Winfixer passes right through MSAS?

[Guest]

I am running MS Antispyware and Trend Micro Antivirus and Spybot. I recently
got a popup in my Opera browser which sent me to winfixer.com and pehaps
because I'm browing from Japan my system went to jp.winfixer.com and I got
all the Winfixer messages in Japanese. Feeling brave and curious I
downloaded the install program onto my machine (I didn't open it of course).
All of this happened without a word of warning from Trend Micro AV or MS
Antispyware. I then scanned the folder containing the Winfixer installer exe
and Trend Micro AV nor MS Antispyware nor Spybot flagged the installer file
as suspicious.

Winfixer is terrible spyware and has been around for months - why are none
of these protection programs picking it up? Is it because MS Antispyware
only detects the English versions of Winfixer not the Japanese ones?

 

[Randy Knobloch]

Use these advanced tools to remove this parasite.

Note, seek help at the same Forum at which the fix is posted
as the webmaster is an MVP also.
<http://www.bleepingcomputer.com/forums/topic18610.html>

Silj

--
siljaline

MS - MVP Windows (IE/OE) & Security, AH-VSOP
_________________________________________
Security Tools Updates
http://aumha.net/viewforum.php?f=31

Reply to group, as return address
is invalid that we may all benefit.

 

[Guest]

Thanks Silj but I'm not infected - I never ran the Winfixer installer app.
My question is really why didn't anything warn me about it?

 

[Randy Knobloch]

Thanks Silj but I'm not infected - I never ran the Winfixer installer app.
My question is really why didn't anything warn me about it?

As your post subject asks, I have no clue why these and others are not
flagged by MSAS - perhaps Beta2 will do a better job.

MVP used and approved "harden IE" settings;
Assuming you run IE as your primary Browser, I do.
Setting the Internet Zone for Additional Security -
<http://www.mvps.org/winhelp2002/restricted.htm#Setting>

Run a "HOSTS" file, then, you would not be able to load these sorts
of URL's - <http://www.mvps.org/winhelp2002/hosts.htm>
HOSTS FAQ -
<http://www.mvps.org/winhelp2002/hostsfaq.htm>

Unexplained computer behaviour may be caused by deceptive software
<http://support.microsoft.com/default.aspx?scid=kb;en-us;827315>

<http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction>

I could post URL's until the cows come home <grin>

We hope this helps you protect yourself better and makes your surfing experience
and trouble-free one!

Regards,
Silj

--
siljaline

MS - MVP Windows (IE/OE) & Security, AH-VSOP
_________________________________________
Security Tools Updates
http://aumha.net/viewforum.php?f=31

Reply to group, as return address
is invalid that we may all benefit.