UltimateFixer

Printer Friendly Page

Updated: October 1, 2007 4:22:42 AM

Type: Misleading Application

Name: SmartFixer

Version: 2007

Publisher: UFixer.com

Risk Impact: Medium

Systems Affected: Windows 98, Windows 95, Windows XP, Windows Me, Windows Vista, Windows NT, Windows Server 2003, Windows 2000

Behavior
This misleading application must be manually downloaded and installed.

Installation
When the program is executed, it creates the following folders:

%UserProfile%\Application Data\Ultimate Fixer
%ProgramFiles%\UltimateFixer 2007
%ProgramFiles%\Ultimate Fixer

It then creates the following files:

%UserProfile%\Application Data\Ultimate Fixer\settings.dat
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Start UltimateFixer 2007.lnk
%UserProfile%\Desktop\UltimateFixer 2007.lnk
%ProgramFiles%\UltimateFixer 2007\Register UltimateFixer 2007.lnk
%ProgramFiles%\UltimateFixer 2007\Start UltimateFixer 2007.lnk
%ProgramFiles%\UltimateFixer 2007\Uninstall UltimateFixer 2007.lnk
%ProgramFiles%\Ultimate Fixer\program.info
%ProgramFiles%\Ultimate Fixer\ufixer.pkg
%ProgramFiles%\Ultimate Fixer\UltimateFixer.db
%ProgramFiles%\Ultimate Fixer\UltimateFixer.exe
%ProgramFiles%\Ultimate Fixer\Uninstall.exe

The program then creates the following registry entry so that it runs everytime Windows starts:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"Ultimate Fixer" = ""%ProgramFiles%\Ultimate Fixer\UltimateFixer.exe" hide"

Next the program creates the following registry subkeys:

HKEY_ALL_USERS\Software\Ultimate Fixer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ultimate Fixer
HKEY_LOCAL_MACHINE\SOFTWARE\Ultimate Fixer

Removal

Summary

Search Threats

Search by name

_{Example: W32.Beagle.AG@mm}