84,488,480 programs installed

Should I remove Form Letter Roaming?

What percent of users and experts removed it?
79% remove it21% keep it
Overall Sentiment
Bad
What do people think about it?
(click star to rate)
How common is it?
Reach 0.0006%

Versions

VersionDistribution
1.0.0.0 100.00%

Form Letter Roaming

What is Form Letter Roaming?

This is a WinCheck/CMI (variant) adware/browser hijacker variant that injects code into the user's web browser (IE, Chrome and Firefox). It is known as an ad-injector, a malicious process that once inside the web browser will hijack existing advertisements of underlying web sites (not associated with the website itself). It will also inject new ads in white space on the site or images that have standard banner sizes. These ads are typically for promoting shopping discount coupons, ads for PC optimizers or bundled PUP offers, or malvertising since it runs on sketchy ad networks.This runs as a startup process called WinCheck in the user's startup registry (Run key) and will execute each time the computer is restarted and the user logs in.

How do you know if you are infected? First, if you have this program installed then this adware is most likely still running. Next, you see ads in the browser that say something like "Ads by WinCheck".

Overview

The primary executable is named pnsve44a.exe. A majority of users end up uninstalling this less than a week of it being installed. The setup package generally installs about 8 files and is usually about 841.02 KB (861,208 bytes).
  • Malware detected in the program
  • Displays unwanted advertisements
  • Most users and experts agree, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in Form Letter Roaming.
pnsve44a.exe (040afde0ad53b9d84c51c73682949a4e) has been flagged by the following 5 scanners:
Anti-Virus softwareVersionDetection
Baidu-International 4.0.3.15816 Adware.Win32.Downloader.Gex
ESET-NOD32 9.11768 Win32/Adware.ConvertAd.QH
SUPERAntiSpyware 9687 Trojan.Agent/Gen-FakeAlert
Symantec 8/16/2015 rev. 1 WS.Reputation
TrendMicro-HouseCall 7.2.228 Suspicious_GEN.F47V0604

Program detailsProgram details

Installation folder: C:\users\user\appdata\local\00000000-1431601222-0000-0000-6cf049763933
Uninstaller: C:\users\user\appdata\Local\00000000-1431601222-0000-0000-6CF049763933\Uninstall.exe
Estimated size: 841.02 KB

Program filesFiles installed by Form Letter Roaming

Program executable:pnsve44a.exe (Malware detected)
Path:C:\users\user\appdata\local\00000000-1431601222-0000-0000-6cf049763933\pnsve44a.exe
MD5:040afde0ad53b9d84c51c73682949a4e
Additional files:
  • rnsvE448.exe
  • Uninstall.exe
  • rnscE29D.exe
  • rnsj8450.exe
  • rnsn5A24.exe
  • rnsr76A8.exe
  • rnss1D33.exe

How do I remove Form Letter Roaming?

You can uninstall Form Letter Roaming from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program Form Letter Roaming, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove Form Letter Roaming.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

OS VERSIONS
Win 7 (SP1) 64%
Win 10 18%
 
USER ACTIONS
Uninstall it 79%
Keep it 21%
 
COUNTRY POPULARITY
43.75%
United States

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 81.82%
Windows 10 18.18%
Which OS releases does it run on?
Windows 7 Home Premium 45.45%
Windows 7 Ultimate 18.18%
Windows 7 Ultimate N 9.09%
Windows 8.1 Pro 9.09%
Windows 8.1 Single Langua... 9.09%
Windows 7 Enterprise 9.09%

Distribution by countryGeography

43.75% of installs come from the United States
Which countries install it?
  United States 43.75%
  Brazil 12.50%
  Canada 12.50%
  France 6.25%
  Norway 6.25%
  Mexico 6.25%
  Spain 6.25%
  Germany 6.25%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Dell 20.00%
Acer 20.00%
Sahara 10.00%
Lenovo 10.00%
Hewlett-Packard 10.00%
GIGABYTE 10.00%
Apple 10.00%
ASUS 10.00%
Common models
HP ProBook 4330s 9.09%
Gigabyte H55M-USB3 9.09%
FUJITSU ESPRIMO P99... 9.09%
Dell XPS 8300 9.09%
Dell Latitude D830 9.09%
Dell Inspiron 7348 9.09%

commentsComments

user comment
No one has commented yet. Help others learn more about this software, share your comments.