Threat description


Category: Spyware
Type: Rogue
Platform: W32


Winfixer is an application that is installed by drive-by downloads and ActiveX installations. The program starts automatically at boot-up and presents the user with multiple dialogs stating that a full license should be purchased to remove problems it has found.


Automatic action

Depending on the settings of your F-Secure security product, it will either automatically delete, quarantine or rename the suspect file, or ask you for a desired action.

More scanning & removal options

More information on the scanning and removal options available in your F-Secure product can be found in the Help Center.

You may also refer to the Knowledge Base on the F-Secure Community site for more information.

Contact Support

F-Secure customers can request support online via the Request support or the Chat forms on our Home - Global site.

Technical Details

Winfixer, made by Winsoftware, is an application to fix problems in Windows. It is mainly installed by drive-by downloads and ActiveX installations. There are also reported cases where Winfixer has been installed by trojans. Winfixer doesn't offer the trial version on their website, it can only be purchased from there.

The software runs automatically and starts up each time the operating system starts. Scan is issued automatically to maximize visualisation to users who have received the trial version. The program detects an excessive amount of false errors and employs scare tactics with questions to the user asking if they want to keep the errors or purchase the full version of the software.

Winsoftware seems to be affiliated with another company called Vantage Software who, despite claims to be headquartered in Croydon, England, registers their website in Chile and hosts their website on servers in Canada. ErrorSafe and WinAntiSpy are two other companies who have re-branded Winfixer and offer it for sale on their sites. Winfixer can also be found localized in languages other than English.

Please also see the description for Zlob for additional details and a removal tool.

Description Created: 2006-04-20 00:00:00.0

Description Last Modified: 2007-10-15 10:59:26.0


Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Sample

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More