WinFixer2005 - how to remove?

D

Duncan

Apologies if this is old hat, but I've looked back through previous
posts and can see no mention of WinFixer2005 but can't believe I am
the first and only person to be afflicted!

My OS is W98SE. I am on broadband with Plusnet and supposedly have a
firewall. I have scanned today with updated AVG, SpyBot and SpyWare
Doctor none of which appear to have even scratched the surface of this
pest.

And in fact, SpyBot even seems to think that WinFixer2005 is something
vital to the wellbeing of my machine; when I removed two files related
to WinFixer from my startup SpyBot gave me dire warnings of the
consequences.

Any help removing this pest would be much appreciated. Needless to say
I do not wnat to shell out £20 or £30 for software 'guaranteed' to do
the job but which in my experienec invariably do not. A good example
being Enigma SpyHunter. Don't buy it!

Thanks for any advice


To reply by email delete nospam
 
D

David H. Lipman

From: <Duncan>

| Apologies if this is old hat, but I've looked back through previous
| posts and can see no mention of WinFixer2005 but can't believe I am
| the first and only person to be afflicted!
|
| My OS is W98SE. I am on broadband with Plusnet and supposedly have a
| firewall. I have scanned today with updated AVG, SpyBot and SpyWare
| Doctor none of which appear to have even scratched the surface of this
| pest.
|
| And in fact, SpyBot even seems to think that WinFixer2005 is something
| vital to the wellbeing of my machine; when I removed two files related
| to WinFixer from my startup SpyBot gave me dire warnings of the
| consequences.
|
| Any help removing this pest would be much appreciated. Needless to say
| I do not wnat to shell out £20 or £30 for software 'guaranteed' to do
| the job but which in my experienec invariably do not. A good example
| being Enigma SpyHunter. Don't buy it!
|
| Thanks for any advice
|
| To reply by email delete nospam

SpyHunter is listed as a rogue anti spyaware application by Spyware Warrior
http://www.spywarewarrior.com/rogue_anti-spyware.htm#sh_note

I hope the Spybot you mention is SpyBot Search and Destroy v1.4. If it isn't, remove the
old version and install and update the new version.

http://labs.paretologic.com/spyware.aspx?remove=WinFixer2005

http://www.spyware-removal-guideline.com/winfixer-removal
 
A

Art

Apologies if this is old hat, but I've looked back through previous
posts and can see no mention of WinFixer2005 but can't believe I am
the first and only person to be afflicted!

My OS is W98SE. I am on broadband with Plusnet and supposedly have a
firewall. I have scanned today with updated AVG, SpyBot and SpyWare
Doctor none of which appear to have even scratched the surface of this
pest.

And in fact, SpyBot even seems to think that WinFixer2005 is something
vital to the wellbeing of my machine; when I removed two files related
to WinFixer from my startup SpyBot gave me dire warnings of the
consequences.

Any help removing this pest would be much appreciated. Needless to say
I do not wnat to shell out £20 or £30 for software 'guaranteed' to do
the job but which in my experienec invariably do not. A good example
being Enigma SpyHunter. Don't buy it!
Click to expand...

Google winfixer2005 and right at the top you'll see that Xoftspy
claims to remove it:

http://labs.paretologic.com/spyware.aspx?remove=WinFixer2005

Manual instructions for advanced users are there as well.

Art

http://home.epix.net/~artnpeg
 
D

David H. Lipman

A

Art

From: "Art" <[email protected]>


|
| Google winfixer2005 and right at the top you'll see that Xoftspy
| claims to remove it:
|
| http://labs.paretologic.com/spyware.aspx?remove=WinFixer2005
|
| Manual instructions for advanced users are there as well.
|
| Art
|
| http://home.epix.net/~artnpeg

My only problem is that XoftSpy had been listed as a rogue anti spyware application by
Spyware Warrior.
http://www.spywarewarrior.com/rogue_anti-spyware.htm#xos_note
Click to expand...

Well, things must have changed in the last few days then. It was
listed more or less as a question mark. I tried it out and it did not
install spyware or give any phoney "detections" to sucker the user
into purchasing. I wouldn't have suggested it if I hadn't tried it and
determined there is anything rogueish or phishy about it.

