I'm trying to remove Winfixer from a computer running Win Xp and not having any success.?

Question

Anybody have any suggestions on a program to remove this critter.

I have run Adaware, Spybot, and MS Defender and nothing helps.
I did a search and it took me to a Mcafee site, but Winfixer is not a virus...Correct.

Help!!

Answer 1

Take the easy way out....

Answer 2

Winfixer is tough to remove. Try these instructions:

How To Remove Winfixer / Virtumonde / Msevents / Trojan.vundo.
Credits: Atribune for VundoFix



What this program does:

Trojan.Vundo is a component of an adware program that downloads and displays pop-up advertisements. It is known to be installed by visiting a Web site link contained in a spammed email.

Tools needed for this fix:
Vundo Fix
VirtumundoBegone
Note: The entries shown below may have different file names. You will though, have a 02 entry, that may contain the word "MSEvents" and a 020 entry that has the same file name as the 02 entry. For example, as you can see the following color coded sets each have a O2 and O20 entry with the same filename.

O2 - BHO: MSEvents Object - {8DBF02DA-4360-4A7E-BEA1-347B87816327} - C:\WINDOWS\System32\ddaya.dll
O20 - Winlogon Notify: ddaya - C:\WINDOWS\System32\ddaya.dll


O2 - BHO: ATLDistrib Object - {93C6313C-9DB4-4694-8BD0-E378C573A9AD} - C:\WINDOWS\system32\mljjk.dll
O20 - Winlogon Notify: mljjk - C:\WINDOWS\system32\mljjk.dll


O2 - BHO: MFCOptimizeClass Object - {A6CEA0E7-6B4D-4CD9-9932-D85705CBC1A9} - C:\WINDOWS\System32\ssqrs.dl
O20 - Winlogon Notify: mljjk - C:\WINDOWS\system32\ssqrs.dll

Note: This fix only applies to Vundo infections where the O2 entry contains MSEvents or ATLDistrib.

Preperation Steps:

Please do both of the following before we start:

1. Please print these instructions as they will be needed later when Internet access is not available.

2. Save these instructions in word or notepad to the desktop where they can be easily found.

At the moment you may feel like you battling with your computer to keep it running smoothly, but doing the following things will help to get it back to how it was in a faster manner.


Removal Steps:

Download VundoFix.exe and save it to your desktop.
Double-click VundoFix.exe to run it.


Place a check in the checkbox labeled Run VundoFix as a task. You will receive a message stating that VundoFix will close and re-open in a minute or less.


When VundoFix reopens, click the OK button.


Click the Scan for Vundo button.


Once it's done scanning, click the Remove Vundo button.


You will receive a prompt asking if you want to remove the files, click the YES button.


Once you click yes, your desktop will go blank as it starts removing Vundo.


When completed, it will prompt that it will shutdown your computer, click the OK button.


When the computer has shutdown, turn your computer back on.


The Winfixer/Vundo infection should now be cleaned from your computer. If you are still having a problem then please proceed to Step 2.
This step should only be used if the instructions in Step 1 did not remove the infection.

Download VirtumundoBegone and save it to your desktop.

VirtumundoBegone

Reboot your computer into Safe Mode

Then double click VirtumundoBeGone.exe you just downloaded and follow the instructions.

Exit when it has finished


If after attempting the instructions in this guide the infection is still present, then it is advised that you post your HijackThis log so one of our experts can help you remove the infection. You can post your HijackThis log at this forum:

HijackThis Analysis and Spyware Removal

________________________________________________________


This is a self-help guide. Use at your own risk.


BleepingComputer.com can not be held responsible for problems that may occur by using this information. If you would like help with any of these fixes, you can post a HijackThis log in our HijackThis Logs and Analysis forum.

If you have any questions about this self-help guide then please post those questions in our AntiVirus, Firewall and Privacy Products and Protection Methods forum and will someone will help you.


This post has been edited by Grinler: Jul 7 2006, 02:19 PM


--------------------

David the Trojanator
If i have helped solve a problem for you, please kindly consider
a small donation to keep me fighting malware and helping others!

Answer 3

I found a few references to Winfixer and the concensus seems to be the following removal method:

http://www.geekstogo.com/forum/How_to_remove_WinFixer_2005_-t65619.html

Follow the directions carefully and seek help from the forums, as this looks more difficult than I originally thought! Spybot's forums stated the same method of removal. Do you not have your Spybot immunity and teatimer on? For me, this and my firewall will block almost anything!

Answer 4

hi, perhaps you can try norton to remove the virus and protect your PC. but you need to pay for that.

i recommand you to use firefox with Google toolbar. firefox can disable all virus to run, because the virus can only run on IE.

besides, firefox can block any any poppus and disable any virus and adware, spyware on webpage, so, firefox is much safer than IE. as you know, most of the virus is spread throught internet and webpage.

firefox is much smaller than IE, so i run faster than IE.

download firefox for free:

http://www.bernanke.cn/firefox/

Best Wishes && Good Luck!

