To Thread - Forum Home

The Mudcat Café TM
https://mudcat.org/thread.cfm?threadid=87162
7 messages

Winfixer 2005

11 Dec 05 - 02:29 PM (#1625098)
Subject: Winfixer 2005
From: Les in Chorlton

Winfixer 2005 has just appeared on my desktop. The Icon is a white spanner on a brown ground. I have never noticed it before.

It tells me lots of things are wrong with my PC. Is this legit or some strange invader?


11 Dec 05 - 02:34 PM (#1625102)
Subject: RE: Winfixer 2005
From: bobad

If you google it, it looks like it may be spyware.


11 Dec 05 - 02:35 PM (#1625103)
Subject: RE: Winfixer 2005
From: Mick Pearce (MCP)

I don't know it myself, but Symantec seem to think it's something you'd want to remove: see Symentec Security Response - Winfixer. I think there are removal instructions there, but a web seach on Winfixer brings up several sites with removal instructions.

Mick


11 Dec 05 - 02:35 PM (#1625104)
Subject: RE: Winfixer 2005
From: DMcG

Its a virus, I'm afraid. See here


12 Dec 05 - 02:40 PM (#1625776)
Subject: RE: Winfixer 2005
From: Les in Chorlton

Ok, I did not instal it. It just lay on my desk top. I have uninstalled it, if that is not a contradiction in terms.

It seeme to have gone away. I have conducted a search and found 2 text documents which I have also deleted and emptied the bin.

I have no problems so far. Do you think I have got away with it?


12 Dec 05 - 09:11 PM (#1626055)
Subject: RE: Winfixer 2005
From: JohnInKansas

If all you had was a shortcut on your desktop, and if the shortcut was never clicked, deleting it might have removed it; but the nature of the program suggests that if it was on your machine, it probably installed itself.

Use the link given above by Mike, or this one to Symantec Security Response - Winfixer and RTFM.

The report at Symantec for this crud indicates that it doesn't just "uninstall." There are about forty four files added to your machine by the program that must be deleted. You should use the list of files from Symantec and at least check to see if any of the first few appear on your machine.

Certain versions of Norton Security products, that include "security risk detection" can remove the files. Unfortunately I've been unable to find anywhere that Symantec says which Norton products have this capability; but if your AV/Adware/Spyware scans didn't report this as malware you may assume that you don't have one of them. You will need to be sure that you delete ALL OF THE FILES that were installed.

There are also about eighty five registry entries made by Winfixer that must be removed manually using Regedit if you want to be rid of it. Manual removal of the Registry entries is required even if you have one of the Norton/Symantec programs that can detect and disable this program.

While you may have been able to delete enough files to make it stop working, you are likely to get "error messages" perpetually until you clean out the registry. If you didn't follow detailed instructions for complete removal from a competent malware control site, and if you find any of the files in the Symantec list on your machine, you probably didn't get them all removed.

Symantec also notes that this program may disable regedit so that you cannot access it. If it has done this, you will be unable to use regedit for any purpose and it's an essential maintenance tool. You need to at least verify that you can still open regedit, and if you cannot, there is a link in the Symantec instructions for a tool to re-enable regedit.

If you did find instructions for a removal, and if it appears that a complete removal was obtained, it might be of interest to others to know where you found the method that you used...

John


12 Dec 05 - 09:15 PM (#1626059)
Subject: RE: Winfixer 2005
From: JohnInKansas

Oops... Sorry about the "Mike" bit above. It was Mick Pearce (MCP) - 11 Dec 05 - 02:35 PM who posted the earlier link to Symantec. Good link, too.

One more cup'a and maybe I can get the other eye open.

John