Title: WinFixer
Type: Malware
Also known as: Win Fixer

Remove WinFixer
Removal instructions

 
Severity scale:WinFixer severity is 45  (45 / 100)
 
WinFixer is a corrupt anti-spyware that displays exaggerated error reports in order to trick users into purchasing its full version. Not only does WinFixer lie blatantly, it is also a malware-distributing parasite itself.

DO NOT trust WinFixer, and if you happen to be infected, remove it at once.

Related files: install.exe, sr.exe

WinFixer properties:
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Automatic WinFixer removal:

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use.
By downloading any of provided Anti-spyware software to remove WinFixer you agree with our Privacy Policy and Agreement of Use.
SpyHunter is recommended remover to uninstall WinFixer. You should confirm using free trial that it detects current version of parasite.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

If you failed to remove WinFixer using SpyHunter, submit question to our support team and provide as much details as possible.
dot
STOPzilla
download
manual required
We are testing STOPzilla's efficiency at removing WinFixer (2010-02-11 18:39:18)
dot
Malwarebytes Anti Malware
download
manual required
We are testing Malwarebytes Anti Malware's efficiency at removing WinFixer (2010-02-11 18:39:18)
dot
XoftSpySE Anti Spyware
download
manual required
We are testing XoftSpySE Anti Spyware's efficiency at removing WinFixer (2010-02-11 18:39:18)
dot
Defender Pro Ultimate
download
manual required
We are testing Defender Pro Ultimate's efficiency at removing WinFixer (2010-02-11 18:39:18)

what to do if you failed to remove the infection?
Virus Removal
Phone Support
Help Line to remove WinFixer
WinFixer snapshot:

WinFixer manual removal:

Kill processes:
df_kme.exe, install.exe, sr.exe, wfx5.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WinFixer 2005
HKEY_CLASSES_ROOT\CheckProduct2.CheckProduct.1
HKEY_CLASSES_ROOT\CompCleanCore.AppCleaner
HKEY_CLASSES_ROOT\CompCleanCore.AppCleaner.1
HKEY_CLASSES_ROOT\CompCleanCore.CCQuickScan
HKEY_CLASSES_ROOT\CompCleanCore.CCQuickScan.1
HKEY_CLASSES_ROOT\CompCleanCore.FileCleaner
HKEY_CLASSES_ROOT\CompCleanCore.FileCleaner.1
HKEY_CLASSES_ROOT\CompCleanCore.InetCleaner
HKEY_CLASSES_ROOT\CompCleanCore.InetCleaner.1
HKEY_CLASSES_ROOT\CompCleanCore.RegCleaner
HKEY_CLASSES_ROOT\CompCleanCore.RegCleaner.1
HKEY_CLASSES_ROOT\CompCleanCore.SystemCleaner
HKEY_CLASSES_ROOT\CompCleanCore.SystemCleaner.1
HKEY_CLASSES_ROOT\df_fixer.Fixer
HKEY_CLASSES_ROOT\df_fixer.Fixer.1
HKEY_CLASSES_ROOT\df_proxy.DriverManipulate
HKEY_CLASSES_ROOT\df_proxy.DriverManipulate.1
HKEY_CLASSES_ROOT\FFCom.FlFixer
HKEY_CLASSES_ROOT\FFWraper.FFEnginWraper
HKEY_CLASSES_ROOT\FFWraper.FFEnginWraper.1
HKEY_CLASSES_ROOT\FixCore.MMFixCore
HKEY_CLASSES_ROOT\FixCore.MMFixCore.1
HKEY_CLASSES_ROOT\MMFixCtrl.CoFixEngine
HKEY_CLASSES_ROOT\MMFixCtrl.CoFixEngine.1
HKEY_CLASSES_ROOT\AppID\checkproduct2.dll
HKEY_CLASSES_ROOT\AppID\compcln.dll
HKEY_CLASSES_ROOT\AppID\ffwraper.dll
HKEY_CLASSES_ROOT\AppID\fixcore.dll
HKEY_CLASSES_ROOT\AppID\mmfixctrl.dll
HKEY_CLASSES_ROOT\CLSID\{08C71FB1-1E66-4D22-9F32-4C045A451306}
HKEY_CLASSES_ROOT\CLSID\{1CDEB41B-905A-4183-AA20-26E075419B46}
HKEY_CLASSES_ROOT\AppID\{25A3C995-10C8-474B-A167-99460AB4AB2B}
HKEY_CLASSES_ROOT\AppID\{287A2BAD-6590-4EFF-9BBC-494385664A73}
HKEY_CLASSES_ROOT\AppID\{290B5B73-4963-4BA1-9D2D-07CB566CB7FA}
HKEY_CLASSES_ROOT\CLSID\{38EDB9E2-D7C4-4575-8905-FE65414FFEAD}
HKEY_CLASSES_ROOT\CLSID\{48349992-1402-4C67-B45B-2E619E641FDB}
HKEY_CLASSES_ROOT\CLSID\{538BC8F3-2E1E-4D2D-A261-158DF6E9B407}
HKEY_CLASSES_ROOT\CLSID\{53ABACCB-434C-4756-A02B-8C2A3F29FB7D}
HKEY_CLASSES_ROOT\CLSID\{66A9C4D0-BC54-4841-8FAA-DB98CBB77BAD}
HKEY_CLASSES_ROOT\CLSID\{84C43108-013C-4513-8578-F50080B9C9D0}
HKEY_CLASSES_ROOT\AppID\{8C65AEF6-E413-4314-815B-82717A3F1603}
HKEY_CLASSES_ROOT\CLSID\{9CC1BE04-3B42-4442-9A46-77E8BC1108F9}
HKEY_CLASSES_ROOT\CLSID\{AA69BBFC-1D28-4960-8061-93C1BB156238}
HKEY_CLASSES_ROOT\CLSID\{B096A483-0ABD-4AF0-856A-CAD36145AF5C}
HKEY_CLASSES_ROOT\CLSID\{B5E427F9-AB38-4348-9076-86870C2BE860}
HKEY_CLASSES_ROOT\CLSID\{C0BC364F-AB33-4778-8047-5A2148E0ECDA}
HKEY_CLASSES_ROOT\CLSID\{C427B3E3-28DC-4001-9590-D99B6776119B}
HKEY_CLASSES_ROOT\CLSID\{CAE8A9B1-ABBD-4159-A485-1DA045A5D4A1}
HKEY_CLASSES_ROOT\AppID\{E8928E69-C050-42A9-8884-94DE85E888A2}
HKEY_CLASSES_ROOT\CLSID\{F41C1430-CFDE-4AD3-B38D-7890F0843E47}
HKEY_CLASSES_ROOT\Interface\{08C71FB1-1E66-4D22-9F32-4C045A451306}
HKEY_CLASSES_ROOT\Interface\{1CE1C25B-F8B4-4974-99D2-5D4AE96B9900}
HKEY_CLASSES_ROOT\Interface\{35096C29-3507-4ABE-B6D8-C7CC881BE020}
HKEY_CLASSES_ROOT\Interface\{38F743A2-210F-49DE-9B79-DCD501CED284}
HKEY_CLASSES_ROOT\Interface\{3EEC290D-FC13-4C83-803D-4802651EEB61}
HKEY_CLASSES_ROOT\Interface\{41A5BBF6-3C9D-4CF9-9A99-32DD37CC290B}
HKEY_CLASSES_ROOT\Interface\{4E4F38D9-8736-41AE-B192-E829AE194398}
HKEY_CLASSES_ROOT\Interface\{4F79D1C5-24F9-4E59-8022-604D4B41D5CA}
HKEY_CLASSES_ROOT\Interface\{66484903-09F4-4330-927D-1F6C214221AC}
HKEY_CLASSES_ROOT\Interface\{7FA14AD6-D8E5-465F-9BD1-A37E26C1A74F}
HKEY_CLASSES_ROOT\Interface\{9E984934-CD94-4763-9DBC-618E483D4B7F}
HKEY_CLASSES_ROOT\Interface\{B115BD8E-B008-46F4-B8B6-3405EB325C3C}
HKEY_CLASSES_ROOT\Interface\{B9DFCF32-B679-4CAD-B7FC-518A48CE3922}
HKEY_CLASSES_ROOT\Interface\{CAE8A9B1-ABBD-4159-A485-1DA045A5D4A1}
HKEY_CLASSES_ROOT\Interface\{CBEEF194-EBC5-4758-9B51-AC34FC135E70}
HKEY_CLASSES_ROOT\Interface\{CD3604CC-2B95-43EE-AFC9-E7444C21BE1C}
HKEY_CLASSES_ROOT\Interface\{D21040FE-0A57-4FAB-8ED2-F0E653E55809}
HKEY_CLASSES_ROOT\Interface\{D7A2488E-53E4-4EDD-AEAA-F24778BEB100}
HKEY_CLASSES_ROOT\Interface\{D7A6DF8D-B6CF-4C27-8E99-ECA2CE370EA7}
HKEY_CLASSES_ROOT\Interface\{F41C1430-CFDE-4AD3-B38D-7890F0843E47}
HKEY_CLASSES_ROOT\Interface\{F6C1582E-B11C-4724-B8F6-240457EF1D2A}
HKEY_CLASSES_ROOT\Interface\{FB787D5E-0C7C-4BAB-B45D-20325FB886DB}
HKEY_CLASSES_ROOT\TypeLib\{0E9F6AC0-A21A-4591-910F-E2C6F3CA094C}
HKEY_CLASSES_ROOT\TypeLib\{30ED49A5-CA6C-4918-B5F3-5E6818C91D8B}
HKEY_CLASSES_ROOT\TypeLib\{4DCEEA42-794D-4855-9ECC-20DCF5F4FEA7}
HKEY_CLASSES_ROOT\TypeLib\{6A077841-5016-42C8-92C8-F2D6B865BCD1}
HKEY_CLASSES_ROOT\TypeLib\{AD70AC89-F460-4E7E-B5A5-7EAF7E207736}
HKEY_CLASSES_ROOT\TypeLib\{B6625280-8CD8-4632-97C0-83CEC12A49A3}
HKEY_CLASSES_ROOT\TypeLib\{F458ADAE-D53B-4859-B99F-9FA127791278}
HKEY_CLASSES_ROOT\TypeLib\{FC76A5B8-DB35-4F3E-8B9A-BF0EEA098D64}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\df_kmd.sys
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\df_kmd.sys
HKEY_CURRENT_USER\Software\WinSoftware
HKEY_LOCAL_MACHINE\SOFTWARE\WinSoftware
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WFX5_is1
Delete files:
df_kme.exe, install.exe, sr.exe, wfx5.exe, crxml.dll, compcln.dll, df_fixer.dll, df_proxy.dll, ffcom.dll, ffwraper.dll, filetyperecognizer.dll, fixcore.dll, mmfix.dll, oedrop.dll, pcheck.dll, strres.dll, df_kmd.sys, flash.ini
Delete directories:
C:\Program Files\WinFixer 2005
C:\Program Files\Common Files\WinSoftware
C:\Documents and Settings\All Users\Start Menu\Programs\WinFixer 2005