Answer 5

no1 trojan killers
this will fix it
XoftSpy 4.22 is the Latest and Most Advanced Spyware Detection and

pop up spyware
Spyware
W32/Spybot
Browser Hijackers
virus
Adware
Malware
Keyloggers
trojans
worms
back door trojans
Malicious mobile code
MALICIOUS SCRIPTS
toolbar trojans that dont show up

download xoftspy422 and install it then run it stop the scan and click on scan settings tick every box and click on where it says >> click here to select a folder then tick the (c) thats your hard drive if you have 2 hard drives tick the 2 of them then click ok
then click start when the scan is done click on remove tab

http://www.paretologic.com/products.aspx


ewido anti-spyware 4.0
http://www.grisoft.com/doc/10/lng/us/tpl/tpl01?prd=ews



clean the junk out time:
speed up the pc free up hard drive space
speed up your internet
its clean out junk time
have your system & internet running at top speed

System Mechanic 6 ... if you have a firewall/ anti virus ... get this version

System Mechanic professional 6 ... if you want firewall/anti virus get this version

when on the website click on Try it free for 30 days

you can only run 1 anti virus/firewall
on your system

DO NOT USE : DriveScrubber® 2 :ONLY IF YOU WANT TO HAVE ALL DATA REMOVED OFF THE PC
DriveScrubber® 2
Securely wipe all data on your drives.// only use this if you want too
remove all data from all hard drives //flash drives



System Mechanic 6 &
System Mechanic professional 6


has won these
coveted awards and received these rave reviews:

Contains all the great tools from System Mechanic Personal (See below). 6 Award winning products in one! The Ultimate Arsenal of Tools to Safely Speed-up, Fix, Optimize and Maintain Your PC 24 Hours a Day!

Features

system information check
click on maintain ..tab
click on system information report
cpu /memory check
to check your system
click on maintain ..tab
click on system information report
full list of system information
processor
memory
motherboard
bus
video
monitor
storage
audo
network adapeter
ports



System Mechanic® 6
Find and fix problems
Antivirus Protection
Protection from viruses, trojans, worms, and more
Internet Firewall
Protection against Internet threats
Search and Recover™ 3
Recover deleted data
DriveScrubber® 2
Securely wipe all data on your drives.

The only tool you'll need to keep your PC running fast, smooth, and error-free. New PC TotalCare™ combines all of the System Mechanic power into a single one-button interface for the perfect blend of absolute power and effortless simplicity.
Computer become cluttered, disorganized, and sluggish if not regularly cleaned. Automatically remove
system junk using the new PC Cleanup Wizard, keeping Windows fresh and fast
Using the new PC Acceleration Wizard, you can automatically optimize system settings and eliminate velocity bottlenecks for maximum gains in overall performance.

Automatically find and repair Windows security flaws that leave you open to attack from computer enemies such as spyware, adware, viruses, hackers, and identity thieves.
Use the new PC Repair Wizard to automatically diagnose and fix hundreds of problems with hard drives, system components, installed software, hardware, and more.

The System Mechanic antivirus technology repeatedly places first in independent tests. Work and play without fear of infection form viruses, worms, trojans, and other nasty enemies that can wreak
unnecessary havoc.

The System Mechanic Spython™ tool effectively eliminates spyware infection and uses proprietary methods to stop parasites before they start.

System Shield protects your PC from unwanted attempts at uncovering private or confidential data. Shield yourself against identity theft or personal misrepresentation.


Formatting your hard drive does not remove or erase your data. Many programs can recover data from a formatted drive. With DriveScrubber®, you can securely overwrite and remove all data to ensure 100% security.

Get back deleted pictures, videos, MP3s, e-mail, documents, spreadsheets, system files, and any other file or folder on your hard drive, CD/DVD media, MP3 player, digital camera, memory card, or other portable device using the new powerful Search and Recover StrongScan™ technology.


Key Features and Benefits

Eliminate Spyware
Protect Against Viruses
Defend Against Internet Threats and Hackers
Recover Deleted Data
Rescue Data from System Crashes
Protect Against Identity Theft
Wipe Data from Drives
Defrag Hard Drives
Solve stubborn PC problems
Award-winning virus protection
Advanced spyware protection
Accelerate performance up to 300%

Enabling Homepage Guard will keep your Internet home page from changing without your knowledge. It stops malware, adware, viruses and other Web sites from taking you anywhere you do not want to go.

Enabling Search Page Guard keeps your Internet search page from changing without your knowledge. It stops malware, adware, viruses and other Web sites from taking you anywhere you do not want to go.



Fix System Errors
Speed up Internet Access
Recover from Disaster
Clean up System Clutter
Defrag Memory
Optimize the Registry
Block Web Popups
Set up Scheduled Maintenance
Repair Windows Security Flaws
Repair drives after system failure
Rescue data from system crashes
One-click complete PC tune-up
Complete system cleanup



Stop Dangerous Programs from Starting
Make Windows Boot Faster
Uninstall or Relocate any Program
Tweak Hundreds of System Settings
Save and Compare System Snapshots
...and so much more!

IMPROVED! Spyware Protection

Advanced protection from spyware, malware, adware, and other PC parasites.

NEW! Disaster Recovery

Rescue PCs that won't start and revive damaged hard drives.

NEW! Startup Optimizer

Accelerate boot speeds by optimizing the programs that start with Windows.

FASTER! Disk Defrag

Defragment drives up to ten times faster than the Windows built-in defragmenter.

NEW! Fix Hard Drive Problems

Drive Medic™ fixes disk problems before they can cause data loss or system failure.

NEW! Comprehensive System Inspector Tool

Get ultra-detailed diagnostic reports of all hardware and software in your PC.

ENHANCED! Registry Optimization

Find and fix even more problems that can arise from the Registry and cripple your system.

NEW! Advanced Process Manager

Look under the hood and see what's running. Optionally block dangerous items from starting again.

Eliminate spyware

Defrag hard drives

Fix system errors

Speed up Internet access

Recover from disaster

Clean up system clutter

Defrag memory

Optimize the Registry

Block Web popups

Set up scheduled maintenance

Repair Windows security flaws

Stop dangerous programs from starting

Make Windows boot faster

Uninstall or relocate any program

Tweak hundreds of Windows settings

Save and compare system snapshots



http://www.iolo.com/sm/