Rogue software details: WiniFixer

WiniFixer is a rogue security application. In order to remove it, find out what files and registry entries to look for below.

Known system changes:

Files
c:\System\isecurity.cpl
c:\Desktop\WiniFixer.lnk
c:\CommonDesktop\WinIFixer.lnk
c:\Windir\Web\def.htm

Folders
c:\ProgramFiles\WiniFixer
c:\ProgramFiles\iSecurity
c:\CommonPrograms\WiniFixer
c:\CommonPrograms\WinIFixer

Registry entries
Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\
currentversion\run
Value: isecurity applet
Data:
Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\
currentversion\uninstall\winifixer
Value:
Data:
Key: HKEY_LOCAL_MACHINE\software\winifixer.com
Value:
Data:
Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\
currentversion\run
Value: winifixer
Data:

Source: Lavasoft Malware Lab’s Rogue Gallery.




Share this