Geolocation of WinFixer:

This map reveals the prevalence of WinFixer. Countries and regions that have been affected the most are: Canada, United States, France, Japan and Belgium.

QR code for WinFixer removal instructions:

WinFixer qrcode
QR is short for Quick Response. They can be read quickly by the mobile phones. QR codes can store more data than standard barcodes, including url links, geo coordinates, and text.

The reason we add QR code to the website is that parasites like WinFixer are really hard to remove on infected computer. you can quicly scan the QR code with your mobile device and have manual removal instructions to uninstall WinFixer right in your pocket.

Simply use the QR scanner and read removal instructions from mobile device.
Information added: 2005-12-03 06:49:23
Information updated: 2010-02-11 16:02:03

Additional resources:

Attention: If you know know a reputable website reated to security threats, please add a link here: add url

0
0
Guest
yes i was tricked,i actually purchased the full version online i,ve deleted it but of course that really does,nt do anything.i,m not even sure what version it is.i read a forum that said i need to go to(hijack this) to find out which version it is and then this site will be able to give specific instructions to remove it manually i,m i on the right track.a lot of other forums suggest downloading 10 other software fixes.then you see that people are saying that does,nt usually work. manual removal sounds like the way to kil this beast. please help!!
0
0
Guest
I have this but i cant go paying for any spyware remover. Im trying to manually remove it but when I go to open up the task manager, it says "another program is currently using this file." When I try to open up command prompt it says "another program is currently using this file." When I try to open up the registry edit it says "another program is currently using this file." When I browse or search for any of the winfixer files...i cant find them! What now??
0
0
Guest
My PC Is Broke...think I might Just delete every thing...boohoo :-(
0
0
Guest
Ive Been everywhere, I really don't know where this monster came from...I think it's inviting more and more viruses onto my PC! Cheeky. It says I have currently 1hr and 56mins left to go downloading this sites recommended repair...I have little hope..I think I'll have to format my PC! This monster's here to stay...FLEE...FLEE for your worthless lives!!!
0
0
Guest
Quero que retirem está merda do meu PC pois para cobrança já basta o que eu pago não quero que está merda fique no meu pc por isto solicito que seja feito uma verificação e retirado do meu PC e tem que ser urgente [email protected]
0
0
Guest
NO DIFFERENT TO WINFIXER 2006, SPYDOCTOR ETC, ETC ALL SCAM SCANS!

BEWARE-BEWARE-BEWARE
0
0
Guest
Winfixer was on an entire work network, and I was called to remove it... I was all like HOLY F**K DID YOU LET A GOD DAMNED 6 YEAR OLD ON HERE!?!?!?!??! Then, I sat down and worked...on an entire network of WinFixer-fucked computers....for hours on end.... and finally fixed them with many many MANY anti-spy programs, and System Mechanic 6. Some of the programs were: XoftSpy, Spyware doctor, Spy Sweeper, Spybot:Search and destroy, Ad-Aware... Good lord those computers were below hell and still falling
0
0
<Guest>
?
0
0
<Guest>
RESUMINDO, DESINSTALA E DEIXA UM MONTE DE LIXO NO REGISTRO.

Post Comment:

Attention: Use this form only if you have additional information about WinFixer parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
Home page Name



«


* All field required
Like us on Facebook
Latest spyware news:
Subscribe to spyware news
Please enter your e-mail address:
If you do not want to receive our spyware
newsletter please unsubscribe here
48606 Subscribers
Ask us
I failed to remove WinFixer using SpyHunter.

Email


Close

Spreading the knowledge:

It is very hard to fight against computer parasites on the Internet alone. If you have a website, we would be more than happy if you would like to cooperate and help us spread the information about latest threats. Remember, knowledge is the most powerful weapon. Help your visitors protect their computers!
add text box
rss feed
help other