To the OP:

I noticed that someone in one of the Forums claimed that Ad-Aware
cleans up winfixer2005:

http://www.lavasoftusa.com/software/adaware/

Also, I'm beginning to suspect that KAV might detect and clean it:

http://www.claymania.com/KASFX.EXE

Try this only as a long shot (and because I'm curious :)) since it's a
10.7 meg download. Another way to find out if any antivirus products
detect it is to upload suspect files to Virus Total:

http://www.virustotal.com/flash/index_en.html

Art

http://home.epix.net/~artnpeg
 
D

Duncan

On Mon, 26 Sep 2005 13:38:12 GMT, "David H. Lipman"

Hello Dave - thanks for the post.
| My OS is W98SE. I am on broadband with Plusnet and supposedly have a
| firewall. I have scanned today with updated AVG, SpyBot and SpyWare
| Doctor none of which appear to have even scratched the surface of this
| pest.
|
Click to expand...
| Any help removing this pest would be much appreciated. Needless to say
| I do not wnat to shell out £20 or £30 for software 'guaranteed' to do
| the job but which in my experienec invariably do not. A good example
| being Enigma SpyHunter. Don't buy it!
|
Click to expand...
SpyHunter is listed as a rogue anti spyaware application by Spyware Warrior
http://www.spywarewarrior.com/rogue_anti-spyware.htm#sh_note
Click to expand...

Wish I'd known that before parting with some plastic!
I hope the Spybot you mention is SpyBot Search and Destroy v1.4. If it isn't, remove the
old version and install and update the new version.
Click to expand...

Yes, v1.4. As stated above, all done today with updated versions.
http://labs.paretologic.com/spyware.aspx?remove=WinFixer2005

http://www.spyware-removal-guideline.com/winfixer-removal
Click to expand...

Tried both these. They both go through the motions, allowing download
and installation then scan but how well or badly they might then
perform I have no idea being unable to put either to the test without
parting with more plastic. Which, as above, I am very reluctant to do.
Both have advice on 'manual' removal which, while looking a somewhat
daunting task, I may have to resort to in the long run.

Thanks again.

Duncan
To reply by email delete nospam
 
A

Art

Hello Art - thanks for the post.


But they want money actually to do anything. My experience to date -
with Macafee, Norton, Enigma and the like - is you cough up for what
you think will do the trick only to find a) zero to crap tech
help/customer support b) after about a month the software company
'updates' to a new version, ceases to provide any updates for the
sofytware previously bought in good faith which, in any case, never
performs as claimed in the first place.


Yes, I saw those and may have to give it a whirl.
Click to expand...

Didn't you see my other posts in this thread? You have other
free alternatives for scanners/removers.
Thanks again
Click to expand...

You're welcome.

Art

http://home.epix.net/~artnpeg
 
D

Duncan

Hello Art - thanks for the post.
Google winfixer2005 and right at the top you'll see that Xoftspy
claims to remove it:

http://labs.paretologic.com/spyware.aspx?remove=WinFixer2005
Click to expand...

But they want money actually to do anything. My experience to date -
with Macafee, Norton, Enigma and the like - is you cough up for what
you think will do the trick only to find a) zero to crap tech
help/customer support b) after about a month the software company
'updates' to a new version, ceases to provide any updates for the
sofytware previously bought in good faith which, in any case, never
performs as claimed in the first place.
Manual instructions for advanced users are there as well.
Click to expand...

Yes, I saw those and may have to give it a whirl.

Thanks again

Duncan
To reply by email delete nospam
 
D

Duncan

Well, things must have changed in the last few days then. It was
listed more or less as a question mark. I tried it out and it did not
install spyware or give any phoney "detections" to sucker the user
into purchasing. I wouldn't have suggested it if I hadn't tried it and
determined there is anything rogueish or phishy about it.
Click to expand...

I don't know what phoney detections are (unless they are just what
they sound! often not the case in computer-speak) but as mentioned
earlier, when I tried Xoft earlier today it installed and scanned but
then would not remove anything without 'registering' which = money.
To the OP:

I noticed that someone in one of the Forums claimed that Ad-Aware
cleans up winfixer2005:

http://www.lavasoftusa.com/software/adaware/
Click to expand...

I've tried AdAware in the past and dumped it for some reason but will
give it another go. Likewise KAV of which I've never heard. But then
the things I have never heard of would fill the Bodleian several times
over.
Also, I'm beginning to suspect that KAV might detect and clean it:

http://www.claymania.com/KASFX.EXE

Try this only as a long shot (and because I'm curious :)) since it's a
10.7 meg download. Another way to find out if any antivirus products
detect it is to upload suspect files to Virus Total:

http://www.virustotal.com/flash/index_en.html
Click to expand...

