Author Topic: winfixer (Read 2680 times)

Simon · « **on:** April 12, 2006, 10:48 »

I have had trojans, but never an actual, fully fledged virus, by definition. Mine were more self inflicted, and mostly received from dodgy warez or crack sites (which we don't need to mention). One thing that's a bugger to get rid of is the WinFixer pop up screens on some sites - have you come across those? It also pays to have more than one spyware / trojan scanner as they all seem to find different ones. I now have gone back to my original alternative to Norton, which is F-Secure Internet Security 2006, which boasts:-

# Protects your computer against viruses, worms and rootkits
# Includes real-time protection against spyware
# Protects your computer against hackers
# Helps you stay free from spam e-mail
# Protects your children against unwanted Internet content
# Includes a web surfing time lock for children
# Application Control
# Easy to install and use
# The fastest protection against new virus outbreaks
# Security news

On initial scan, it found 4 trojans which none of the others had spotted.

sam · « **Reply #1 on:** April 12, 2006, 10:55 »

Quote

WinFixer pop up screens on some sites

never noticed that.

I have had one or two viruses mostly on occasions when I was up all night and not paying attention to a file I opened, normally very easily to deal with.

Clive · « **Reply #2 on:** April 12, 2006, 13:45 »

I had Winfixer just a few weeks ago and I had a job to stop it downloading. I knew that it was a nasty when it refused to respond to "no" and "cancel"

Pulling the plug out never fails to screw up a download so it didn't get very far at all! 8)

Simon · « **Reply #3 on:** April 12, 2006, 13:52 »

I find hitting the X to close the windows seems to get rid of it eventually, but this is an aggressive pop up even Mozilla can't deal with.

Sandra · « **Reply #4 on:** April 12, 2006, 14:59 »

Have a look at this :

http://www.spyware-removal-guideline.com/winfixer-removal

Simon · « **Reply #5 on:** April 12, 2006, 15:05 »

That's handy San. I haven't actually been infected, but good to know where there's a removal tool.

mistybear · « **Reply #6 on:** April 12, 2006, 15:08 »

That's a great site Sandra, every time I use Michael's computer, WinFixer always pops up.
He said he got rid of it, I don't know how though.
And it usually comes back.
I had it on this before I did the Restore.

Simon · « **Reply #7 on:** April 12, 2006, 15:19 »

Oh dear, Michael's PC certainly seem to need some TLC. The danger with this amount of crap on a PC is that something could possibly be logging and sending sensitive data, like credit card details, hence the need for a good solid firewall (and to use it properly), and getting the machine disinfected as soon as possible.

mistybear · « **Reply #8 on:** April 14, 2006, 03:50 »

Yes Simon it certainly does need some TLC, he never updates it or runs scans. But he is away today so I'm updating Windows and IE and I'll go to the Medion site and do that as well.
This time when I turn it on it wasn't winfixer but errorfixer, is that a new one, first time I've seen that. It took about 10 to 15 goes to get it to stop trying to install. I think I'd better run a few scans as well, I guess thats my day gone. :roll:

sam · « **Reply #9 on:** April 14, 2006, 07:11 »

oh what fun. :shock:

mistybear · « **Reply #10 on:** April 14, 2006, 09:00 »

I only got as far as the Microsoft updates before he came home.
Apparently that errorfixer is a Mozzila problem, has anyone else come across this before, if so how do you get rid of it. :?

sam · « **Reply #11 on:** April 14, 2006, 10:28 »

i wouldnt state it was a mozilla problem... I bet it creates more issues with IE! I have never heard of it to be honest, will do some hunting later.. anyone else heard of it or fixed it??

Simon · « **Reply #12 on:** April 14, 2006, 12:05 »

I don't think 'errorfixer' is affiliated with Mozilla, but it seems to be something which needs removing. Have a look in Control Panel > Add / Remove Programs, and see if it's in the list - you may just be able to uninstall it, but if it's lodged in the registry, it may come back. Your Spyware / Anti Virus scanners should be able to remove it in any case.

As this machine seems to be quite seriously infected, I would suggest turning off System Restore, and running the spyware / virus scans in safe mode, as it is often more successful removing this stuff if it's not already running.

mistybear · « **Reply #13 on:** April 14, 2006, 13:20 »

Thanks Simon, had a look not there. Ran Belarc to see if anything unusual stood out, geezus(so as not to offend), there is alot of stuff. But no Errorfixer. Unless I got rid of it by installing the new Microsoft security updates? I rebooted the computer to see if it would reappear, not there?
One thing I did see in programs, was Whenu. It appears to be Adware or Spyware, asked Michael why he had it, he just deleted it. Maybe that fixed it ? :? :?

Simon · « **Reply #14 on:** April 14, 2006, 14:46 »

There is supposed to be a malicious software removal tool with the latest Windows Updates, but I'm not sure if it downloads and runs automatically - it didn't on mine. You can download it from:-

http://www.microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

Rather than spending time and effort wondering if 'this' is bad, or what 'that' is, you really need to get down to some serious scanning and cleaning. I think WhenU is more adware. None of this stuff is needed on your PC, and shouldn't be there. If a program won't run without spyware / adware, then it's not worth having (in my opinion). There are often alternatives which are genuine 'Freeware' (i.e. free, without spyware / adware), or if a program is that essential, there is usually a 'paid for' version available, which contains no spyware. If Michael is reluctant to stay away from the computer long enough for you to get these jobs done, I don't know how old he is, but perhaps you could explain that eventually the whole thing could grind to a halt, and he won't be able to use it at all - let alone the threat of the police turning up to arrest him for downloading porn!

Lecture over - good luck!