My Anti Spyware

How to remove WinFixer

WinFixer is a bogus anti-spyware and spam-blocking application downloaded mainly from popup ads that would be convincing to the average user. It is also bundled with certain free downloadable applications. The program requires you to buy it for about $30. When bought, it scans the computer and replicates the cookie-handling function of Internet Explorer, meaning it’s useless to anyone with IE installed.

If installed, WinFixer will load on startup and use 100% of the user’s CPU. The program shows many “false positives” in its scan results, often targeting non-malicious files, or even essential files. If the user exits WinFixer, it will start up again within a short amount of time.

Here is what Winfixer says it does (but doesn’t):

WinFixer 2005 is useful utility to scan and fix any system, registry and hard drive errors. It ensures system stability and performance, frees wasted hard drive space and recovers damaged Word, Excel, music and video files.

WinFixer is closely related to Aurora Network’s Nail.exe hijacker/spyware program. In worst case scenarios, it’ll embed itself into Internet Explorer and maybe impossible to get rid of from there on. The program is also closely related to the Vundo and Virtumonde viruses and are treated as such.

According to a record on WHOIS lookup, the Winfixer company is located at: WinFixer, P.O. Box 3, Kiev, NA 04114, UA or at hostmaster@winfixer.com

It’s a junk security program with no real benefit. Here’s their marketing nonsense:

WinFixer 2005 detects and repairs corrupted files, removes useless data, cleans up clogged Windows registry and fixes hard drive errors. This useful utility helps you maintain an error-free PC and achieve 100% system performance.

For a fake security program, they’ve got a pretty good fake “Support” page with a Knowledge Base, a troubleshooter and a contact form, but NO E-MAIL ADDRESSES. Of course they’re not eager to put a phone number or address on the site, but not even an e-mail address?

Here’s a choice snippet from WinFixer License Agreement, and other legal docs:

Some of our products may be unsuited to run with other software. We have the right to uninstall incompatible products. We will notify our customers before uninstalling such products. A customer CANNOT claim a refund if the reason is a requisition or removal of conflicting software.

Coexistence of some products may lead to many unsatisfactory effects as well as to slow the customer’s system. That is why the usage of WinFixer 2005 requires the uninstallation of products which represent a risk to the system.

That essentially allows WinFixer to tell you that anything is dangerous, and that you might just have to buckle down and let them delete Norton or Ad-Aware or Spy Sweeper or XoftSpy, which detect WinFixer as a threat.

The program is often installed covertly and can be very difficult to remove.

- You may not be informed that WinFixer has been installed, particularly if it came bundled with another piece of software.

- WinFixer can be installed through intrusive “social engineering” tactics, employing uncloseable ad windows and messages to goad the user into accepting an agreement.

- The program itself can display pop-up and pop-under ads, even when it’s not currently running.

- WinFixer reloads itself on a timer. Closing the program only provides a few moments until it opens again.

The symptoms of Winfixer include slow browser performance, pop-up and pop-under ads, search redirects, fake Windows error messages and warnings, as well as system halting, crashes and reboots.

For a first-hand account of a struggle with WinFixer, read Paperghost’s death-defying tale over at Vital Security.

If you’re struggling with WinFixer right now, you may want to try XoftSpy. Alternately, there are a number of sites with detailed removal instructions. If you’re an advanced user, they might be worth a look. (Try this one: http://www.bleepingcomputer.com/forums/topic18610.html)

How to detect keylogger on my computer ?

Why Keyloggers Threaten Your Privacy

1. Surveillance software is very common nowadays. A Google search on keyloggers yields 39,000+ results.
2. Software mentioned in (1) has a bunch of features to record your activity in every possible way. See some features here.
3. Due to their “good purpose”, keyloggers and other types of surveillance software are not detected by AntiVirus programs.
4. Most keyloggers are more threatening than the so-called spyware. Keyloggers can record your passwords, emails, credit card number, etc.
5. Some keyloggers can even be installed remotely. Google search here.
6. Most (if not all) keyloggers are invisible. This means you will not know if a keylogger is running on your system.
7. More and more people are using keyloggers or surveillance software. These include your friends, spouse, employer, etc.
8. The recorded keystrokes can be sent to an email address. So physical access to your computer is not necessary.
9. Public computers (e.g. public library’s) might have keyloggers installed. It is just a possibility.
10. You value your privacy, don’t you?

Use follow software for detect keylogger

1. Kldetector - small free program for detecting keyloggers
2. SnoopFree Privacy Shield - informs you when another programme is wanting to log your keystrokes

What is “Internet Zone” ? How to use “Internet Zone Settings” ?

Most of the Internet Explorer settings that we’ll be configuring apply to the Internet zone. The Internet zone is the default zone that all web sites fall into unless the user explicitly adds them to another zone (e.g., the Trusted sites zone or the Restricted sites zone). It’s important to lock down the Internet zone as tightly as possible because a secure Internet zone is, in many ways, our first line of defense against potentially dangerous web sites. With a secure Internet zone, you’ll never be unpleasantly surprised by a web site you’re visiting for the first time. Locking down the Internet zone means that you will:
# be protected from rogue spyware installations (e.g., Gator, BonziBuddy,
WebHancer, Lop.com, and the like);

# put an end to annoying, useless pop-ups at most web sites by default;

# be protected against security holes in active content that might let
hackers and crackers compromise your system and your personal
data;

# put all web sites on a “short leash” until you trust them enough to add
them to your Trusted sites zone.

what a rootkit is ?

definition from Wikipedia:

A rootkit is a set of software tools frequently used by a third party (usually an intruder) after gaining access to a computer system. These tools are intended to conceal running processes, files or system data, which helps an intruder maintain access to a system without the user’s knowledge. Rootkits are known to exist for a variety of operating systems such as Linux, Solaris and versions of Microsoft Windows.

What if my computer is fully protected and I’m still having problems?

First, you should make sure your anti-virus and spyware/adware scanner software are all up to date. If you haven’t updated in awhile or aren’t sure if you are set to auto update, go ahead and update the software and run a full system scan again. If you are still having problems you may have registry errors on your machine. Over time, ALL computers develop errors. This is generally caused from installing and uninstalling programs. Fragments can be left behind and over time registry entries can become corrupted. There are some great programs that not only scan for these errors, but also fix them.

So how do I protect my computer from viruses?

The only way to protect against virus attack is a solid anti-virus program. Don’t forget to update it regularly because new viruses are written everyday. Almost all anti-virus software has an “auto-update” feature I would recommend you utilize. I have several links to quality anti-virus software on my links page. Some are even 100% FREE!

What are computer viruses?

Computer viruses are programs specifically written to wreak havoc on your system. The main intent of a virus is to cause problems with as many computers as possible. The problems caused could be minor, or could shut down the network of an entire company.

What is Spyware, Adware and Malware?

Spyware and Adware, also called “Malware”, are files made by publishers that allow them to snoop on your browsing activity, see what you purchase and send you “pop-up” ads. They can slow down your PC, cause it to crash, record your credit card numbers and worse. If you’re like most Internet users, chances are you’re probably infected with these files. Simply surfing the Internet, reading email, downloading music or other files can infect your PC without you knowing it.