Remove WinFixer. Description and removal instructions

 
Title: WinFixer
Also known as: Win Fixer
Type: Malware
Severity scale:WinFixer severity is 45  (45 / 100)
 
WinFixer is a corrupt anti-spyware that displays exaggerated error reports in order to trick users into purchasing its full version. Not only does WinFixer lie blatantly, it is also a malware-distributing parasite itself.

DO NOT trust WinFixer, and if you happen to be infected, remove it at once.


Related files: df_kme.exe, install.exe, sr.exe, wfx5.exe, crxml.dll, compcln.dll, df_fixer.dll, df_proxy.dll, ffcom.dll, ffwraper.dll, filetyperecognizer.dll, fixcore.dll, mmfix.dll, oedrop.dll, pcheck.dll, strres.dll, df_kmd.sys, flash.ini

WinFixer properties:
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Automatic WinFixer removal:

remover for WinFixer

WinFixer manual removal:

Kill processes:
df_kme.exe, install.exe, sr.exe, wfx5.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WinFixer 2005
HKEY_CLASSES_ROOT\CheckProduct2.CheckProduct.1
HKEY_CLASSES_ROOT\CompCleanCore.AppCleaner
HKEY_CLASSES_ROOT\CompCleanCore.AppCleaner.1
HKEY_CLASSES_ROOT\CompCleanCore.CCQuickScan
HKEY_CLASSES_ROOT\CompCleanCore.CCQuickScan.1
HKEY_CLASSES_ROOT\CompCleanCore.FileCleaner
HKEY_CLASSES_ROOT\CompCleanCore.FileCleaner.1
HKEY_CLASSES_ROOT\CompCleanCore.InetCleaner
HKEY_CLASSES_ROOT\CompCleanCore.InetCleaner.1
HKEY_CLASSES_ROOT\CompCleanCore.RegCleaner
HKEY_CLASSES_ROOT\CompCleanCore.RegCleaner.1
HKEY_CLASSES_ROOT\CompCleanCore.SystemCleaner
HKEY_CLASSES_ROOT\CompCleanCore.SystemCleaner.1
HKEY_CLASSES_ROOT\df_fixer.Fixer
HKEY_CLASSES_ROOT\df_fixer.Fixer.1
HKEY_CLASSES_ROOT\df_proxy.DriverManipulate
HKEY_CLASSES_ROOT\df_proxy.DriverManipulate.1
HKEY_CLASSES_ROOT\FFCom.FlFixer
HKEY_CLASSES_ROOT\FFWraper.FFEnginWraper
HKEY_CLASSES_ROOT\FFWraper.FFEnginWraper.1
HKEY_CLASSES_ROOT\FixCore.MMFixCore
HKEY_CLASSES_ROOT\FixCore.MMFixCore.1
HKEY_CLASSES_ROOT\MMFixCtrl.CoFixEngine
HKEY_CLASSES_ROOT\MMFixCtrl.CoFixEngine.1
HKEY_CLASSES_ROOT\AppID\checkproduct2.dll
HKEY_CLASSES_ROOT\AppID\compcln.dll
HKEY_CLASSES_ROOT\AppID\ffwraper.dll
HKEY_CLASSES_ROOT\AppID\fixcore.dll
HKEY_CLASSES_ROOT\AppID\mmfixctrl.dll
HKEY_CLASSES_ROOT\CLSID\{08C71FB1-1E66-4D22-9F32-4C045A451306}
HKEY_CLASSES_ROOT\CLSID\{1CDEB41B-905A-4183-AA20-26E075419B46}
HKEY_CLASSES_ROOT\AppID\{25A3C995-10C8-474B-A167-99460AB4AB2B}
HKEY_CLASSES_ROOT\AppID\{287A2BAD-6590-4EFF-9BBC-494385664A73}
HKEY_CLASSES_ROOT\AppID\{290B5B73-4963-4BA1-9D2D-07CB566CB7FA}
HKEY_CLASSES_ROOT\CLSID\{38EDB9E2-D7C4-4575-8905-FE65414FFEAD}
HKEY_CLASSES_ROOT\CLSID\{48349992-1402-4C67-B45B-2E619E641FDB}
HKEY_CLASSES_ROOT\CLSID\{538BC8F3-2E1E-4D2D-A261-158DF6E9B407}
HKEY_CLASSES_ROOT\CLSID\{53ABACCB-434C-4756-A02B-8C2A3F29FB7D}
HKEY_CLASSES_ROOT\CLSID\{66A9C4D0-BC54-4841-8FAA-DB98CBB77BAD}
HKEY_CLASSES_ROOT\CLSID\{84C43108-013C-4513-8578-F50080B9C9D0}
HKEY_CLASSES_ROOT\AppID\{8C65AEF6-E413-4314-815B-82717A3F1603}
HKEY_CLASSES_ROOT\CLSID\{9CC1BE04-3B42-4442-9A46-77E8BC1108F9}
HKEY_CLASSES_ROOT\CLSID\{AA69BBFC-1D28-4960-8061-93C1BB156238}
