Winfixer Removal Guide
Winfixer is a fake security product that goes by many similar names such as winantivirus2008 and wnfixer anti-virus.
Most of the time this program get installed Via the ZLOB downloader from a fake videao codec. If you are infected with Winfixer then chances are you also have Vundo or Virtumonde as well. These programs are most commenly seen together and not seperate. The easiest way to remove this trojan theat is to buy anto-spyware software called Spyware Doctor. This is the leading anti-spyware software on the market and does a great job at killing this malware threat. Under no circumstance should you purchase the fake winfixer program. You are only supporting the makers of this spyware. The software we use to remove this threat can be found at http://www.pctools.com/spyware-doctor-antivirus. You should run the software in safe mode and you may also have to run the scan up to three times. Most people are good with just one but if winfixer is not fully removed it may take a few scans.
If you just don't want to deal with this threat naymore then consider having a repair company fix it for you. Places like http://www.onlinecomputerrepair.org do a great job and are very low in cost. The nice part about this is you get your system fixed then and there and don't have to worry about the spyware threat any longer.
If you want to do it yourself then you may run into a few troubles. You can always do a system restore and go back in time to when your computer was not infected. This tends to work for many people. Keep in mind that the spyware is still on the system but often times it is in active after the system restore. You really should have propper protection anyways so go out and buy software anti-spyware software.
Winfixer Removal
The first thing we will attempt to do is a system re-store. This is a built in Windows tool that allows you to take your computer back in time. It does not allways work but because it is so simple to do we try it first. Keep in mind you still have to run anti-spyware software to remove the left over traces but it's a good start. Go to the Widnows Start button and select “All Programs” > Accessories > System Tools > System restore. Start the restore process. Choose a date when you KNOW you were not infected. If you just noticed you started having popups last week then go back 2 weeks. I would always go back an extra week. This will not fully remove the virus but undo damage done. Your computer will auto reboot during the restore process.
Once your computer re-boots log back in and wait till you see a box saying something like “System Restore Complete”. Re-boot your computer and enter into safe mode by pressing the F8 key on boot-up. Keep pressing the F8 Key until you see the DOS like screen and then select “Safe Mode with Networking”. If windows boots normal and you do not see the afore mentioned screen then re-boot and try the F8 thing again. When asked if you would like to continue or do a system restore just select YES to continue. Make sure you log in under your normal account User name.
Now that you are ins safemode with networking we will download a few programs and update them. Click the links bellow to download the software needed.
Spyware Doctor
Spybot Search and Destroy
Save all three in a location were you will remember like the desktop. Go ahead and install Spyware Doctor first. Make sure you update the program. Spyware Doctor may try and run after you update the program. Spyware Doctor has a free 30 day trial but it will not remove anything untill you purchase the program. If you want you can just purchase the program and then run the scan and be done with this guide. Your other choice is to stop the auto scan after you update the program. We will still be using this program regardless at the end of this guide to ensure you are winfixer free.
Now onto Spybot. Double click the install file. Follow the on screen prompts. You will be asked to do a registry backup. You really should do the backup. Also be sure to update the program. Once done run the program and do a scan. Remove the traces the system found. Chances are it found 20-1000 traces of things installed. The less the bettter. That just means the system restore worked. Once done you may be asked to re-boot. If so do it. If the Spybot wants to start on startup let it.
Now run Spyware doctor. The scan is 100% free but to remove anything else it would cost money. The purpose of using Spyware doctor is because it is the best on the market and if you have any traces left over that program will find it. If it finds nothing then YHEAAAAAA!!! you are now spyware free. Keep in mind it may find cookies on your system Don't pay this a second thought as cookies can not harm you. You can still remove them but that is optional.
Do a little clean up. If you purchase Spyware doctor you will want to un-install Spybot as it is not needed and will only slow your copmuter down. Also you may still need to change your home page back to normal. Surf the web a bit and see that you have no more pop-ups. Your home page may still be changed when you first launch IE or Firefox. If that is the case just go to "Tool" > Options and change your home page to your favorite site.
If you have no Anti-Virus or Anti-spyware protection you should consider an all in one solution like the PCTOOLS internet security pack. This has Spyware Doctor with Antivirus and has a firewall.
If all else fails and you find you are still infected then you will need help form a pro. You can always take your comptuer somewere local or just have is fixed on-line at www.onlinecomputerrepair.org
|