I have had the winfixer adware infect my Windows XP computer. I have tried to
use System Restore to no avail. Does the malicious Winfixer adware affect the
System restore program?

wit's end <witsend@discussions.microsoft.com> wrote:

>I have had the winfixer adware infect my Windows XP computer. I have tried to
>use System Restore to no avail. Does the malicious Winfixer adware affect the
>System restore program?

Winfixer can be extremely difficult to remove, and using System
Restore is not going to get rid of it.

See MVP Jim Eshelman's Parasite page at
http://www.aumha.org/secure.htm for suggested removal tools.

In addition to the programs he recommends also try the free 14 day
trial version of Webroot SpySweeper from
http://www.webroot.com/download

Good luck

Ron Martell Duncan B.C. Canada
--
Microsoft MVP (1997 - 2006)
On-Line Help Computer Service
http://onlinehelp.bc.ca

From: "wit's end" <witsend@discussions.microsoft.com>

| I have had the winfixer adware infect my Windows XP computer. I have tried to
| use System Restore to no avail. Does the malicious Winfixer adware affect the
| System restore program?

Two phase answer for the removal on WinFixer 2005 and its associated malware.


Phase 1
------------
Download Adware-Virtumundo Removal Tool v1.5 --
http://secured2k.home.comcast.net/to...undoBeGone.exe

Information on the Adware-Virtumundo Removal Tool:
http://forums.mcafeehelp.com/viewtopic.php?t=57049

Phase 2
------------
Download WinFixerFix.exe from the URL --
http://www.ik-cs.com/programs/virtools/WinFixerFix.exe

Execute; WinFixerFix.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\ScanReport.HTML will be generated. At the
end of the scan, it will be displayed in your browser (Opera, FireFox or Internet Explorer).
It is suggested that you move the report out of c:\mcafee before performing another scan.
It would be a good idea to scan in Safe Mode and in Normal Mode and save a copy of the HTML
report for each session.

* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm