WinFixer Ad

[Jojo]

Okay... so as some of you may know, Winfixer is an adware/spyware program. It has a popup saying that your computer is infected, is in serious danger, and that you need to download WinFixer inorder to fix it.

 

So now, I have this constant WinFixer Ad that popups 20934780197 times and I can't seem to get rid of it. And... there was this one time I accidently downloaded the dumb thing. So...how to completely uninstall, block, and remove this adware?

[Belgaron]

First I would look in ADD/REMOVE Programs in the control panel..............delete any programs you don't use. If you are not sure ask someone! then I would run every clean-up program I had. i.e. Microsoft SpyWare. Search and Destroy, Pest Patrol......................I say run ALL because some may catch what others won't. If you have a Reg Cleaner use that as well. Remove all notations to programs you don't use. Most of these programs (cleaners) can be found at www.MajorGeeks.com

 

And as a rule......................when I do get those pop-ups I X out of them instead of using the close button. Sometimes the buttons are linked to the startup program.

[Surak]

www.hitmanpro.nl Its a Dutch program who downloads and runs all the major anti-spyware programs, its also in English, give that a try.

[Belgaron]

One other thing.....................the Microsoft Anti-Spyware program runs realtime. It can be found at microsoft.com. I found it to be a very good safeguard.

[Eliteone]

Found this on the web for you:

 

The WinFixer popup is a frustrating problem that will present frequent popup windows. This can occur even when your Web browser is not running. In some cases it will continually pop up each time you visit a new Web site and since the program can load with Windows it means that standard popup blockers are generally ineffective. Needless to say, it can be extremely annoying.

 

Your first step is to identify that WinFixer is the problem. Generally, the popups will make this clear because they will display WinFixer in the window or title bar (the strip across the top of a Window). You will also get fake error messages saying that there is a problem with your computer and you should install WinFixer to correct the problem - this will then tell you to pay for the full version of WinFixer.

 

In a few instances, you may be able to remove the program via Windows Add/Remove Programs (go to the Windows Control Panel and click Add/Remove Programs. Look for WinFixer in the list - it is generally towards the end). If you are one of the lucky ones, remove the program, restart your computer and your system should be clear. Be aware however, that WinFixer may have been installed by some other adware program on your computer, so it is possible that it may return. If this happens, follow the steps listed under 'Avoiding WinFixer in the future'. Another particularly annoying aspect is that sometime the program keeps re-installing itself - this will require a bit more work.

 

 

If Add/Remove Programs wasn't successful in the removal of the WinFixer popup, it is time to clean up your system and use a specially designed spyware removal tool. Step one is to flush out all the temp files on your system: Cookies, Temporary Internet Files and Temp files (you can do this via Internet Explorer's Tools-Internet Options or for a more thorough clean, use a privacy tool such as Tracks Eraser Pro 5). The WinFixer popup can be a very tough pest to squash, so you are going to need a program such as SpyCatcher. It will also flush out all types of spyware, adware and malware. Plus it offers home page protection to guard against future hijacks. Download a copy and run it to remove WinFixer and probably other pests on your system. There are numerous reports that WinFixer is becoming more devious, so if your removal was successful, make sure you take some preventative measures to stop its return:

 

 

Avoiding WinFixer in the future

Keep your system fully patched - including Windows, anti-virus software and anti-spyware tools.

WinFixer is included in many 'free programs' or modified versions of free programs downloaded from untrusted sites or file sharing networks. There have been reports that some installations of Limewire and a modified but unauthorised release of Internet Explorer 7 Beta have had WinFixer inserted. As a general rile. during the installation of free software, take a moment or two to see if they mention other bundled programs.

Most quality free programs do not have a budget to advertise, so beware of ads that offer something for free. Normally they include some kind of adware/spyware.

Finally, consider adding an anti-adware tool to work next to your anti-virus software. Our preferred choice is SpyCatcher.

