WinFixer removal

Name: WinFixer

Belongs to Adware

Also known as: Vundo trojan,
SurfAccuracy

Created by www.winfixer.com

Remover: SpywareDoctor

WinFixer is related to Adware. Adware comes thru corrupt sites and installs itself without user agreement. Adware parasites perform actions related to data recording about user. Gathered information can be related to browsing history, the most visited pages, the products bought and more... Adware has the opportunity to update itself without user consent and attack you with newly updated ads.

Scan your computer now for free with SpywareDoctor:

· Browser performance can be slow

· Possible pop-up ads display, search redirects

· "Windows" errors can be caused

· System crashes and restarts can occur

Every time the computer is booted up winfixer pops up and tries to run its installer. It can be closed, but sometimes that does not work, or if accidentally the wrong button is pressed winfixer begins the installation process. Rebooting while it is trying to install is the only thing that will stop it. The process starts all over again after computer restart. Winfixer shows popup ads even if the main product is not running. Removing it multiple times using Add/Remove programs does not help, because it keeps coming back.

Follow these steps to remove Winfixer

• This guide fits for Windows 2000 and XP versions. Firstly you have to create Hijackthis log (how to create hijackthis log).
• The www.spyware-removal-guideline.com crew is not responsible if the following actions are performed incorrectly.
• Possible lines in hijackthis log that define winfixer infection:

• If the lines above are not found in hijackthis log, terminate reading this paragraph and jump to Manual winfixer removal on the bottom of the page.
• Download VundoFix.exe on desktop and run the file (double-click on it).
• In the opened window select Run VundoFix as a task
• After VundoFix reopened press Scan for Vundo button
• After scan press Remove Vundo button. Click Yes
• After VundoFix finished removal process you will be asked to shutdown the computer - press ok
• Turn on the computer
• Winfixer infection should be gone
• write to us webmaster@spyware-removal-guideline.com and tell how did you succeed.

User comments

Katy
--------------
THANK YOU!!! Your fix removed winfixer 2005 from my computer!! I can not tell you how much I appreciate that!!
I am so grateful that I hesitate to give you one suggestion for your instructions because it may seem that I am complaining... I am not! I just thought other people might experience the same thing I did and not continue with the process to rid themselves of Winfixer 2005! Anyway, if it's helpful here is what I experienced...
after I put in the line from the hijackthis.log I got a message that said '-' is not recognized as an internal or external command, operable program or batch file
This was repeated 4 or 5 times, (I didn't count how many, sorry!) At first I thought that I had included the C:\WINDOWS\system32\xxx.dll part of that line in error so I started over again and entered the line without the c:\Windows\system32\xxx.dll part and I got the same messages.
So, I started over and entered the entire line as I had initially then I ignored the message about <'-' is not recognized...> and proceded with your directions.
It worked beautifully!!
This may have been something that not many people experience I just thought that if others had my experience, it might help to put a comment that if they see that message it's ok to ignore it.
Anyway, thank you again!!!
______________

D.W.
--------------
I apparently picked this up on the 11th but it didn't try to activate itself until a day later (while I was offline and neither IE nor Windows Explorer were open--thank you Spybot for the registry change attempt warnings). Anyway thanks to Spybot I was able to immediately spot the problem file (C:\WINDOWS\system32\mlljk.dll for this version) and Google quickly revealed it was WinFixer. One more Google and checking a few threads I decided to go with your solution (since for one thing several threads linked to you). Worked like a charm, thanks bunches and keep up the good work!
______________

Scott
--------------
Your instructions on removing WinFixer worked!

I've been bothered by this nasty little bugger for weeks. Tried all my usual spyware-removal programs and skills but couldn't get rid of it. The KillVundo.bat file killed off the processes and deleted the file from which I kept getting reinfected, and that was the key -- I couldn't delete the file because some process was using it, and I couldn't tell which process was using it just by reading the process name in the Task Manager. HijackThis no longer finds the file (mine happened to be called "geeba.dll"), and I haven't had a rogue popup since rebooting the last time. Let's keep our fingers crossed that it stays that way...

THANK YOU.

Executable files:

8355.exe
WinFixer2005ScannerInstall[1].exe
eqwxzb.exe
hqyikxs.exe
iasnhl.exe
install.exe
ipvp2res.exe
ktcar.exe
odensc.exe
riak.exe
riqzcju.exe
sr.exe
sspggd.exe
unins000.exe
updater.exe
wayftxi.exe
wfx5.exe
xau.exe

Dynamic-link library files:

asappsrv.dll
compcln.dll
crxml.dll
df_fixer.dll
df_proxy.dll
dkmsrpcn.dll
eaann.dll
ffcom.dll
ffwraper.dll
fixcore.dll
fssjjdf.dll
ftrec.dll
idletrac.dll
igzxgqcr.dll
lquwhfff.dll
mmfix.dll
mznoo.dll
nikppcy.dll
oedrop.dll
pcheck.dll
pss.dll
strres.dll
uwtuh.dll