Spyware Infection and Removal

Sometimes spyware programs can become so embedded in your computer system that it is almost impossible to deal with it. For example, your computer may not be able to start up or open its internet browser anymore or a run very slow that makes it impossible to work with it. In these cases, you may want to contact a local computer technician, who knows how to fix the problem, if you are in the Madison area contact Anderson Computer. A method, for removing spyware is to go through removing files and making system changes manually, this is what we do at Anderson Computer, analyze, compare and verify system files, driver files, programs and data files, as well as, going to each folder in your computer and checking for spyware or suspicious files. This is a more complex method, as each type of Spyware behaves differently, and requires a certain level of technical expertise to know how and to know what.
Remember, the prevention of spyware is the best method of keeping your computer safe. Learn about spyware prevention so you can protect your computer from spyware in the future and avoid going through the complicated removal process, and getting those annoying pup-up windows.


Contact Anderson Computer at 203-245-5881 or using our contact form


Fake software, Win Antivirus

Fake Software, WinAntivirus 2005 2006 2007 2008 2009
This program may infect your system in several different ways, the most common and effective way is by the user’s lack of information regarding to the software. Non-technical computer users may download infected software from questionable websites, which leads to an infection by winantivirusPro. When you visit the website, the user interface has very impressive graphics, but this program does not protect you at all what it actually does it is nothing more than steal your private information. Another way of infection is using a vulnerable PC, without adequate protection or un-patched Windows software or huge security holes in Internet Explorer; this makes your system weak against this pestering software.

WinFixer, WinAntiVirus, WinAntiVirusPro, ErrorSafe, SystemDoctor, WinAntiSpyware, AVSystemCare, WinAntiSpy, Performance Optimizer, StorageProtector, PrivacyProtector and others are very similar computer programs available only for Microsoft Windows that claim to repair computer system problems, but do not actually do so, displaying fake warning/distress alerts with continually annoying flashing icon on your system tray and aggravating pop-up windows messages. Some of the warning messages are "Critical System Error", "Your computer is infected", “Security Alert", "Virus Alert", "Security Alert" or "Spyware.Cyberlog-X". If you observe that your system is infected by this application, or if you are hijacked by an unfamiliar web page called onlinestability.com, then you are in a serious risk of losing your precious data and files to a remote server.

These programs are sometimes installed without the user's consent, usually through Internet Explorer. They display false information about the user's computer, confusing the user into believing that their PC is infected with viruses, spyware, and/or other forms of malware. The advertisements pop up a display with notifications to convince the user that something may be amiss with the computer, or run a fake diagnostic. The program repeatedly prompts the user to purchase a licensed copy of the program. WinFixer and its sister applications claims it "is a useful utility to scan and fix any system, registry and hard drive errors. It ensures system stability and performance, frees wasted hard-drive space and recovers damaged Word, Excel, music and video files", but it has never been shown to do such things. These high-risk applications will affect almost all Microsoft Windows operating system including Windows 95, Windows 98, Windows Me, Windows NT, Windows 2000 (all versions), Windows XP, Windows 2003 Server Editions, and now Microsoft Windows Vista.

The company that makes WinFixer, Winsoftware Ltd., claims to be based in Liverpool, England (Stanley Street, postcode: 13088.) However this address has been proven to be false.

The domain WINFIXER.COM on the whois database, shows it is owned by a void company in Ukraine and another in Warsaw, Poland. According to Alexa Internet the domain is owned by Innovative Marketing, Inc., 1876 Hutson St, Honduras.
According to the public key certificate provided by GTE CyberTrust Solutions, Inc., the server secure.errorsafe.com is operated by ErrorSafe Inc. at 1878 Hutson Street, Belize City, BZ.

WinFixer is closely related to Aurora Network's Nail.exe hijacker/spyware program. In worst-case scenarios, it may embed itself in Internet Explorer and become part of the program, thus being nearly impossible to remove. The program is also closely related to the Vundo and Virtumonde viruses.
Note: The database entry for the Virtumonde Trojan and WinFixer itself are down as of late February 2006); however, a great number of members who are participating in on-line technical support forums and blogs believe WinFixer is associated with the Vundo Trojan.