 

 

 

Below listed processes, dlls, registry entries, files and directories are part of this malware. To manually get rid of it, follow these instructions (at your own risk)

 

 

Removal Instructions

 

Kill the following processes

Program Files\winfixer 2005\install.exe

Program Files\winfixer 2005\sr.exe

Program Files\winfixer 2005\unins000.exe

Program Files\winfixer 2005\updater.exe

Program Files\winfixer 2005\wfx5.exe

 

Unregister the following DLLs and reboot

Program Files\common files\winsoftware\crxml.dll

Program Files\common files\winsoftware\pcheck.dll

Program Files\winfixer 2005\compcln.dll

Program Files\winfixer 2005\df_fixer.dll

Program Files\winfixer 2005\df_proxy.dll

Program Files\winfixer 2005\ffcom.dll

Program Files\winfixer 2005\ffwraper.dll

Program Files\winfixer 2005\fixcore.dll

Program Files\winfixer 2005\ftrec.dll

Program Files\winfixer 2005\idletrac.dll

Program Files\winfixer 2005\mmfix.dll

Program Files\winfixer 2005\oedrop.dll

Program Files\winfixer 2005\strres.dll

 

Delete the following registry entries

HKEY_CLASSES_ROOT\compcleancore.appcleaner.1\clsid

HKEY_CLASSES_ROOT\compcleancore.appcleaner\clsid

HKEY_CLASSES_ROOT\compcleancore.appcleaner\curver

HKEY_CLASSES_ROOT\compcleancore.filecleaner.1\clsid

HKEY_CLASSES_ROOT\compcleancore.filecleaner\clsid

HKEY_CLASSES_ROOT\compcleancore.filecleaner\curver

HKEY_CLASSES_ROOT\compcleancore.inetcleaner.1\clsid

HKEY_CLASSES_ROOT\compcleancore.inetcleaner\clsid

HKEY_CLASSES_ROOT\compcleancore.inetcleaner\curver

HKEY_CLASSES_ROOT\compcleancore.regcleaner.1\clsid

HKEY_CLASSES_ROOT\compcleancore.regcleaner\clsid

HKEY_CLASSES_ROOT\compcleancore.regcleaner\curver

HKEY_CLASSES_ROOT\compcleancore.systemcleaner.1\clsid

HKEY_CLASSES_ROOT\compcleancore.systemcleaner\clsid

HKEY_CLASSES_ROOT\compcleancore.systemcleaner\curver

HKEY_CLASSES_ROOT\df_fixer.fixer.1\clsid

HKEY_CLASSES_ROOT\df_fixer.fixer\clsid

HKEY_CLASSES_ROOT\df_fixer.fixer\curver

HKEY_CLASSES_ROOT\df_proxy.drivermanipulate.1\clsid

HKEY_CLASSES_ROOT\df_proxy.drivermanipulate\clsid

HKEY_CLASSES_ROOT\df_proxy.drivermanipulate\curver

HKEY_CLASSES_ROOT\ffcom.flfixer\clsid

HKEY_CLASSES_ROOT\ffwraper.ffenginwraper.1\clsid

HKEY_CLASSES_ROOT\ffwraper.ffenginwraper\clsid

HKEY_CLASSES_ROOT\ffwraper.ffenginwraper\curver

HKEY_CLASSES_ROOT\fixcore.mmfixcore.1\clsid

HKEY_CLASSES_ROOT\fixcore.mmfixcore\clsid

HKEY_CLASSES_ROOT\fixcore.mmfixcore\curver

HKEY_CLASSES_ROOT\interface\{1ce1c25b-f8b4-4974-99d2-5d4ae96b9900}

HKEY_CLASSES_ROOT\interface\{9e984934-cd94-4763-9dbc-618e483d4b7f}

HKEY_CLASSES_ROOT\typelib\{30ed49a5-ca6c-4918-b5f3-5e6818c91d8b}\1.0

HKEY_CLASSES_ROOT\typelib\{6a077841-5016-42c8-92c8-f2d6b865bcd1}

HKEY_CLASSES_ROOT\typelib\{ad70ac89-f460-4e7e-b5a5-7eaf7e207736}

HKEY_CLASSES_ROOT\typelib\{b6625280-8cd8-4632-97c0-83cec12a49a3}

HKEY_CLASSES_ROOT\typelib\{f458adae-d53b-4859-b99f-9fa127791278}

HKEY_CLASSES_ROOT\typelib\{fc76a5b8-db35-4f3e-8b9a-bf0eea098d64}

HKEY_CURRENT_USER\software\winsoftware\winfixer 2005

 

Remove the following files

Program Files\Common Files\winfixer 2005\contact customer support.lnk

Program Files\Common Files\winfixer 2005\uninstall winfixer 2005.lnk

Program Files\Common Files\winfixer 2005\winfixer 2005 on the web.lnk

Program Files\Common Files\winfixer 2005\winfixer 2005.lnk

Program Files\common files\winsoftware\crxml.dll

Program Files\common files\winsoftware\pcheck.dll

Program Files\winfixer 2005\activate.dat

Program Files\winfixer 2005\bnlink.dat

Program Files\winfixer 2005\compcln.dll

Program Files\winfixer 2005\database.sav

Program Files\winfixer 2005\df_fixer.dll

Program Files\winfixer 2005\df_kmd.sys

Program Files\winfixer 2005\df_proxy.dll

Program Files\winfixer 2005\ffcom.dll

Program Files\winfixer 2005\ffwraper.dll

Program Files\winfixer 2005\fixcore.dll

Program Files\winfixer 2005\flash.ini

Program Files\winfixer 2005\ftrec.dll

Program Files\winfixer 2005\idletrac.dll

Program Files\winfixer 2005\install.exe

Program Files\winfixer 2005\lapv.dat

Program Files\winfixer 2005\license.rtf

Program Files\winfixer 2005\lock.dat

Program Files\winfixer 2005\mmfix.dll

Program Files\winfixer 2005\oedrop.dll

Program Files\winfixer 2005\program.sav

Program Files\winfixer 2005\pv.dat

Program Files\winfixer 2005\sr.exe

Program Files\winfixer 2005\sr.log

Program Files\winfixer 2005\strres.dll

Program Files\winfixer 2005\support.url

Program Files\winfixer 2005\template.dbx

Program Files\winfixer 2005\trace.log

Program Files\winfixer 2005\unins000.dat

Program Files\winfixer 2005\unins000.exe

Program Files\winfixer 2005\up.dat

Program Files\winfixer 2005\update.log

Program Files\winfixer 2005\updater.dat

Program Files\winfixer 2005\updater.exe

Program Files\winfixer 2005\wfx5.exe

Program Files\winfixer 2005\wfx5.url

 

Remove the following directories

Program Files\winfixer 2005

Program Files\winfixer 2005\backup

Program Files\winfixer 2005\mp3db

Program Files\winfixer 2005\mpegdb

Program Files\winfixer 2005\repaired

Program Files\winfixer 2005\tasks

Program Files\winfixer 2005\wavedb

 

 

[Jojo]

Okay, I've done pretty much allll of those things. I still get pop-ups.

[RXS]

Time to reformat. Blitz it all!

[Leesy]

Did you try some spyware removers Jojo?

 

AdAware

Spybot: S&D

MS AntiSpyware

 

Hopefully those three will get anything you've missed.

[Lodingi]

if it's those annoying messenger pop up windows do the following:

 

1. go to control panel and click on the administrative tools icon.

 

2. click on the services icon.

 

3. right click on the messenger service and choose to stop the service.

 

4. then double click the messenger service and in the startup option choose disabled.

 

5. click apply and exit back to the desktop.

 

this should solve the problem. no need to worry. this has nothing to do with windows messenger and your chat programs will not be affected. hope this helps.

[Slngsht]

Okay, I've done pretty much allll of those things. I still get pop-ups.

 

Sounds like a registry problem and not a spyware/adware problem. You should find a registry cleaner program... check out www.download.com to find some good ones. They also have ratings on that site for the programs. Run this, and you won't only get rid of the popups you have, your system will run faster too.

 

I have TuneUp Utilities 2004, and I LOVE it. It will even DEFRAG the registry!

[Leesy]

We've all missed one little bit of advice. Jojo, if you are running a more recent version of Windows, run Windows Update. These popups could be because there's a security issue in Windows that is letting these popups in (like the Messenger service exploit Lodingi mentioned). Making sure you have all the latest Windows updates should help.