Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 269
  • Last Modified:

Can't get rid of of Winfixer popups

I have a Win2k machine at home and I got Winfixer ads popping up all the time. I have tried everything I can find on the web to get rid of it and nothing works. Any suggestions?
0
DannyLeeSquibb
Asked:
DannyLeeSquibb
  • 4
  • 4
  • 2
  • +4
4 Solutions
 
kevwitCommented:
What specifically have you tried so far?  Ad-ware, Hijack This, ????

Thanks,

kevwit
0
 
DannyLeeSquibbAuthor Commented:
Too much to remember. I have tried Ad-aware, Spybot S&D, Hijack This, Vundo Fix, ccsetup, ewido. It has been a few months since I have messed with it, so I don't remember that much. I got too frustrated with trying to remove it and needed a break, but I am ready to take another stab at it now.
0
 
Will SzymkowskiSenior Solution ArchitectCommented:
What I would suggest to you is go to the Microsoft website and download "Windows Defender" and also go to www.download.com and get Adaware SE Personal and Spybot Search & Destroy. Run those programs and it should remove any unwanted threats on your computer.


Hope this helps
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
DannyLeeSquibbAuthor Commented:
kevwit, Hijack This says to look for 02-BHO, but the only this that exist under them are Google Toolbar, Ebay Toolbar,and Acrobat Reader - never the ones they say to look for. The Vundo Fix tool never finds anything.
0
 
kevwitCommented:
It comes down to finding the offending dll files and registry entries.  Look in the registry under HKeyLocalMachine/software/microsoft/windows/run and runonce.  Make sure all items are ok that are running on startup.  Then i usually start by going through all the processes in taskmanager.  Use google to search for any that look sceptical.  It will tell you if they are valid or not.  That will lead to finding the offending .exe and .dll files we will need to delete in safe mode.
0
 
rpggamergirlCommented:
Just let us see your Hijackthis log, we should be able to tell you what tool you need to run to fix the problem.(malware entries normally appear in the log)

paste your Hijackthis log at --> http://www.rafb.net/paste/
then at the bottom left corner click "paste"
Copy the address/url and post it here:

Or copy and paste the log at;
http://www.hijackthis.de/ 
and click "Analyse", "Save".  Post a link to the saved list here.
0
 
rpggamergirlCommented:
Have this file checked at jotti's to make sure it's clean --> http://virusscan.jotti.org/
C:\WINNT\system32\mtpsmgr.exe
paste the above path in the "File to upload" box and click "Submit" and wait for the result.


Only 2 bad entries that I can see, fix these:
O16 - DPF: {42F2C9BA-614F-47C0-B3E3-ECFD34EED658} (Installer Class) - http://www.tbcode.com/ist/softwares/v4.0/ysb_regular.cab 
O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} (cpbrkpie Control) - http://a19.g.akamai.net/7/19/7125/4021/ftp.coupons.com/v3123/cpbrkpie.cab 


Not sure what triggers "winfixer" popups here.(it's not showing in the log, sometimes it happens)
Check to see if Winfixer 2005 or 2006 is listed in Add/Remove programs list.
Clean up all your Temporary Internet files folder and temp folder, nasties might be lurking there.

CleanUp:
http://www.stevengould.org/software/cleanup/download.html

CCleaner:
http://www.stevengould.org/software/cleanup/download.html

Have you tried Ewido in Safe Mode?
Download and install the free version of Ewido anti-malware.
http://www.ewido.net/en/download/
Update first then scan in safe mode.

We could run more diagnostic tools to dig deeper.
0
 
kevwitCommented:
rpggamergirl is right on
0
 
DannyLeeSquibbAuthor Commented:
I checked the file at jotti.org - it was clean. I deleted the two entries in Hickjack This and there is no WinFixer in the Add/Remove programs. The problem still persists. I plan on doing the rest of your suggestions when I get home tonight - thanks.
0
 
ramc2cCommented:
Here is the useful information on removal of Winfixer provided by Symantec:

http://www.symantec.com/avcenter/venc/data/winfixer.html 

Hope this helps.
0
 
Brian LowranceNetwork AdministratorCommented:
I used this website last week and it worked like a charm to remove the annoying WinFixer popups.
http://www.help2go.com/Tutorials/Spyware_Information/Winfixer_Removal.html

8 simple steps to follow.
I recommend you print it out and check each item off as you do it.

This step-by-step instructs you to download HiJackThis.  You can download using this link: http://216.180.233.162/~merijn/files/HijackThis.exe  or  http://www.merijn.org/files/hijackthis.zip


0
 
adamtodd16Commented:
I have had a number of issues removing WinFixer, PSGuard, Spy Falcon, Spy Sheriff, etc. Most of the supported tools available at the moment appear to be completely useless most of the time. The one program I have found that works about 90% of the time is called SmitRem. It is not supported, but it has always worked wonders for me. Check it out!

http://noahdfear.geekstogo.com/
0

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

  • 4
  • 4
  • 2
  • +4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now