Winfixer, nasty malware.

Microsoft Antispyware has found a nasty piece of malware called Winfixer,
which appeared as a result of running bundled adware that came with a file
sharing program. It reappeared the next day, and there also appears to be a
lurking installation fileset in my Local Settings\Temp directory called
UWFX5_0001_MNINetInstaller.exe and UWFX5_0001_MNINetInstaller.inf, which were
not picked up by Microsoft Antispyware. These are identical in all but name
to the Winfixer installers MAS had just removed.

Download CCleaner, www.ccleaner.com and remove all temporarily junk.
Also clean registry with "Issues".

Download/Install Lavasofts Adawªre
http://www.download.com/Ad-Aware-SE...2.html?tag=list

After install upgrade Adaware definitions with "Check for updªtes".

Restart in safe mode, press F8 during reboot just before Windows flag screen
appeªrs.

Scan with both MSAS and Lavasoft Adaware, choose "full scªns".

Winfixer should now be remºved.

Good luck

Engel

I am plagued by popups trying to get me to download this winfixer crap. even
when my computer isn't connected to the web. WTF?
I have the latest version of Ad-Aware and MAS beta - nothing finds it and
nothing stops it.


"Engel" <Engel@discussions.microsoft.com> wrote in message
news:C92C3960-FE7C-4CDF-9184-09249E96835A@microsoft.com...
> Download CCleaner, www.ccleaner.com and remove all temporarily junk.
> Also clean registry with "Issues".
>
> Download/Install Lavasofts Adawªre
> http://www.download.com/Ad-Aware-SE...2.html?tag=list
>
> After install upgrade Adaware definitions with "Check for updªtes".
>
> Restart in safe mode, press F8 during reboot just before Windows flag
> screen
> appeªrs.
>
> Scan with both MSAS and Lavasoft Adaware, choose "full scªns".
>
> Winfixer should now be remºved.
>
> Good luck
>
> Engel
>

Hi

The bad guys from Winfixer probably changes how Winfixer
is installed. Cat&Rat game

Maybe this can help:

http://www.spyware-removal-guidelin...infixer-removal

--
plun


Dave Q formulated on söndag :
> I am plagued by popups trying to get me to download this winfixer crap. even
> when my computer isn't connected to the web. WTF?
> I have the latest version of Ad-Aware and MAS beta - nothing finds it and
> nothing stops it.
>
>
> "Engel" <Engel@discussions.microsoft.com> wrote in message
> news:C92C3960-FE7C-4CDF-9184-09249E96835A@microsoft.com...
>> Download CCleaner, www.ccleaner.com and remove all temporarily junk.
>> Also clean registry with "Issues".
>>
>> Download/Install Lavasofts Adawªre
>> http://www.download.com/Ad-Aware-SE...2.html?tag=list
>>
>> After install upgrade Adaware definitions with "Check for updªtes".
>>
>> Restart in safe mode, press F8 during reboot just before Windows flag
>> screen
>> appeªrs.
>>
>> Scan with both MSAS and Lavasoft Adaware, choose "full scªns".
>>
>> Winfixer should now be remºved.
>>
>> Good luck
>>
>> Engel
>>

The one thing that is seldom/never discussed in this particular set of news
groups is the value of having a competent image of your system partition,
one that was created "before" any crap gets on the system and when the
operating system is running at it's optimum.

***People*** Programs like Ghost and TrueImage are worth their weight in
gold (or whatever is the most valuable commodity at this particular time). I
suggest that any "serious" computer user investigate these programs and get
one pronto - before you are infected and have to spend hours/days trying to
clean up a system.

Another alternative is Symantec's GoBack (purchased from Roxio about 2 years
ago). Great for the person with little or no computer knowledge or someone
who just doesn't care to learn about computer maintenance.

--
Regards,

Richard Urban
Microsoft MVP Windows Shell/User

If you knew as much as you think you know,
You would realize that you don't know what you thought you knew!

"plun" <paralun@msn.com> wrote in message
news:mn.4bf67d5ad457b805.32385@msn.com...
> Hi
>
> The bad guys from Winfixer probably changes how Winfixer
> is installed. Cat&Rat game
>
> Maybe this can help:
>
> http://www.spyware-removal-guidelin...infixer-removal
>
> --
> plun
>
>
> Dave Q formulated on söndag :
>> I am plagued by popups trying to get me to download this winfixer crap.
>> even when my computer isn't connected to the web. WTF?
>> I have the latest version of Ad-Aware and MAS beta - nothing finds it and
>> nothing stops it.
>>
>>
>> "Engel" <Engel@discussions.microsoft.com> wrote in message
>> news:C92C3960-FE7C-4CDF-9184-09249E96835A@microsoft.com...
>>> Download CCleaner, www.ccleaner.com and remove all temporarily junk.
>>> Also clean registry with "Issues".
>>>
>>> Download/Install Lavasofts Adawªre
>>> http://www.download.com/Ad-Aware-SE...2.html?tag=list
>>>
>>> After install upgrade Adaware definitions with "Check for updªtes".
>>>
>>> Restart in safe mode, press F8 during reboot just before Windows flag
>>> screen
>>> appeªrs.
>>>
>>> Scan with both MSAS and Lavasoft Adaware, choose "full scªns".
>>>
>>> Winfixer should now be remºved.
>>>
>>> Good luck
>>>
>>> Engel
>>>
>
>

Hi Richard

Yes it would be nice but with todays drives, 100 to 200 GB
it´s nearly impossible for a go back.