HKEY_CLASSES_ROOT\CLSID\{B096A483-0ABD-4AF0-856A-CAD36145AF5C}
HKEY_CLASSES_ROOT\CLSID\{B5E427F9-AB38-4348-9076-86870C2BE860}
HKEY_CLASSES_ROOT\CLSID\{C0BC364F-AB33-4778-8047-5A2148E0ECDA}
HKEY_CLASSES_ROOT\CLSID\{C427B3E3-28DC-4001-9590-D99B6776119B}
HKEY_CLASSES_ROOT\CLSID\{CAE8A9B1-ABBD-4159-A485-1DA045A5D4A1}
HKEY_CLASSES_ROOT\AppID\{E8928E69-C050-42A9-8884-94DE85E888A2}
HKEY_CLASSES_ROOT\CLSID\{F41C1430-CFDE-4AD3-B38D-7890F0843E47}
HKEY_CLASSES_ROOT\Interface\{08C71FB1-1E66-4D22-9F32-4C045A451306}
HKEY_CLASSES_ROOT\Interface\{1CE1C25B-F8B4-4974-99D2-5D4AE96B9900}
HKEY_CLASSES_ROOT\Interface\{35096C29-3507-4ABE-B6D8-C7CC881BE020}
HKEY_CLASSES_ROOT\Interface\{38F743A2-210F-49DE-9B79-DCD501CED284}
HKEY_CLASSES_ROOT\Interface\{3EEC290D-FC13-4C83-803D-4802651EEB61}
HKEY_CLASSES_ROOT\Interface\{41A5BBF6-3C9D-4CF9-9A99-32DD37CC290B}
HKEY_CLASSES_ROOT\Interface\{4E4F38D9-8736-41AE-B192-E829AE194398}
HKEY_CLASSES_ROOT\Interface\{4F79D1C5-24F9-4E59-8022-604D4B41D5CA}
HKEY_CLASSES_ROOT\Interface\{66484903-09F4-4330-927D-1F6C214221AC}
HKEY_CLASSES_ROOT\Interface\{7FA14AD6-D8E5-465F-9BD1-A37E26C1A74F}
HKEY_CLASSES_ROOT\Interface\{9E984934-CD94-4763-9DBC-618E483D4B7F}
HKEY_CLASSES_ROOT\Interface\{B115BD8E-B008-46F4-B8B6-3405EB325C3C}
HKEY_CLASSES_ROOT\Interface\{B9DFCF32-B679-4CAD-B7FC-518A48CE3922}
HKEY_CLASSES_ROOT\Interface\{CAE8A9B1-ABBD-4159-A485-1DA045A5D4A1}
HKEY_CLASSES_ROOT\Interface\{CBEEF194-EBC5-4758-9B51-AC34FC135E70}
HKEY_CLASSES_ROOT\Interface\{CD3604CC-2B95-43EE-AFC9-E7444C21BE1C}
HKEY_CLASSES_ROOT\Interface\{D21040FE-0A57-4FAB-8ED2-F0E653E55809}
HKEY_CLASSES_ROOT\Interface\{D7A2488E-53E4-4EDD-AEAA-F24778BEB100}
HKEY_CLASSES_ROOT\Interface\{D7A6DF8D-B6CF-4C27-8E99-ECA2CE370EA7}
HKEY_CLASSES_ROOT\Interface\{F41C1430-CFDE-4AD3-B38D-7890F0843E47}
HKEY_CLASSES_ROOT\Interface\{F6C1582E-B11C-4724-B8F6-240457EF1D2A}
HKEY_CLASSES_ROOT\Interface\{FB787D5E-0C7C-4BAB-B45D-20325FB886DB}
HKEY_CLASSES_ROOT\TypeLib\{0E9F6AC0-A21A-4591-910F-E2C6F3CA094C}
HKEY_CLASSES_ROOT\TypeLib\{30ED49A5-CA6C-4918-B5F3-5E6818C91D8B}
HKEY_CLASSES_ROOT\TypeLib\{4DCEEA42-794D-4855-9ECC-20DCF5F4FEA7}
HKEY_CLASSES_ROOT\TypeLib\{6A077841-5016-42C8-92C8-F2D6B865BCD1}
HKEY_CLASSES_ROOT\TypeLib\{AD70AC89-F460-4E7E-B5A5-7EAF7E207736}
HKEY_CLASSES_ROOT\TypeLib\{B6625280-8CD8-4632-97C0-83CEC12A49A3}
HKEY_CLASSES_ROOT\TypeLib\{F458ADAE-D53B-4859-B99F-9FA127791278}
HKEY_CLASSES_ROOT\TypeLib\{FC76A5B8-DB35-4F3E-8B9A-BF0EEA098D64}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\df_kmd.sys
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\df_kmd.sys
HKEY_CURRENT_USER\Software\WinSoftware
HKEY_LOCAL_MACHINE\SOFTWARE\WinSoftware
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WFX5_is1
Delete files:
df_kme.exe, install.exe, sr.exe, wfx5.exe, crxml.dll, compcln.dll, df_fixer.dll, df_proxy.dll, ffcom.dll, ffwraper.dll, filetyperecognizer.dll, fixcore.dll, mmfix.dll, oedrop.dll, pcheck.dll, strres.dll, df_kmd.sys, flash.ini
Delete directories:
C:\Program Files\WinFixer 2005
C:\Program Files\Common Files\WinSoftware
C:\Documents and Settings\All Users\Start Menu\Programs\WinFixer 2005