Trouble is I am not at all sure exactly where and in how many guises
this WinFixer thing lurks. Judging by the manual instructions it is
all over the place.

Art

http://home.epix.net/~artnpeg
Click to expand...

To reply by email delete nospam
 
S

Shane

Well, things must have changed in the last few days then. It was
listed more or less as a question mark. I tried it out and it did not
install spyware or give any phoney "detections" to sucker the user
into purchasing. I wouldn't have suggested it if I hadn't tried it and
determined there is anything rogueish or phishy about it.
Click to expand...

I just ran it, Art. It made 13 false detections - none of the type meant to
sucker the rube, but rather just poor definition.

Seeing as how previously xoftspy has apparently borrowed from Ad-aware's
look and Spybot S&D's goodwill, it seems phishy that the false positives are
identical to those of Microsoft's AntiSpyware Beta (which iirc have since
been fixed, while still in beta).

False positives include identifying a CWS entry in Mike Burgess's HOSTS file
as malign, identifying two Restricted Zone entries as malign and identifying
every item in the Program Files\Internet Explorer\Toolbar folder as
CoolWebSearch files (when actually they're part of the IE5 Powertoys
installation!).

So. A heap of shit.

Shane
 
D

David H. Lipman

From: "Shane" <[email protected]>


|
| I just ran it, Art. It made 13 false detections - none of the type meant to
| sucker the rube, but rather just poor definition.
|
| Seeing as how previously xoftspy has apparently borrowed from Ad-aware's
| look and Spybot S&D's goodwill, it seems phishy that the false positives are
| identical to those of Microsoft's AntiSpyware Beta (which iirc have since
| been fixed, while still in beta).
|
| False positives include identifying a CWS entry in Mike Burgess's HOSTS file
| as malign, identifying two Restricted Zone entries as malign and identifying
| every item in the Program Files\Internet Explorer\Toolbar folder as
| CoolWebSearch files (when actually they're part of the IE5 Powertoys
| installation!).
|
| So. A heap of shit.
|
| Shane
|

Shane:

Thanx for that !

I have tried to indicate the problems with XoftSpy with those who have used it or posted a
query on it and you just provided some valuable feedback why NOT to use it.
 
S

Shane

David said:
Shane:

Thanx for that !

I have tried to indicate the problems with XoftSpy with those who
have used it or posted a query on it and you just provided some
valuable feedback why NOT to use it.
Click to expand...

Well, you're welcome, Dave. Note also that every time it's started it tries
to go online to download updates definitions, even though configured not to.
Something I personally find extremely annoying!


Shane


Shane
 
D

David H. Lipman

From: "Shane" <[email protected]>


|
| Well, you're welcome, Dave. Note also that every time it's started it tries
| to go online to download updates definitions, even though configured not to.
| Something I personally find extremely annoying!
|
| Shane


Use of Ethereal would be good to see if XoftSpy is truly looking for updates and not SENDING
data from the POV of the PC back home or to a third party.
 
A

Art

From: "Shane" <[email protected]>


|
| I just ran it, Art. It made 13 false detections - none of the type meant to
| sucker the rube, but rather just poor definition.
|
| Seeing as how previously xoftspy has apparently borrowed from Ad-aware's
| look and Spybot S&D's goodwill, it seems phishy that the false positives are
| identical to those of Microsoft's AntiSpyware Beta (which iirc have since
| been fixed, while still in beta).
|
| False positives include identifying a CWS entry in Mike Burgess's HOSTS file
| as malign, identifying two Restricted Zone entries as malign and identifying
| every item in the Program Files\Internet Explorer\Toolbar folder as
| CoolWebSearch files (when actually they're part of the IE5 Powertoys
| installation!).
|
| So. A heap of shit.
|
| Shane
|

Shane:

Thanx for that !

I have tried to indicate the problems with XoftSpy with those who have used it or posted a
query on it and you just provided some valuable feedback why NOT to use it.
Click to expand...

And according to the OP the free download is useless since removal is
disabled??? If so, I certainly wasn't aware of that. I'd never suggest
using anything for emergency scanning/removal purposes that isn't
free.

Art

http://home.epix.net/~artnpeg
 
Top