Win Fixer 2006

Win Fixer 2006

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Win Fixer 2006 Ayrhead 04-21-2006
|--> Re: Win Fixer 2006 David H. Lipman04-21-2006
Posted by =?Utf-8?B?QXlyaGVhZA==?= on April 21, 2006, 3:43 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I downloaded Win Fixer because it looked "official" but before I installed it
I decided to check its authenticity. When I discovered it was suspect I
deleted it using the Add or Remove facility in Control Panel. This seems to
have been successful, although everyone says it's very difficult to remove.
Have I been saved by the fact that I did not complete the installation
process, or is there likely to be some spyware hidden in my system?
Grateful for any help.

Posted by David H. Lipman on April 21, 2006, 5:46 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| I downloaded Win Fixer because it looked "official" but before I installed it
| I decided to check its authenticity. When I discovered it was suspect I
| deleted it using the Add or Remove facility in Control Panel. This seems to
| have been successful, although everyone says it's very difficult to remove.
| Have I been saved by the fact that I did not complete the installation
| process, or is there likely to be some spyware hidden in my system?
| Grateful for any help.



Two phase answer...

Perform Part 1 then perform Part 2

If the first two parts don't work, perform the alternate utility.

It is suggested that you execute each tool in Normal Mode then in Safe Mode.

If you are using any version of Sun Java that is prior to JRE Version 5.0,
then you are strongly urged to remove any/all versions that are prior to JRE
Version 5.0. There are vulnerabilities in them and they are actively being
exploited.
This is most likely why you got infected with malware.

Therefore, it is highly suggested that if there are any prior versions of Sun
Java
to Version 5 on the PC that they be removed and Sun Java JRE Version 5.0 Update 6
be installed ASAP.

Simple check, look under...
C:\Program Files\Java

The only folder under that folder should be the latest version...

C:\Program Files\Java\jre1.5.0_06


http://www.java.com/en/download/manual.jsp



Part 1
------------
Download Adware-Virtumundo Removal Tool --
http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe

Information on the Adware-Virtumundo Removal Tool:
http://forums.mcafeehelp.com/viewtopic.php?t=57049

Part 2
------------
Download WinFixerFix.exe from the URL --
http://www.ik-cs.com/programs/virtools/WinFixerFix.exe

Execute; WinFixerFix.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\Normal_ScanReport.HTML or
C:\mcafee\Safe_ScanReport.HTML will be generated. At the end of the scan, it
will be
displayed in your browser (Opera, FireFox or Internet Explorer). However, if
you are using
WinXP, Win2K or Win2003 your system will be left in a state where you will have
to manually
shutdown/reboot the PC. On Win9x/ME platforms the report will not be shown in
your bowser
but your PC will automatically be shutdown. It is suggested that you move the
report out of
c:\mcafee before performing another scan.

It would be best to scan in both Safe Mode and in Normal Mode and save a copy of
the HTML
report for each session.


ALTERNATE:
--------------

Download Atribune's VUNDOFIX.EXE
http://www.atribune.org/ccount/click.php?id=4

Save VUNDOFIX.EXE to "C:\" ( C:\VUNDOFIX.EXE ) and execute it from there.


Please Copy and Paste the contents of the HTML Log files;
C:\mcafee\Normal_ScanReport.HTML & C:\mcafee\Safe_ScanReport.HTML in your reply.

* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by =?Utf-8?B?UGFuZGFfbWFu?= on April 22, 2006, 5:52 am
If you were  Registered and logged in, you could reply and use other advanced thread options
My reply is at the bottom of your question :

"Ayrhead" wrote:

> I downloaded Win Fixer because it looked "official" but before I installed it
> I decided to check its authenticity. When I discovered it was suspect I
> deleted it using the Add or Remove facility in Control Panel. This seems to
> have been successful, although everyone says it's very difficult to remove.
> Have I been saved by the fact that I did not complete the installation
> process, or is there likely to be some spyware hidden in my system?
> Grateful for any help.
>

Yes and No ... I can't be sure ... so before attempting any cleaning
actions , check your computer with these two reputable free online scanners:

Panda Software free Active Scan
http://www.activescan.com

Kaspersky free online scanner
http://www.kaspersky.com/virusscanner

!!!!! Before running the scanners , do this :
Goto Control Panel-> Internet Options
General Tab
There you'll see where you can delete cookies , temporary i-net files ,
history
Delete them all .

Control Panel -> Folder options
View tab
Check "Show hidden files and folders"
Now goto My Computer-> Local disk -> Documents and Settings -> *USER* ->
Local Settings -> Temp
and delete all files in this temp folder !!!



If Panda and/or Kaspersky find WinFixer , run David's tool
or visit my web-site and perform the instructions to remove malware
http://pandaman.my.contact.bg



Panda_man
--
Bronze level Contributor
Prevention is always better than cure !
http://pandaman.my.contact.bg
Please , rate posts

Similar ThreadsPosted
Isa 2004 and the Dpm 2006 agent December 26, 2005, 12:04 pm
New MSSecure.XML Version 2006.01.05.0 Now Available January 5, 2006, 3:16 pm
New MSSecure.XML Version 2006.01.10.0 Now Available January 10, 2006, 2:24 pm
New MSSecure.XML Version 2006.02.14.0 Now Available February 14, 2006, 1:04 pm
Norton 2006 Anticrack! February 26, 2006, 9:08 am
New MSSecure.XML Version 2006.03.14.0 Now Available March 14, 2006, 1:15 pm
New MSSecure.XML Version 2006.04.11.0 Now Available April 11, 2006, 2:30 pm
New MSSecure.XML Version 2006.04.11.1 Now Available April 13, 2006, 1:29 pm
'anti virus 2006 pop-up April 20, 2006, 9:29 am
norton 2006 error. April 22, 2006, 5:09 am

The site map in XML format XML site map

Contact Us | Privacy Policy