Title: WinFixer

Type: Malware

Remove WinFixer. Removal instructions

Also known as: Win Fixer

Severity scale:

(45 / 100)

WinFixer is a corrupt anti-spyware that displays exaggerated error reports in order to trick users into purchasing its full version. Not only does WinFixer lie blatantly, it is also a malware-distributing parasite itself.

DO NOT trust WinFixer, and if you happen to be infected, remove it at once.

Related files: df_kme.exe, install.exe, sr.exe, wfx5.exe, crxml.dll, compcln.dll, df_fixer.dll, df_proxy.dll, ffcom.dll, ffwraper.dll, filetyperecognizer.dll, fixcore.dll, mmfix.dll, oedrop.dll, pcheck.dll, strres.dll, df_kmd.sys, flash.ini

WinFixer properties:
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Automatic WinFixer removal:

remover for WinFixer

SpyHunter is recommended remover to uninstall WinFixer. You should confirm using free trial that it detects current version of parasite.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove WinFixer using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.

STOPzilla

download | review

We are testing STOPzilla's efficiency at removing WinFixer (2010-02-11 18:39:18)

Malwarebytes Anti Malware

download | review

We are testing Malwarebytes Anti Malware's efficiency at removing WinFixer (2010-02-11 18:39:18)

Spyware Doctor

download | review | tutorial

We are testing Spyware Doctor's efficiency at removing WinFixer (2010-02-11 18:39:18)

XoftSpySE Anti Spyware

download | review

WinFixer manual removal:

FORUM:
Discuss WinFixer in
spyware removal forum

Kill processes:
df_kme.exe, install.exe, sr.exe, wfx5.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WinFixer 2005
HKEY_CLASSES_ROOT\CheckProduct2.CheckProduct.1
HKEY_CLASSES_ROOT\CompCleanCore.AppCleaner
HKEY_CLASSES_ROOT\CompCleanCore.AppCleaner.1
HKEY_CLASSES_ROOT\CompCleanCore.CCQuickScan
HKEY_CLASSES_ROOT\CompCleanCore.CCQuickScan.1
HKEY_CLASSES_ROOT\CompCleanCore.FileCleaner
HKEY_CLASSES_ROOT\CompCleanCore.FileCleaner.1
HKEY_CLASSES_ROOT\CompCleanCore.InetCleaner
HKEY_CLASSES_ROOT\CompCleanCore.InetCleaner.1
HKEY_CLASSES_ROOT\CompCleanCore.RegCleaner
HKEY_CLASSES_ROOT\CompCleanCore.RegCleaner.1
HKEY_CLASSES_ROOT\CompCleanCore.SystemCleaner
HKEY_CLASSES_ROOT\CompCleanCore.SystemCleaner.1
HKEY_CLASSES_ROOT\df_fixer.Fixer
HKEY_CLASSES_ROOT\df_fixer.Fixer.1
HKEY_CLASSES_ROOT\df_proxy.DriverManipulate
HKEY_CLASSES_ROOT\df_proxy.DriverManipulate.1
HKEY_CLASSES_ROOT\FFCom.FlFixer
HKEY_CLASSES_ROOT\FFWraper.FFEnginWraper
HKEY_CLASSES_ROOT\FFWraper.FFEnginWraper.1
HKEY_CLASSES_ROOT\FixCore.MMFixCore
HKEY_CLASSES_ROOT\FixCore.MMFixCore.1
HKEY_CLASSES_ROOT\MMFixCtrl.CoFixEngine
HKEY_CLASSES_ROOT\MMFixCtrl.CoFixEngine.1
HKEY_CLASSES_ROOT\AppID\checkproduct2.dll
HKEY_CLASSES_ROOT\AppID\compcln.dll
HKEY_CLASSES_ROOT\AppID\ffwraper.dll
HKEY_CLASSES_ROOT\AppID\fixcore.dll
HKEY_CLASSES_ROOT\AppID\mmfixctrl.dll
HKEY_CLASSES_ROOT\CLSID\{08C71FB1-1E66-4D22-9F32-4C045A451306}
HKEY_CLASSES_ROOT\CLSID\{1CDEB41B-905A-4183-AA20-26E075419B46}
HKEY_CLASSES_ROOT\AppID\{25A3C995-10C8-474B-A167-99460AB4AB2B}
HKEY_CLASSES_ROOT\AppID\{287A2BAD-6590-4EFF-9BBC-494385664A73}
HKEY_CLASSES_ROOT\AppID\{290B5B73-4963-4BA1-9D2D-07CB566CB7FA}
HKEY_CLASSES_ROOT\CLSID\{38EDB9E2-D7C4-4575-8905-FE65414FFEAD}
HKEY_CLASSES_ROOT\CLSID\{48349992-1402-4C67-B45B-2E619E641FDB}
HKEY_CLASSES_ROOT\CLSID\{538BC8F3-2E1E-4D2D-A261-158DF6E9B407}
HKEY_CLASSES_ROOT\CLSID\{53ABACCB-434C-4756-A02B-8C2A3F29FB7D}
HKEY_CLASSES_ROOT\CLSID\{66A9C4D0-BC54-4841-8FAA-DB98CBB77BAD}
HKEY_CLASSES_ROOT\CLSID\{84C43108-013C-4513-8578-F50080B9C9D0}
HKEY_CLASSES_ROOT\AppID\{8C65AEF6-E413-4314-815B-82717A3F1603}
HKEY_CLASSES_ROOT\CLSID\{9CC1BE04-3B42-4442-9A46-77E8BC1108F9}
HKEY_CLASSES_ROOT\CLSID\{AA69BBFC-1D28-4960-8061-93C1BB156238}
HKEY_CLASSES_ROOT\CLSID\{B096A483-0ABD-4AF0-856A-CAD36145AF5C}
HKEY_CLASSES_ROOT\CLSID\{B5E427F9-AB38-4348-9076-86870C2BE860}
HKEY_CLASSES_ROOT\CLSID\{C0BC364F-AB33-4778-8047-5A2148E0ECDA}
HKEY_CLASSES_ROOT\CLSID\{C427B3E3-28DC-4001-9590-D99B6776119B}
HKEY_CLASSES_ROOT\CLSID\{CAE8A9B1-ABBD-4159-A485-1DA045A5D4A1}
HKEY_CLASSES_ROOT\AppID\{E8928E69-C050-42A9-8884-94DE85E888A2}
HKEY_CLASSES_ROOT\CLSID\{F41C1430-CFDE-4AD3-B38D-7890F0843E47}
HKEY_CLASSES_ROOT\Interface\{08C71FB1-1E66-4D22-9F32-4C045A451306}
HKEY_CLASSES_ROOT\Interface\{1CE1C25B-F8B4-4974-99D2-5D4AE96B9900}
HKEY_CLASSES_ROOT\Interface\{35096C29-3507-4ABE-B6D8-C7CC881BE020}
HKEY_CLASSES_ROOT\Interface\{38F743A2-210F-49DE-9B79-DCD501CED284}
HKEY_CLASSES_ROOT\Interface\{3EEC290D-FC13-4C83-803D-4802651EEB61}
HKEY_CLASSES_ROOT\Interface\{41A5BBF6-3C9D-4CF9-9A99-32DD37CC290B}
HKEY_CLASSES_ROOT\Interface\{4E4F38D9-8736-41AE-B192-E829AE194398}
HKEY_CLASSES_ROOT\Interface\{4F79D1C5-24F9-4E59-8022-604D4B41D5CA}
HKEY_CLASSES_ROOT\Interface\{66484903-09F4-4330-927D-1F6C214221AC}
HKEY_CLASSES_ROOT\Interface\{7FA14AD6-D8E5-465F-9BD1-A37E26C1A74F}
HKEY_CLASSES_ROOT\Interface\{9E984934-CD94-4763-9DBC-618E483D4B7F}
HKEY_CLASSES_ROOT\Interface\{B115BD8E-B008-46F4-B8B6-3405EB325C3C}
HKEY_CLASSES_ROOT\Interface\{B9DFCF32-B679-4CAD-B7FC-518A48CE3922}
HKEY_CLASSES_ROOT\Interface\{CAE8A9B1-ABBD-4159-A485-1DA045A5D4A1}
HKEY_CLASSES_ROOT\Interface\{CBEEF194-EBC5-4758-9B51-AC34FC135E70}
HKEY_CLASSES_ROOT\Interface\{CD3604CC-2B95-43EE-AFC9-E7444C21BE1C}
HKEY_CLASSES_ROOT\Interface\{D21040FE-0A57-4FAB-8ED2-F0E653E55809}
HKEY_CLASSES_ROOT\Interface\{D7A2488E-53E4-4EDD-AEAA-F24778BEB100}
HKEY_CLASSES_ROOT\Interface\{D7A6DF8D-B6CF-4C27-8E99-ECA2CE370EA7}
HKEY_CLASSES_ROOT\Interface\{F41C1430-CFDE-4AD3-B38D-7890F0843E47}
HKEY_CLASSES_ROOT\Interface\{F6C1582E-B11C-4724-B8F6-240457EF1D2A}
HKEY_CLASSES_ROOT\Interface\{FB787D5E-0C7C-4BAB-B45D-20325FB886DB}
HKEY_CLASSES_ROOT\TypeLib\{0E9F6AC0-A21A-4591-910F-E2C6F3CA094C}
HKEY_CLASSES_ROOT\TypeLib\{30ED49A5-CA6C-4918-B5F3-5E6818C91D8B}
HKEY_CLASSES_ROOT\TypeLib\{4DCEEA42-794D-4855-9ECC-20DCF5F4FEA7}
HKEY_CLASSES_ROOT\TypeLib\{6A077841-5016-42C8-92C8-F2D6B865BCD1}
HKEY_CLASSES_ROOT\TypeLib\{AD70AC89-F460-4E7E-B5A5-7EAF7E207736}
HKEY_CLASSES_ROOT\TypeLib\{B6625280-8CD8-4632-97C0-83CEC12A49A3}
HKEY_CLASSES_ROOT\TypeLib\{F458ADAE-D53B-4859-B99F-9FA127791278}
HKEY_CLASSES_ROOT\TypeLib\{FC76A5B8-DB35-4F3E-8B9A-BF0EEA098D64}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\df_kmd.sys
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\df_kmd.sys
HKEY_CURRENT_USER\Software\WinSoftware
HKEY_LOCAL_MACHINE\SOFTWARE\WinSoftware
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WFX5_is1