And System restore was not designed to deal with spyware hiding
within a Windows PC.

So this is indeed difficult, hopefully a lot of users understands
the need for backups for all personal files. Fast and easy with a DVD
burner for $50 to 60.

--
plun



Richard Urban formulated on söndag :
> The one thing that is seldom/never discussed in this particular set of news
> groups is the value of having a competent image of your system partition, one
> that was created "before" any crap gets on the system and when the operating
> system is running at it's optimum.
>
> ***People*** Programs like Ghost and TrueImage are worth their weight in
> gold (or whatever is the most valuable commodity at this particular time). I
> suggest that any "serious" computer user investigate these programs and get
> one pronto - before you are infected and have to spend hours/days trying to
> clean up a system.
>
> Another alternative is Symantec's GoBack (purchased from Roxio about 2 years
> ago). Great for the person with little or no computer knowledge or someone
> who just doesn't care to learn about computer maintenance.
>
> --
> Regards,
>
> Richard Urban
> Microsoft MVP Windows Shell/User
>
> If you knew as much as you think you know,
> You would realize that you don't know what you thought you knew!
>
> "plun" <paralun@msn.com> wrote in message
> news:mn.4bf67d5ad457b805.32385@msn.com...
>> Hi
>>
>> The bad guys from Winfixer probably changes how Winfixer
>> is installed. Cat&Rat game
>>
>> Maybe this can help:
>>
>> http://www.spyware-removal-guidelin...infixer-removal
>>
>> --
>> plun
>>
>>
>> Dave Q formulated on söndag :
>>> I am plagued by popups trying to get me to download this winfixer crap.
>>> even when my computer isn't connected to the web. WTF?
>>> I have the latest version of Ad-Aware and MAS beta - nothing finds it and
>>> nothing stops it.
>>>
>>>
>>> "Engel" <Engel@discussions.microsoft.com> wrote in message
>>> news:C92C3960-FE7C-4CDF-9184-09249E96835A@microsoft.com...
>>>> Download CCleaner, www.ccleaner.com and remove all temporarily junk.
>>>> Also clean registry with "Issues".
>>>>
>>>> Download/Install Lavasofts Adawªre
>>>> http://www.download.com/Ad-Aware-SE...2.html?tag=list
>>>>
>>>> After install upgrade Adaware definitions with "Check for updªtes".
>>>>
>>>> Restart in safe mode, press F8 during reboot just before Windows flag
>>>> screen
>>>> appeªrs.
>>>>
>>>> Scan with both MSAS and Lavasoft Adaware, choose "full scªns".
>>>>
>>>> Winfixer should now be remºved.
>>>>
>>>> Good luck
>>>>
>>>> Engel
>>>>
>>
>>

Since I turned MESSENGER off (administrative tools) and since I have
SpywareBlaster installed, I don't get any of this junk anymore.
Cynthia
328013

===============================================================

I am plagued by popups trying to get me to download this winfixer crap. even
when my computer isn't connected to the web. WTF?
I have the latest version of Ad-Aware and MAS beta - nothing finds it and
nothing stops it.

Hello

are you sure this will work and are the sites that you posted spyware free
(just checking)
also when i download them how do i delete them off my computer?

thankyou

"Engel" wrote:

> Download CCleaner, www.ccleaner.com and remove all temporarily junk.
> Also clean registry with "Issues".
>
> Download/Install Lavasofts Adawªre
> http://www.download.com/Ad-Aware-SE...2.html?tag=list
>
> After install upgrade Adaware definitions with "Check for updªtes".
>
> Restart in safe mode, press F8 during reboot just before Windows flag screen
> appeªrs.
>
> Scan with both MSAS and Lavasoft Adaware, choose "full scªns".
>
> Winfixer should now be remºved.
>
> Good luck
>
> Engel
>

going to try your sugestion wish me luck any chance i may get refund
--
ta byebye


"Dave Q" wrote:

> I am plagued by popups trying to get me to download this winfixer crap. even
> when my computer isn't connected to the web. WTF?
> I have the latest version of Ad-Aware and MAS beta - nothing finds it and
> nothing stops it.
>
>
> "Engel" <Engel@discussions.microsoft.com> wrote in message
> news:C92C3960-FE7C-4CDF-9184-09249E96835A@microsoft.com...
> > Download CCleaner, www.ccleaner.com and remove all temporarily junk.
> > Also clean registry with "Issues".
> >
> > Download/Install Lavasofts Adawªre
> > http://www.download.com/Ad-Aware-SE...2.html?tag=list
> >
> > After install upgrade Adaware definitions with "Check for updªtes".
> >
> > Restart in safe mode, press F8 during reboot just before Windows flag
> > screen
> > appeªrs.
> >
> > Scan with both MSAS and Lavasoft Adaware, choose "full scªns".
> >
> > Winfixer should now be remºved.
> >
> > Good luck
> >
> > Engel
> >
>
>
>