Your computer is infected with malicious software? Do you have popups on your PC?
If so, search this blog for removal instructions or find computer threats by category.

Wednesday, February 9, 2011

How to Remove WhiteSmoke Translator (Uninstall Guide)

Tell your friends:
A few days ago we received an email from our friend explaining that a program called WhiteSmoke Translator mysteriously appeared on his computer and he doesn't know how to get rid of it. After a fair bit of research, we learned that WhiteSmoke Translator is "an all-new application that enables you to take any text from any text-based application, and automatically translate it into a destination language". We also found many complains about this program on popular tech support forums. Finally, we found a sample of a Trojan (MD5: c5a4a504e73fda80390b630643d580b9) that drops WhiteSmoke Translator and some other adware/malware onto your computer without your consents. Whitesmoke Translator appeared on our computer along with several new desktop icons including one called "Improve Your PC" which pointed to a web page promoting Uniblue RegistryBooster 2011. We installed this software on your test machine too. It found 81 moderate registry errors. We were prompted to change our default search provider to whitesmokestart.com in Internet Explorer. If you somehow ended up with this misleading application on your computer, please follow the steps in the removal guide below to remove WhiteSmoke Translator and any related malware for free.

WhiteSmoke Translator hides translated words behind its advertisements. You have to close advertisements to see the translation which is kind of annoying.



Unlike other adware or potentially unwanted applications, WhiteSmoke Translator can be removed using the Add/Remove Programs control panel. However, we got an error on attempt to uninstall this program saying that some of the files are locked by rundll32.exe process. We had to end the process in order to uninstall this program.



WhiteSmoke Translator and Uniblue RegistryBooster 2011 icons:



The user is prompted to change the default search provider or keep using Bing. Please see how misleading it looks "Change to Yahoo (www.whitesmokestart.com)".





"Improve Your PC" icon links to a web page where you can download Uniblue RegistryBooster 2011.



Such software distribution methods are unacceptable. If you got with this malware, please scan your computer with anti-malware software. To remove WhiteSmoke Translator, please follow the removal instructions below. Let me know if you need any help with malware. Just leave a comment. Good luck and be safe online!


WhiteSmoke Translator removal instructions:

Download recommended anti-malware software and run a full system scan to remove this adware from your computer.

It's possible that an infection is blocking anti-malware software from properly installing. Before saving the selected program onto your computer, you may have to rename the installer to iexplore.exe or winlogon.exe. Don't forget to update the installed program before scanning.


Associated WhiteSmoke Translator files and registry values:

Files:
  • C:\Documents and Settings\All Users\Desktop\Launch WhiteSmoke Translator.lnk
  • C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Launch Whitesmoke Translator.lnk
  • C:\Documents and Settings\All Users\Start Menu\Programs\WhiteSmoke Translator\Registration.lnk
  • C:\Documents and Settings\All Users\Start Menu\Programs\WhiteSmoke Translator\Uninstall.lnk
  • C:\Documents and Settings\All Users\Start Menu\Programs\WhiteSmoke Translator\WhiteSmoke Translator.lnk
  • C:\Program Files\Whitesmoke Translator
Registry values:
  • HKEY_CURRENT_USER\Software\WhiteSmokeTranslator
  • HKEY_LOCAL_MACHINE\SOFTWARE\WhiteSmokeTranslator
Share this information with other people:

28 comments:

Anonymous said...

i noticed after i uninstalled whitesmoke that it had installed itself as my search engine and home page , which i did not want or authorize , i had to change those settings with the google wrench ( customize and control google chrome ) / options . hopefully it won't show up anywhere else , what a crappy sneaky program . avoid it !!!

Anonymous said...

somebody should fireball those assholes and give them a server chernoble meltdown

Anonymous said...

This crappy software is Downloaded by Trojan Win32 Murlo only Spyware Doctor full version can find those infections and remove them without mercy :)......Spyware Doctor Rockssssssss!!!!

Anonymous said...

hello users,

Go to C drive, choose Program Files and you will see a folder called Bing. Delete this folder and uninstall it from your system as well. Restart your browser, and that's it. It just worked on my Vista.

Anonymous said...

Mine showed up when I started to install Xvid. Won't do that again.

Anonymous said...

I'm pretty sure these assholes are the creeps that sen't me a bogus 500.00 gift certificate from walmart. They got my email and phone no.

Anonymous said...

Search HDD for executable jar file and delete.