HELP:
how to remove registry entries

Delete files:
df_kme.exe, install.exe, sr.exe, wfx5.exe, crxml.dll, compcln.dll, df_fixer.dll, df_proxy.dll, ffcom.dll, ffwraper.dll, filetyperecognizer.dll, fixcore.dll, mmfix.dll, oedrop.dll, pcheck.dll, strres.dll, df_kmd.sys, flash.ini

HELP:
how to remove harmful files

Delete directories:
C:\Program Files\WinFixer 2005
C:\Program Files\Common Files\WinSoftware
C:\Documents and Settings\All Users\Start Menu\Programs\WinFixer 2005

Information added: 2005-12-03 06:49:23
Information updated: 2010-02-11 16:02:03

Additional resources related to WinFixer:

Attention: If you know or you have a website or page about WinFixer removal, feel free to add a link to this list: add url

more resources

Guest

yes i was tricked,i actually purchased the full version online i,ve deleted it but of course that really does,nt do anything.i,m not even sure what version it is.i read a forum that said i need to go to(hijack this) to find out which version it is and then this site will be able to give specific instructions to remove it manually i,m i on the right track.a lot of other forums suggest downloading 10 other software fixes.then you see that people are saying that does,nt usually work. manual removal sounds like the way to kil this beast. please help!!

Reply »

2006 03 18

Guest

I have this but i cant go paying for any spyware remover. Im trying to manually remove it but when I go to open up the task manager, it says "another program is currently using this file." When I try to open up command prompt it says "another program is currently using this file." When I try to open up the registry edit it says "another program is currently using this file." When I browse or search for any of the winfixer files...i cant find them! What now??

Reply »

2006 03 30

Guest

My PC Is Broke...think I might Just delete every thing...boohoo :-(

Reply »

2006 04 09

Guest

Ive Been everywhere, I really don't know where this monster came from...I think it's inviting more and more viruses onto my PC! Cheeky. It says I have currently 1hr and 56mins left to go downloading this sites recommended repair...I have little hope..I think I'll have to format my PC! This monster's here to stay...FLEE...FLEE for your worthless lives!!!

Reply »

2006 04 09

Guest

Quero que retirem está merda do meu PC pois para cobrança já basta o que eu pago não quero que está merda fique no meu pc por isto solicito que seja feito uma verificação e retirado do meu PC e tem que ser urgente NILSONRMAIA@BOL.COM.BR

Reply »

2006 04 10

Guest

NO DIFFERENT TO WINFIXER 2006, SPYDOCTOR ETC, ETC ALL SCAM SCANS!

BEWARE-BEWARE-BEWARE

Reply »

2006 04 27

Guest

Winfixer was on an entire work network, and I was called to remove it... I was all like HOLY F**K DID YOU LET A GOD DAMNED 6 YEAR OLD ON HERE!?!?!?!??! Then, I sat down and worked...on an entire network of WinFixer-fucked computers....for hours on end.... and finally fixed them with many many MANY anti-spy programs, and System Mechanic 6. Some of the programs were: XoftSpy, Spyware doctor, Spy Sweeper, Spybot:Search and destroy, Ad-Aware... Good lord those computers were below hell and still falling

Reply »

2006 08 28

<Guest>

Reply »

2008 12 01

<Guest>

RESUMINDO, DESINSTALA E DEIXA UM MONTE DE LIXO NO REGISTRO.

Reply »

2010 02 11

Post Comment:

Attention: Use this form only if you have additional information about WinFixer parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.