Windows Security Tutorials - Herong's Tutorial Examples - v3.01, by Dr. Herong Yang
WinFixer 2006 Faked Security Popup
This section describes the security popup caused by the IE WinFixer addon. The popup gives faked security warning messages that your computer has critical errors in registry and file system and you should click a Next button to scan your computer.
Symptom: Also in January of 2006, while vising a website with IE, another IE window popped up with "http:www.winfixer.com/..." in the address field. The pop up window also contains a false security warning message:
This site might require the following ActiveX control: 'WinFixer2006FreeInstall.cab' from 'WinSoftware Corporation, Inc.'. Click here to install... Warning: Your computer may have critical errors in registry and file system! These errors can lead to computer crashes, instability, slowness, and full system failure. Immediate repair may be required. To scan your computer for errors click the "Next" button below. [Next] [Cancel]
Here is an example of this popup window:
Apparently, the Next button presented by this IE addon will lead you download and install a software product. See sections below on what I did to remove this addon.
Table of Contents
About This Windows Security Book
Windows 8: System Security Review
Windows 8: System Security Protection
Windows 8 Defender for Real-Time Protection
Windows 7: System Security Review
Windows 7: System Security Protection
Windows 7 Forefront Client Security
Norton Power Eraser - Anti-Virus Scan Tool
McAfee Virus and Malware Protection Tools
Spybot - Spyware Blocker, Detection and Removal
Keeping IE (Internet Explorer) Secure
Malware (Adware, Spyware, Trojan, Worm, and Virus)
HijackThis - Browser Hijacker Diagnosis Tool
IE Add-on Program Listing and Removal
"Conduit Search" - Malware Detection and Removal
"Tube Dimmer", "Scorpion Saver" or "Adpeak" Malware
►Malware Manual Removal Experience
Removing Malware "Social Privacy DNS"
Removing "WebBar" - htwtb.bin and bar.dll
Removing "SurfBuddy" - sbuddy.dll
Removing "WebSpecials" - webspec.dll
Removing "DSSAgent" - DSSAgent.exe
Removing "Best Offer" - farmmext.exe
Removing "dinst.exe" - dsr.dll
Removing "deSrcAs.dll" - MyWay Search Assistant
WinAntiVirusPRO 2006 Faked Security Popup
►WinFixer 2006 Faked Security Popup
Removing "WinFixer" - Rogue Security Popups
Vundo (VirtuMonde/VirtuMundo) - vtsts.dll Removal
Trojan and Malware "Puper" Description and Removal
VSToolbar (VSAdd-in.dll) - Description and Removal
PWS (Password Stealer) Trojan Infection Removal