Winfixer, Winantivirus2007 pro, vundo virus?

5 thoughts on “Winfixer, Winantivirus2007 pro, vundo virus?”

1. ¡'dReaMeR'¡ says:

   October 9, 2010 at 3:45 pm

   Happend to me too it always bugs me but I think you shouldn’t download it I think its a virus

2. Raymond W says:

   October 9, 2010 at 3:45 pm

   Anti-virus software cannot remove trojans as they are fake programs. Normally they install an executable file listed as a live process in Task Manager. You will not be able to stop the process via Task Manager either.

   Do a Google search on the trojan name to find out how to get rid of it.

   Also stop the process from starting:-

   Click on Start and then Run and type: msconfig
   Click the Startup tab and uncheck the startup process.
   Make a note of the full path to where the .exe file is located.

   Reboot your PC and delete the .exe file.

3. adi says:

   October 9, 2010 at 3:45 pm

   It happened to me, too. After I ran different antivirus and antispyware scans, I still couldn’t get rid of the annoyance (it actually spread onto the whole LAN), so I backed up my files (I use a different partition for that) and I formatted the partition and reinstalled Windows.

4. Linux OS says:

   October 9, 2010 at 3:45 pm

   Turn off your system restore. If you find yourself spending ages trying to fix it, just do a format & re-install. It only takes about an hour to re-install and you know for sure that it will work 🙂

   If you find your Windows system gets hit all the time, consider the upgrade to Linux or Mac OS X as these operating systems have enhanced security (like SELinux and AppArmour) and don’t get hit. I haven’t had a single adware, spyware, trojan or virus hit on any of my Linux boxes… ever. And I’ve been running Linux for over 10 years.

5. Chaitu says:

   October 9, 2010 at 3:45 pm

   Hi,

   This is most definitely a Trojan. Most malware these days masquerade as anti-malware!

   Ok, the steps I am going to take you through manual steps to remove it. Have patience and follow word for word. You can also look up this link – http://www.spywaredb.com/remove-winfixer/

   WinFixer Removal:

   1. Press control+alt+delete. Look under processes. Locate and kill the following processes first:

   install.exe, sr.exe, unins000.exe, updater.exe, wfx5.exe

   2. Download HijackThis from http://www.download.com/HijackThis/3000-8022_4-10379544.html. Install and run it. Remove the following entries:

   HKEY_CLASSES_ROOT\compcleancore.appcleaner.1\clsid
   HKEY_CLASSES_ROOT\compcleancore.appcleaner\clsid
   HKEY_CLASSES_ROOT\compcleancore.appcleaner\curver
   HKEY_CLASSES_ROOT\compcleancore.filecleaner.1\clsid
   HKEY_CLASSES_ROOT\compcleancore.filecleaner\clsid
   HKEY_CLASSES_ROOT\compcleancore.filecleaner\curver
   HKEY_CLASSES_ROOT\compcleancore.inetcleaner.1\clsid
   HKEY_CLASSES_ROOT\compcleancore.inetcleaner\clsid
   HKEY_CLASSES_ROOT\compcleancore.inetcleaner\curver
   HKEY_CLASSES_ROOT\compcleancore.regcleaner.1\clsid
   HKEY_CLASSES_ROOT\compcleancore.regcleaner\clsid
   HKEY_CLASSES_ROOT\compcleancore.regcleaner\curver
   HKEY_CLASSES_ROOT\compcleancore.systemcleaner.1\clsid
   HKEY_CLASSES_ROOT\compcleancore.systemcleaner\clsid
   HKEY_CLASSES_ROOT\compcleancore.systemcleaner\curver
   HKEY_CLASSES_ROOT\df_fixer.fixer.1\clsid
   HKEY_CLASSES_ROOT\df_fixer.fixer\clsid
   HKEY_CLASSES_ROOT\df_fixer.fixer\curver
   HKEY_CLASSES_ROOT\df_proxy.drivermanipulate.1\clsid
   HKEY_CLASSES_ROOT\df_proxy.drivermanipulate\clsid
   HKEY_CLASSES_ROOT\df_proxy.drivermanipulate\curver
   HKEY_CLASSES_ROOT\ffcom.flfixer\clsid
   HKEY_CLASSES_ROOT\ffwraper.ffenginwraper.1\clsid
   HKEY_CLASSES_ROOT\ffwraper.ffenginwraper\clsid
   HKEY_CLASSES_ROOT\ffwraper.ffenginwraper\curver
   HKEY_CLASSES_ROOT\fixcore.mmfixcore.1\clsid
   HKEY_CLASSES_ROOT\fixcore.mmfixcore\clsid
   HKEY_CLASSES_ROOT\fixcore.mmfixcore\curver
   HKEY_CLASSES_ROOT\interface\{1ce1c25b-f8b4-4974-99d2-5d4ae96b9900}
   HKEY_CLASSES_ROOT\interface\{9e984934-cd94-4763-9dbc-618e483d4b7f}
   HKEY_CLASSES_ROOT\typelib\{30ed49a5-ca6c-4918-b5f3-5e6818c91d8b}\1.0
   HKEY_CLASSES_ROOT\typelib\{6a077841-5016-42c8-92c8-f2d6b865bcd1}
   HKEY_CLASSES_ROOT\typelib\{ad70ac89-f460-4e7e-b5a5-7eaf7e207736}
   HKEY_CLASSES_ROOT\typelib\{b6625280-8cd8-4632-97c0-83cec12a49a3}
   HKEY_CLASSES_ROOT\typelib\{f458adae-d53b-4859-b99f-9fa127791278}
   HKEY_CLASSES_ROOT\typelib\{fc76a5b8-db35-4f3e-8b9a-bf0eea098d64}
   HKEY_CURRENT_USER\software\winsoftware\winfixer 2005

   Remove folders:
   Program Files\winfixer 2005
   Program Files\winfixer 2005\backup
   Program Files\winfixer 2005\mp3db
   Program Files\winfixer 2005\mpegdb
   Program Files\winfixer 2005\repaired
   Program Files\winfixer 2005\tasks
   Program Files\winfixer 2005\wavedb

   Ok you got rid of winfixer. The next one is a little more stubborn. Follow these EXCELLENT turtorials.

   http://www.411-spyware.com/remove-winantivirus-pro-2006

   http://www.411-spyware.com/remove-winantivirus-pro-2006#deletefiles

   Hope this helps!

Comments are closed.