How to remove the WM Toolbar Engine malware

Some anti-malware programs classify wmadvisor.dll as a harmful extension to Internet Explorer: e.g. Win32:Malware-gen (detected by Avast), and IsolationAware (detected by Sophos). Add-ons like this can display ads, slow down your computer and cause various other errors. If you can't remember installing the associated WM Toolbar Engine software, it's no surprise. In most cases, this kind of adware is installed on the side when you install a freeware product like a Youtube Downloader or a PDF Converter. In the following selection, you can read more about WM Toolbar Engine and how to get rid of it.

Click here to automatically remove the WM Toolbar Engine malware

Wmadvisor.dll file information

The process known as WM Toolbar Engine or IE Toolbar Engine belongs to software WebMoney Advisor or WM Toolbar by CJSC Computing Forces (

Description: Wmadvisor.dll is not essential for the Windows OS and causes relatively few problems. The file wmadvisor.dll is located in a subfolder of "C:\Program Files" or sometimes in a subfolder of the user's profile folder. Known file sizes on Windows 10/8/7/XP are 288,224 bytes (50% of all occurrences), 2,409,472 bytes and 4 more variants. 
This .dll file is a Browser Helper Object (BHO) that runs automatically every time you start your web browser. BHOs are not stopped by personal firewalls, because they are identified by the firewall as part of the browser itself. BHOs are often used by adware and spyware. IDs used by this BHO include 1236D836-E9BA-4175-894F-2072A14D5A26 or B4806C1A-FE8A-4008-9DA3-8CEDB6E82C10 or E7D2CB77-6E2D-4C1F-B485-D50506B9FA6B. The program is not visible. It is able to monitor web browsers. Wmadvisor.dll is not a Windows system file. The file is digitally signed. Wmadvisor.dll is able to record keyboard and mouse inputs, monitor applications and manipulate other programs. Therefore the technical security rating is 54% dangerous.

Uninstalling this variant: If problems with WebMoney Advisor come up, you can turn to the software developer, Wmtransfer, for advice or uninstall it software via Windows Control Panel/Add or Remove Programs (Windows XP) or Programs and Features (Windows 10/8/7).

Recommended: Identify wmadvisor.dll related errors

Important: Some malware camouflages itself as wmadvisor.dll, particularly when located in the C:\Windows or C:\Windows\System32 folder, for example Win32:Malware-gen (detected by Avast), and IsolationAware (detected by Sophos). Therefore, you should check the wmadvisor.dll process on your PC to see if it is a threat. If WM Toolbar Engine has changed your browser's search engine and start page, you can recover your browser's default settings as follows:

Reset default browser settings for Internet-Explorer ▾
  1. In Internet Explorer, press the key combination Alt + X to open the Tools menu.
  2. Click Internet options.
  3. Click the Advanced tab.
  4. Click the Reset... button.
  5. Enable the Delete personal settings option.
This will reset your Internet Explorer to its default settings. Your browser will start with the familiar start page and search engine—without popups, ads, cookies, but all browser add-ons are deleted too [1]. Make cleaning up your browser and your computer simpler and safer with Security Task Manager.


User Comments

One user thinks wmadvisor.dll is dangerous and recommends removing it.

Do you have additional information? Help other users!
What do you know about wmadvisor.dll:
How would you rate it:
Link for more info:
Your Name:

Best practices for resolving wmadvisor issues

The following programs have also been shown useful for a deeper analysis: Security Task Manager examines the active wmadvisor process on your computer and clearly tells you what it is doing. Malwarebytes' well-known anti-malware tool tells you if the wmadvisor.dll on your computer displays annoying ads, slowing it down. This type of unwanted adware program is not considered by some antivirus software to be a virus and is therefore not marked for cleanup.

A clean and tidy computer is the key requirement for avoiding PC trouble. This means running a scan for malware, cleaning your hard drive using cleanmgr and sfc /scannow, uninstalling programs that you no longer need, checking for Autostart programs (using msconfig) and enabling Windows' Automatic Update. Always remember to perform periodic backups, or at least to set restore points.

Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.

Other processes

wmadvisor.dll [all]