Anonymous said...

May they rot in hell with their tongues cut out!

Anonymous said...

I can't find it ANYWHERE on my computer and I can't get it off my Google Chrome, and it set Bing as my homepage and even when I go into my tool bar and change it, it doesn't change.

Anonymous said...

ditto. i dont see bing or anything else discussed anywhere. tried to pull up chrome and whitesmoke keeps appearing - dont know how to get rid of it

Teddy "bare" Roosevelvet said...

Comp/OS: Acer laptop/win7(64bit) I found whitesmoke, though nothing about "Improving my PC" appeared, nor was my chrome browser affected, but this may be why my IE is acting so screwy.

"Revo Uninstaller" (free edition) was able to successfully circumvent the locked file and delete it and all registry entries using.

You can find it at: www.revouninstaller.com

Anonymous said...

iv looked everywhere but cant see it on my computer, iv tried revo uninstaller and malwarebytes but neither can find it. please help

Robert Viehweger said...

Yes, revo uninstaller worked great! I used the freeware version and it pulled it. Please remember to right click your web address bar and change your default search engine in Chrome as well! Thank you, Teddy :)

Anonymous said...

These disgusting people should be hung up by their thumbs. Whitesmoke came bundled with another program, I unchecked it on the installer but it installed it anyway. Took over .exe and .lnk and a lot of other file associations and reset itself as homepage and default search engine. It did uninstall from Add/Delete Programs, but left me unable to use shortcuts or run programs until I used another computer and found a fix on an internet forum. Why would they do this? Who would use their piece-of-crap program after that? Boggles the mind.

Hint: to get XP to again recognize .exe files, go to Tools/Folder Options/File Types in Tools menu of any folder. Click "New", type in "exe", do NOT click "OK" yet, click "Advanced" and from the drop-down list choose "Application". Now click "OK", and "OK" again. For .lnk files do the same but choose "Shortcut".

Anonymous said...

this developer should be sued and jailed...

Anonymous said...

Well i had some problem with whiteshit(whitesmoke) it already gave me a trojan. here is what i did. First i uninstalled it in program and features, but it stilled showed up so i went into google chrome option, on home page changed that into another page, click extension found WhiteSmoke itself there and uninstalled it and it is gone now on my comp

Anonymous said...

Even after removing and uninstalling whitesmoke, along with removing the extension from google chrome, whitesmoke search engine still showed up as my default web browser several weeks after removing it

Anonymous said...

please please help! i have a mac and whitesmoke became my homepage, i do not know ANY way to get rid of it, PLEASE HELP!

Anonymous said...

I switched from google firefox to chrome and got this ... i dont like chrome, and this is just adding to my frustration!

Stan Pioro said...

If you're running firefox, this is a simple fix:

1. At the top of the Firefox window, click on the Firefox button (Tools menu in Windows XP), and then click Add-ons. The Add-ons Manager tab will open.
2. In the Add-ons Manager tab, select the Extensions or Appearance or Plugins panel.
3. Select the add-on you wish to disable.
4. Click the Disable button.
5. Click Restart now if it pops up. Your tabs will be saved and restored after the restart.

Anonymous said...

Eat shit and die You fuckin bastards. chernobyl their asses!!!

Anonymous said...

thanks stan it came right off after i followed your instructions

Anonymous said...

Thanks to STAN! I tried everything to get rid of Whitesmoke including all malware removers I could run including Norton. Whitesmoke is tricky because it doesn't show up under recent downloads or add/remove and install/uninstall or hardly anywhere, really. It is really tough to get rid of but don't spend a bunch of money till you try the above instructions from Stan. Thank god it worked and Whitesmoke should be shutdown. Tell everyone you know to stay far away from them.

Anonymous said...

THANK YOU STAN! Worked like a charm!

Anonymous said...

the Stan suggestion did not remove the whitesmoke search box. The Google Piacaso photo editor download caused this problem for me.

Anonymous said...

Stan,

Thanks for your suggestion. I clicked on the "remove" button instead of "disable." A tab appeared after Firefox restarted, which said "Thank you for trying WhiteSmoke." Hopefully this is the last I will ever see from these asswholes!

Anonymous said...

I hate whitsmoke I wish I never see that program again anyway i did itusing chrome and options.

Anonymous said...

you can go to your menu on google chrome and click on "tools" than go to "extentions" and once that appears it will show what extentions you have added to your google.
enable the whitesmoke toolbar and your set!