WiniFighter Description

WiniFighter is an illicit security program designed to extort money from you through devious actions. WiniFighter may come from a Trojan infection or malicious website which could automatically install WiniFighter without your permission. Once installed, WiniFighter is able to redirect you to other malicious sites, popup up fake windows security center alerts and scan your system returning bogus results.

WiniFighter is not effective in detection or removal of any computer parasite. Use of WiniFighter is risky and may cause damage to your system rendering it unstable.

Type: Rogue AntiSpyware Programs

Automatic Detection of WiniFighter

WiniFighter Technical Report

As new WiniFighter details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following WiniFighter files with its MD5s were created in the system:

WiniFighter has typically the following processes in memory:

• C:\windows\\system32\c9d5hrza94083.dll
• C:\program files\winifighter software\\winifighter\WiniFighter.exe
• WiniFighterSvc.exe
• C:\WINDOWS\\system32\setup2.exe
• WiniFighter.exe

WiniFighter created the following directories, files, paths:

• %AllUsersProfile%\Start Menu\Programs\WiniFighter
• %ProgramFiles%\WiniFighter Software\WiniFighter

WiniFighter creates the following registry entries:

• WiniFighter
• %UserProfile%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “WiniFighter”

Important Article Disclaimer