WinFixer 2005

Discussion in 'Virus Information' started by Sherri, Nov 12, 2005.

  1. From: "kuehnel trading" <kuehnel >

    |
    | 1. Go to add/remove programs and remove any programs that resemble ad/spyware.
    |
    | 2. Run Lavasoft's Ad ware remover
    | http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022_4-10399602.html?tag=lst-0-1
    | it should find or recogize about 4 processes that Winfixer requires to
    | run. I believe it's Side bar Buddy, Alexa, CCrs and another I forget.
    |
    | 3. Run msconfig and find the listing for winfixer or winsoftware in the
    | startup folder. Check in windows explorer for the about name folders also and
    | delete them.
    |
    | 4. Reboot
    |
    | **Disclaimer: Not responsible for any damage to computer for advice given.
    | To the best of my knowledge the above steps are that I did to remove that
    | silly program. No more pop up window at bootup or pop up in general. Hope it
    | helps.
    | I tend to remember this process fixing my compuer

    If that's what you did, you are still infected.

    WinFixer 2005 is associated with the Vundo Trojan and Adware-Virtumundo and can be
    auto-installed via a downloader Trojan.

    Two phase answer...

    Perform Part 1 the perform part 2

    Part 1
    ------------
    Download Adware-Virtumundo Removal Tool v1.5 --
    http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe

    Information on the Adware-Virtumundo Removal Tool:
    http://forums.mcafeehelp.com/viewtopic.php?t=57049

    Part 2
    ------------
    Download WinFixerFix.exe from the URL --
    http://www.ik-cs.com/programs/virtools/WinFixerFix.exe

    Execute; WinFixerFix.exe { Note: You must accept the default of C:\McAfee }
    Choose; Unzip
    Choose; Close

    NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
    FireWall to enable WGET.EXE to download the needed McAfee related files.

    Execute; c:\mcafee\clean.bat
    { or Double-click on 'Clean Link' in c:\mcafee }

    A final report in HTML format called C:\mcafee\ScanReport.HTML will be generated. At the
    end of the scan, it will be displayed in your browser (Opera, FireFox or Internet Explorer).
    It is suggested that you move the report out of c:\mcafee before performing another scan.
    It would be a good idea to scan in Safe Mode and in Normal Mode and save a copy of the HTML
    report for each session.

    * * * Please report back your results * * *
     
    David H. Lipman, Dec 22, 2005
    1. Advertisements

  2.  
    =?Utf-8?B?a3VlaG5lbCB0cmFkaW5n?=, Dec 22, 2005
    1. Advertisements

  3. David

    YOU ARE THE MAN. This is the fix for winfixer 2005 that finally worked on
    our home computer. It has been a tough task to find the correct means to get
    this pesky ad-pop up off of our machine, but your soln here did work. It
    appeared that the www.ik-cs.com program runs a cleaning in an old "DOS" mode
    or prompt command, but all 3 of us here at home agree that Winfixer is GONE
    !!! Glory days.

    Thanks a bunch.

    Paul
     
    =?Utf-8?B?UGFibG8gZnJvbSBNYXJpZXR0YQ==?=, Dec 28, 2005
  4. From: "Pablo from Marietta" <Pablo from >

    | David
    |
    | YOU ARE THE MAN. This is the fix for winfixer 2005 that finally worked on
    | our home computer. It has been a tough task to find the correct means to get
    | this pesky ad-pop up off of our machine, but your soln here did work. It
    | appeared that the www.ik-cs.com program runs a cleaning in an old "DOS" mode
    | or prompt command, but all 3 of us here at home agree that Winfixer is GONE
    | !!! Glory days.
    |
    | Thanks a bunch.
    |


    I'm glad you have resolution !

    It isn't DOS. It is a Win32 command line line scanner. It just looks like DOS becuase it
    isn't a GUI based utility.

    Happy New Year !
     
    David H. Lipman, Dec 28, 2005
  5. To David:
    Thanks goes out to you for the help on fixing this problem. I to was
    harrassed with the same problem, only being directed by others to download
    anti spyware/adware programs, and none would help with this problem. I
    follwed your directions and as of now, everything seems to be fine. I felt
    like I was doing everything to keep stuff like this off my computer, never
    had a problem like this before. I feel like my firewall, Norton antivus,
    norton system works, etc. etc. etc. were protecting my computer. Then this
    happened. I first noticed things were wierd when my Windows media player
    started acting up. Then some saved passwords to regular sites were needing to
    be re-entered. Then the pop-ups started coming with this winfixer beast. It
    wouldnt go away. Closing the pop up would just send you to different pop ups,
    ultimately making my browser close. I was pulling my hair out. Even trying to
    search forums for a cure to this problem was a task, having the winfixer pop
    up ruining searches. As of right now, everything is good. Thank you for the
    help.
    Secondly does anyone know where this originated?? I don't ever click on
    windows with anoying ads on them. I felt I was being safe only to get hounded
    by this problem.
    Again thanks for the help.

    Tim
     
    =?Utf-8?B?VGlt?=, Jan 7, 2006
  6. From: "Tim" <>

    | To David:
    | Thanks goes out to you for the help on fixing this problem. I to was
    | harrassed with the same problem, only being directed by others to download
    | anti spyware/adware programs, and none would help with this problem. I
    | follwed your directions and as of now, everything seems to be fine. I felt
    | like I was doing everything to keep stuff like this off my computer, never
    | had a problem like this before. I feel like my firewall, Norton antivus,
    | norton system works, etc. etc. etc. were protecting my computer. Then this
    | happened. I first noticed things were wierd when my Windows media player
    | started acting up. Then some saved passwords to regular sites were needing to
    | be re-entered. Then the pop-ups started coming with this winfixer beast. It
    | wouldnt go away. Closing the pop up would just send you to different pop ups,
    | ultimately making my browser close. I was pulling my hair out. Even trying to
    | search forums for a cure to this problem was a task, having the winfixer pop
    | up ruining searches. As of right now, everything is good. Thank you for the
    | help.
    | Secondly does anyone know where this originated?? I don't ever click on
    | windows with anoying ads on them. I felt I was being safe only to get hounded
    | by this problem.
    | Again thanks for the help.
    |
    | Tim

    Tim:

    Thanx for the feedback. I don't know the source bu, there are theories about how you can be
    infected.


    If you are using any version of Sun Java that is prior to JRE Version 5.0,
    then you are strongly urged to remove any/all versions that are prior to JRE
    Version 5.0. There are vulnerabilities in them and they are actively being exploited.
    It is possible that is how you got infected with malware.

    Therefore, it is highly suggested that if there are any prior versions of Sun Java
    to Version 5 on the PC that they be removed and Sun Java JRE Version 5.0 Update 6
    be installed ASAP.

    http://www.java.com/en/download/manual.jsp
     
    David H. Lipman, Jan 7, 2006
  7. After finally sorting through all the wasted space everyone used to put each
    other down i used the SPECIFIC FIXES at the bottom link and i hope finally
    got rid of the winfixer thing. I also went back and then downloaded the
    Lavasoft's Ad ware remover
    I think the combo of both of these did the trick everything else didn't
    seem to work especially the winfixer fix thing. That and the others just
    seemed too complicated to a non computer geek like myself. So thanks to
    whomever deserves it since everyone seems to be fighting over who is better
    than the other.
     
    =?Utf-8?B?anQ=?=, Jan 12, 2006
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.