WhiteSmoke Translator removal

Note: We disclaim any affiliation with the creators of WhiteSmoke Translator software.

Welcome to the removal guide for WhiteSmoke Translator. This is to be considered a self-help guide, and the Security Team at this site does not assume responsibility for direct, indirect, or consequential damage to your computer as a result of doing the step-by-step guide below.

WhiteSmoke Translator is a new translator program that has an unorthodox way of operating on the system. It is blamed to be installed by trojans, however, it is still being tested.

The site for WhiteSmoke products says that it is a software provider for grammar/translation-based products, however, experts on different antivirus teams have evaluated the possibility of it being installed by the TDSS Rootkit, which is a powerful infection.

Normal uninstall is usually not possible with this program, which is why these instructions must be particularly followed.

Shows up as installed program:
WhiteSmoke Translator
WhiteSmokeToolbar


How to remove WhiteSmoke Products


All of these steps should be taken one at a time. If the current step you are on solved the problem, you should not need to move on to the next step.

STEP 1 - First tasks

• Go to Start > Control Panel > Add or Remove programs (Just named "Programs and Features" or "Programs" in Vista or 7).
  
• Remove the following (if present):
  -WhiteSmoke Translator
  -WhiteSmokeToolbar
  -WhiteSmoke* (anything else named WhiteSmoke)
  
  You may encounter errors while uninstalling anyone of these products.
  
  Continue to the next step if needed.

STEP 2 - Use a powerful uninstaller

Download Revo Uninstaller Freeware and save it to your Desktop.

• Install the program.
  
• Run the program and type in the search box "WhiteSmoke". Allow it to pull up results.
  
• Select any WhiteSmoke product and uninstall them by turn. (Select the product and click on the Uninstall button).

STEP 3 - Malwarebytes' Anti-Malware

Please download Malwarebytes Anti-Malware from Download.CNET.com.
Alternate link: BleepingComputer.com.

Double Click mbam-setup.exe to install the application.

• Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes Anti-Malware, then click Finish.
  
• If an update is found, it will download and install the latest version.
  
• Once the program has loaded, select "Perform Quick Scan", then click Scan.
  
• The scan may take some time to finish,so please be patient.
  
• When the scan is complete, click OK, then Show Results to view the results.
  
• Make sure that everything is checked, and click Remove Selected.
  
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. If you are prompted to restart, please allow it to restart your computer. Failure to do this, will cause the infection to still be active on the computer.
  

STEP 4 - WhiteSmoke gone?

Check to see if it is gone.

If WhiteSmoke is not gone, then please do the following:

• Read and follow the steps in this topic.
  
• Then, post a new topic containing those logs in this section.

If you would like a better solution to help supplement your antivirus, or if you do not have an antivirus, consider purchasing the PRO version of Malwarebytes' Anti-Malware to protect against ALL types of threats.

Hi,

I googled a bit and there are a lot of people having problems with this WhiteSmoke program.

I was wondering if it was possible for you to create a little program that automates your uninstall routine. Just a simple batch file would do nicely.

Best wishes,
Fred

I would hope we can. I'll check in to some things...

I can help a bit. If you can create the basic tool, I can start searching for registry items that should be removed too.

Your instructions helped me get rid of whitesmoke on my laptop. I've been trying to do it for almost a year now with no success until I found this forum.

That's wonderful news, woo!

The uninstaller did the trick. Didn't even have to run MBAM. It failed to remove three files located in C:\Users\[Username]\AppData\Local\Temp/84 something something something etc. (didn't write it down sorry guys!) but removed everything else (and there was a lot else). The issue was the whitesmoke uninstaller opened its self and stopped the three files from being deleted. I closed the whitesmoke uninstaller and personally deleted the files. Thanks alot, been trying to get rid of these for a year easily.

So uninstaller won't find whitesmoke anymore...BUT in control panel---->administrative tools---->system configuration----->Startup "Launch Whitesmoke Translator" is still there. Even though it's disabled, it IS still there. Also whitesmoke isnt anywhere else in my computer.

Hi, i was also trying to remove Whitesmoke it was so anoying to do it ,i readed many post people was saying thet i can remove it from - add remove programs . But i could find it in there. and i am using firefox thets were i have Whitesnow and when i am trying to use my browser it just pops up access denied and in the searcher stands Whitesnow web search plz help me . sorry for bad english

Agalloch wrote:So uninstaller won't find whitesmoke anymore...BUT in control panel---->administrative tools---->system configuration----->Startup "Launch Whitesmoke Translator" is still there. Even though it's disabled, it IS still there. Also whitesmoke isnt anywhere else in my computer.

There are probably still remnants leftover. They can be disabled in MSCONFIG to prevent any error messages. Otherwise, you shouldn't have to worry anymore about it.

kaledos221 wrote: Hi, i was also trying to remove Whitesmoke it was so anoying to do it ,i readed many post people was saying thet i can remove it from - add remove programs . But i could find it in there. and i am using firefox thets were i have Whitesnow and when i am trying to use my browser it just pops up access denied and in the searcher stands Whitesnow web search plz help me . sorry for bad english

Have you tried removing it from Firefox add-ons, or starting Firefox in Safe Mode?