Other programs to remove WinFixer:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 03/12/05
Information updated: 18/12/07

Additional resources related to WinFixer:

Attention: If you know or you have a website or page about WinFixer removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about WinFixer parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:


Comments from visitors:


1. by Guest. 2006-08-28 18:08:44
Winfixer was on an entire work network, and I was called to remove it... I was all like HOLY F**K DID YOU LET A GOD DAMNED 6 YEAR OLD ON HERE!?!?!?!??! Then, I sat down and worked...on an entire network of WinFixer-fucked computers....for hours on end.... and finally fixed them with many many MANY anti-spy programs, and System Mechanic 6. Some of the programs were: XoftSpy, Spyware doctor, Spy Sweeper, Spybot:Search and destroy, Ad-Aware... Good lord those computers were below hell and still falling

2. by Guest. 2006-04-27 10:04:16
NO DIFFERENT TO WINFIXER 2006, SPYDOCTOR ETC, ETC ALL SCAM SCANS!

BEWARE-BEWARE-BEWARE

3. by Guest. 2006-04-10 15:04:03
Quero que retirem está merda do meu PC pois para cobrança já basta o que eu pago não quero que está merda fique no meu pc por isto solicito que seja feito uma verificação e retirado do meu PC e tem que ser urgente NILSONRMAIA@BOL.COM.BR

4. by Guest. 2006-04-09 05:04:35
Ive Been everywhere, I really don't know where this monster came from...I think it's inviting more and more viruses onto my PC! Cheeky. It says I have currently 1hr and 56mins left to go downloading this sites recommended repair...I have little hope..I think I'll have to format my PC! This monster's here to stay...FLEE...FLEE for your worthless lives!!!

5. by Guest. 2006-04-09 05:04:18
My PC Is Broke...think I might Just delete every thing...boohoo :-(

6. by Guest. 2006-03-30 19:03:31
I have this but i cant go paying for any spyware remover. Im trying to manually remove it but when I go to open up the task manager, it says "another program is currently using this file." When I try to open up command prompt it says "another program is currently using this file." When I try to open up the registry edit it says "another program is currently using this file." When I browse or search for any of the winfixer files...i cant find them! What now??

7. by Guest. 2006-03-18 20:03:08
yes i was tricked,i actually purchased the full version online i,ve deleted it but of course that really does,nt do anything.i,m not even sure what version it is.i read a forum that said i need to go to(hijack this) to find out which version it is and then this site will be able to give specific instructions to remove it manually i,m i on the right track.a lot of other forums suggest downloading 10 other software fixes.then you see that people are saying that does,nt usually work. manual removal sounds like the way to kil this beast. please help!!


Related news:
Similar parasites:
Related articles:
Related discussions: