Top

Remove Winfixer Spyware / Adware

April 23, 2008

Remove Winfixer

Winfixer is malware that promotes itself as a useful registry cleaner tool. To remove Winfixer you will need a spyware removal tool that has the latest update for Winfixer. Otherwise, you can remove Winfixer manually but this is a tedious process and requires that you delete files from your systems registry. If you make a mistake or a typo you can do harm to your computer that may not be able to be undone. Before proceeding with manual removal, follow these instructions closely.

First, you should backup your registry. Have either a recovery disk or the CD for your operating system handy. Knowledge of how to start your computer in safe mode is required. Also, knowledge of how to kill a process using task manager or process explorer is also required. If you have these skills manually removing Winfixer is something you are able to accomplish.

Here’s how to stop Winfixer from running on your computer. This will not remove it permanently. It will stop it for as long as your Windows session lasts. Go to the task manager and kill the following processes: df_kme.exe, install.exe, sr.exe, and wfx*.exe. The file name wfx* can be wfx5 or wfx6.

If you have some computer experience but not enough to delete files from the registry, you can prevent Winfix from loading and running on your computer using the following steps: go to the start menu, click run, enter MSCONFIG in the box and hit the enter key. Then go to the startup tab. Find Winfixer and uncheck the box next to it. Click on OK. Then restart your computer. While this will not remove Winfixer, it will prevent it from loading and running.

If you really want to remove Winfixer from your system and you are not using a spyware removal program, here is what you need to do. Only attempt this if you are able to perform the tasks listed above, otherwise you run the risk of damaging your system permanently.

Here is how to remove Winfixer from your computer system and registry. First, remove the files associated with Winfixer. Search for these files and folders: WinFixer*.*, df_kmd.sys, df_kme.exe, WinSoftware*.* After you remove these files and folders from your system we will proceed to the registry.

To remove WinFixer from your registry follow these instructions carefully: First search the entire registry for WinFix*.*. Select start menu, run, enter regedit and hit enter, then choose edit, search, enter WinFix*.* and hit enter. Delete whatever it finds and choose find next. Continue this until no more instances are found. Search the registry in the same manner for CompCleanCore*.*. Delete all instances of what you find, use the find next option to be sure you get everything. Then remove the following: df_fixer*.*, df_proxy*.*, FFCom*.*, FFWrapper*.*, FixCore*.*, MMFixCtrl*.*, checkproduct2.dll, compcln.dll, ffwrapper.dll, fixcore.dll, mmfixctrl.dll, WinSoftware, WFX5.is1. After you remove these, delete the following registry entries:

o HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\df_kmd.sys
o HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\df_kmd.sys

Finally remove the following registry keys. Take care not to make a mistake.

o HKEY_CLASSES_ROOT\CLSID\{08C71FB1-1E66-4D22-9F32-4C045A451306}

o HKEY_CLASSES_ROOT\CLSID\{1CDEB41B-905A-4183-AA20-26E075419B46}

o HKEY_CLASSES_ROOT\AppID\{25A3C995-10C8-474B-A167-99460AB4AB2B}

o HKEY_CLASSES_ROOT\AppID\{287A2BAD-6590-4EFF-9BBC-494385664A73}

o HKEY_CLASSES_ROOT\AppID\{290B5B73-4963-4BA1-9D2D-07CB566CB7FA}

o HKEY_CLASSES_ROOT\CLSID\{38EDB9E2-D7C4-4575-8905-FE65414FFEAD}

o HKEY_CLASSES_ROOT\CLSID\{48349992-1402-4C67-B45B-2E619E641FDB}

o HKEY_CLASSES_ROOT\CLSID\{538BC8F3-2E1E-4D2D-A261-158DF6E9B407}

o HKEY_CLASSES_ROOT\CLSID\{53ABACCB-434C-4756-A02B-8C2A3F29FB7D}

o HKEY_CLASSES_ROOT\CLSID\{66A9C4D0-BC54-4841-8FAA-DB98CBB77BAD}

o HKEY_CLASSES_ROOT\CLSID\{84C43108-013C-4513-8578-F50080B9C9D0}

o HKEY_CLASSES_ROOT\AppID\{8C65AEF6-E413-4314-815B-82717A3F1603}

o HKEY_CLASSES_ROOT\CLSID\{9CC1BE04-3B42-4442-9A46-77E8BC1108F9}

o HKEY_CLASSES_ROOT\CLSID\{AA69BBFC-1D28-4960-8061-93C1BB156238}

o HKEY_CLASSES_ROOT\CLSID\{B096A483-0ABD-4AF0-856A-CAD36145AF5C}

o HKEY_CLASSES_ROOT\CLSID\{B5E427F9-AB38-4348-9076-86870C2BE860}
o HKEY_CLASSES_ROOT\CLSID\{C0BC364F-AB33-4778-8047-5A2148E0ECDA}

o HKEY_CLASSES_ROOT\CLSID\{C427B3E3-28DC-4001-9590-D99B6776119B}

o HKEY_CLASSES_ROOT\CLSID\{CAE8A9B1-ABBD-4159-A485-1DA045A5D4A1}

o HKEY_CLASSES_ROOT\AppID\{E8928E69-C050-42A9-8884-94DE85E888A2}

o HKEY_CLASSES_ROOT\CLSID\{F41C1430-CFDE-4AD3-B38D-7890F0843E47}

o HKEY_CLASSES_ROOT\Interface\{08C71FB1-1E66-4D22-9F32-4C045A451306}

o HKEY_CLASSES_ROOT\Interface\{1CE1C25B-F8B4-4974-99D2-5D4AE96B9900}

o HKEY_CLASSES_ROOT\Interface\{35096C29-3507-4ABE-B6D8-C7CC881BE020}

o HKEY_CLASSES_ROOT\Interface\{38F743A2-210F-49DE-9B79-DCD501CED284}

o HKEY_CLASSES_ROOT\Interface\{3EEC290D-FC13-4C83-803D-4802651EEB61}

o HKEY_CLASSES_ROOT\Interface\{41A5BBF6-3C9D-4CF9-9A99-32DD37CC290B}

o HKEY_CLASSES_ROOT\Interface\{4E4F38D9-8736-41AE-B192-E829AE194398}

o HKEY_CLASSES_ROOT\Interface\{4F79D1C5-24F9-4E59-8022-604D4B41D5CA}

o HKEY_CLASSES_ROOT\Interface\{66484903-09F4-4330-927D-1F6C214221AC}

o HKEY_CLASSES_ROOT\Interface\{7FA14AD6-D8E5-465F-9BD1-A37E26C1A74F}

o HKEY_CLASSES_ROOT\Interface\{9E984934-CD94-4763-9DBC-618E483D4B7F}

o HKEY_CLASSES_ROOT\Interface\{B115BD8E-B008-46F4-B8B6-3405EB325C3C}

o HKEY_CLASSES_ROOT\Interface\{B9DFCF32-B679-4CAD-B7FC-518A48CE3922}
o HKEY_CLASSES_ROOT\Interface\{CAE8A9B1-ABBD-4159-A485-1DA045A5D4A1}

o HKEY_CLASSES_ROOT\Interface\{CBEEF194-EBC5-4758-9B51-AC34FC135E70}

o HKEY_CLASSES_ROOT\Interface\{CD3604CC-2B95-43EE-AFC9-E7444C21BE1C}

o HKEY_CLASSES_ROOT\Interface\{D21040FE-0A57-4FAB-8ED2-F0E653E55809}

o HKEY_CLASSES_ROOT\Interface\{D7A2488E-53E4-4EDD-AEAA-F24778BEB100}

o HKEY_CLASSES_ROOT\Interface\{D7A6DF8D-B6CF-4C27-8E99-ECA2CE370EA7}

o HKEY_CLASSES_ROOT\Interface\{F41C1430-CFDE-4AD3-B38D-7890F0843E47}

o HKEY_CLASSES_ROOT\Interface\{F6C1582E-B11C-4724-B8F6-240457EF1D2A}

o HKEY_CLASSES_ROOT\Interface\{FB787D5E-0C7C-4BAB-B45D-20325FB886DB}

o HKEY_CLASSES_ROOT\TypeLib\{0E9F6AC0-A21A-4591-910F-E2C6F3CA094C}

o HKEY_CLASSES_ROOT\TypeLib\{30ED49A5-CA6C-4918-B5F3-5E6818C91D8B}

o HKEY_CLASSES_ROOT\TypeLib\{4DCEEA42-794D-4855-9ECC-20DCF5F4FEA7}

o HKEY_CLASSES_ROOT\TypeLib\{6A077841-5016-42C8-92C8-F2D6B865BCD1}

o HKEY_CLASSES_ROOT\TypeLib\{AD70AC89-F460-4E7E-B5A5-7EAF7E207736}

o HKEY_CLASSES_ROOT\TypeLib\{B6625280-8CD8-4632-97C0-83CEC12A49A3}

o HKEY_CLASSES_ROOT\TypeLib\{F458ADAE-D53B-4859-B99F-9FA127791278}

o HKEY_CLASSES_ROOT\TypeLib\{FC76A5B8-DB35-4F3E-8B9A-BF0EEA098D64}

Comments

Got something to say?





Bottom