Winfixer 2005

Subject: RE: Winfixer 2005
From: JohnInKansas
Date: 12 Dec 05 - 09:15 PM

Oops... Sorry about the "Mike" bit above. It was Mick Pearce (MCP) - 11 Dec 05 - 02:35 PM who posted the earlier link to Symantec. Good link, too.

One more cup'a and maybe I can get the other eye open.

John

Subject: RE: Winfixer 2005
From: JohnInKansas
Date: 12 Dec 05 - 09:11 PM

If all you had was a shortcut on your desktop, and if the shortcut was never clicked, deleting it might have removed it; but the nature of the program suggests that if it was on your machine, it probably installed itself.

Use the link given above by Mike, or this one to Symantec Security Response - Winfixer and RTFM.

The report at Symantec for this crud indicates that it doesn't just "uninstall." There are about forty four files added to your machine by the program that must be deleted. You should use the list of files from Symantec and at least check to see if any of the first few appear on your machine.

Certain versions of Norton Security products, that include "security risk detection" can remove the files. Unfortunately I've been unable to find anywhere that Symantec says which Norton products have this capability; but if your AV/Adware/Spyware scans didn't report this as malware you may assume that you don't have one of them. You will need to be sure that you delete ALL OF THE FILES that were installed.

There are also about eighty five registry entries made by Winfixer that must be removed manually using Regedit if you want to be rid of it. Manual removal of the Registry entries is required even if you have one of the Norton/Symantec programs that can detect and disable this program.

While you may have been able to delete enough files to make it stop working, you are likely to get "error messages" perpetually until you clean out the registry. If you didn't follow detailed instructions for complete removal from a competent malware control site, and if you find any of the files in the Symantec list on your machine, you probably didn't get them all removed.

Symantec also notes that this program may disable regedit so that you cannot access it. If it has done this, you will be unable to use regedit for any purpose and it's an essential maintenance tool. You need to at least verify that you can still open regedit, and if you cannot, there is a link in the Symantec instructions for a tool to re-enable regedit.

If you did find instructions for a removal, and if it appears that a complete removal was obtained, it might be of interest to others to know where you found the method that you used...

John

Subject: RE: Winfixer 2005
From: Les in Chorlton
Date: 12 Dec 05 - 02:40 PM

Ok, I did not instal it. It just lay on my desk top. I have uninstalled it, if that is not a contradiction in terms.

It seeme to have gone away. I have conducted a search and found 2 text documents which I have also deleted and emptied the bin.

I have no problems so far. Do you think I have got away with it?

Subject: RE: Winfixer 2005
From: DMcG
Date: 11 Dec 05 - 02:35 PM

Its a virus, I'm afraid. See here

Subject: RE: Winfixer 2005
From: Mick Pearce (MCP)
Date: 11 Dec 05 - 02:35 PM

I don't know it myself, but Symantec seem to think it's something you'd want to remove: see Symentec Security Response - Winfixer. I think there are removal instructions there, but a web seach on Winfixer brings up several sites with removal instructions.

Mick

Subject: RE: Winfixer 2005
From: bobad
Date: 11 Dec 05 - 02:34 PM

If you google it, it looks like it may be spyware.

Subject: Winfixer 2005
From: Les in Chorlton
Date: 11 Dec 05 - 02:29 PM

Winfixer 2005 has just appeared on my desktop. The Icon is a white spanner on a brown ground. I have never noticed it before.

It tells me lots of things are wrong with my PC. Is this legit or some strange invader?