then click on the Find Next button. It will make searching easier for you. Look for these processes and/or files also and remove them viz. vmwareuser .exe; C:\Program Files\Internet Explorer\js.mui; C:\Program Files\Internet Explorer\wmpscfgs.exe; C:\Program Files\vmware\vmware tools\vmwareuser.exe; C:\Windows\Tasks\At1.job; C:\Windows\Tasks\At2.job; C:\Windows\Tasks\At3.job; C:\Windows\Tasks\At4.job; C:\Windows\Tasks\At5.job; C:\Windows\Tasks\At6.job; C:\Windows\Tasks\At7.job; C:\Windows\Tasks\At8.job; C:\Windows\Tasks\At9.job; C:\Windows\Tasks\At10.job; C:\Windows\Tasks\At11.job; C:\Windows\Tasks\At12.job; C:\Windows\Tasks\At13.job; C:\Windows\Tasks\At14.job; C:\Windows\Tasks\At15.job; C:\Windows\Tasks\At16.job; C:\Windows\Tasks\At17.job; C:\Windows\Tasks\At18.job; C:\Windows\Tasks\At19.job; %Temp%\wmpscfgs.exe. Search everywhere in the computer and Registry Editor too for these entries, files etc. and remove them. If you find any of these processes running in Task Manager, then kill the process (see above for the procedure). Double check every process, file, or entry in the Registry Editor so that all the traces of this virus can be removed. This is to ensure that the virus has been removed fully and doesn't come back. This nasty virus has the ability to come back and take over your system after reboot even if a single trace is there. Update your antivirus/anti-spyware program and run a full scan on your system. It will double ensure that there is no virus left in your computer. It is must to update your security software with latest updates on a regularly basis. Download and run a registry cleaner, an automatic tool, from a trusted website. Save the file to desktop and then run. It will clean up all the unnecessary or empty registry keys from the system. Make a backup or create a restore point before running the cleaner. When done, reboot your computer in normal mode. Update your antivirus to download any latest updates if available any.