Can't get rid of of Winfixer popups

I have a Win2k machine at home and I got Winfixer ads popping up all the time. I have tried everything I can find on the web to get rid of it and nothing works. Any suggestions?
DannyLeeSquibbAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

kevwitData Science Solutions ManagerCommented:
What specifically have you tried so far?  Ad-ware, Hijack This, ????

Thanks,

kevwit
0
DannyLeeSquibbAuthor Commented:
Too much to remember. I have tried Ad-aware, Spybot S&D, Hijack This, Vundo Fix, ccsetup, ewido. It has been a few months since I have messed with it, so I don't remember that much. I got too frustrated with trying to remove it and needed a break, but I am ready to take another stab at it now.
0
Will SzymkowskiSenior Solution ArchitectCommented:
What I would suggest to you is go to the Microsoft website and download "Windows Defender" and also go to www.download.com and get Adaware SE Personal and Spybot Search & Destroy. Run those programs and it should remove any unwanted threats on your computer.


Hope this helps
0
How do you know if your security is working?

Protecting your business doesn’t have to mean sifting through endless alerts and notifications. With WatchGuard Total Security Suite, you can feel confident that your business is secure, meaning you can get back to the things that have been sitting on your to-do list.

kevwitData Science Solutions ManagerCommented:
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
DannyLeeSquibbAuthor Commented:
kevwit, Hijack This says to look for 02-BHO, but the only this that exist under them are Google Toolbar, Ebay Toolbar,and Acrobat Reader - never the ones they say to look for. The Vundo Fix tool never finds anything.
0
kevwitData Science Solutions ManagerCommented:
It comes down to finding the offending dll files and registry entries.  Look in the registry under HKeyLocalMachine/software/microsoft/windows/run and runonce.  Make sure all items are ok that are running on startup.  Then i usually start by going through all the processes in taskmanager.  Use google to search for any that look sceptical.  It will tell you if they are valid or not.  That will lead to finding the offending .exe and .dll files we will need to delete in safe mode.
0
rpggamergirlCommented:
Just let us see your Hijackthis log, we should be able to tell you what tool you need to run to fix the problem.(malware entries normally appear in the log)

paste your Hijackthis log at --> http://www.rafb.net/paste/
then at the bottom left corner click "paste"
Copy the address/url and post it here:

Or copy and paste the log at;
http://www.hijackthis.de/ 
and click "Analyse", "Save".  Post a link to the saved list here.
0
rpggamergirlCommented:
Have this file checked at jotti's to make sure it's clean --> http://virusscan.jotti.org/
C:\WINNT\system32\mtpsmgr.exe
paste the above path in the "File to upload" box and click "Submit" and wait for the result.


Only 2 bad entries that I can see, fix these:
O16 - DPF: {42F2C9BA-614F-47C0-B3E3-ECFD34EED658} (Installer Class) - http://www.tbcode.com/ist/softwares/v4.0/ysb_regular.cab 
O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} (cpbrkpie Control) - http://a19.g.akamai.net/7/19/7125/4021/ftp.coupons.com/v3123/cpbrkpie.cab 


Not sure what triggers "winfixer" popups here.(it's not showing in the log, sometimes it happens)
Check to see if Winfixer 2005 or 2006 is listed in Add/Remove programs list.
Clean up all your Temporary Internet files folder and temp folder, nasties might be lurking there.

CleanUp:
http://www.stevengould.org/software/cleanup/download.html

CCleaner:
http://www.stevengould.org/software/cleanup/download.html

Have you tried Ewido in Safe Mode?
Download and install the free version of Ewido anti-malware.
http://www.ewido.net/en/download/
Update first then scan in safe mode.

We could run more diagnostic tools to dig deeper.
0
kevwitData Science Solutions ManagerCommented:
rpggamergirl is right on
0
DannyLeeSquibbAuthor Commented:
I checked the file at jotti.org - it was clean. I deleted the two entries in Hickjack This and there is no WinFixer in the Add/Remove programs. The problem still persists. I plan on doing the rest of your suggestions when I get home tonight - thanks.
0
ramc2cCommented:
Here is the useful information on removal of Winfixer provided by Symantec:

http://www.symantec.com/avcenter/venc/data/winfixer.html 

Hope this helps.
0
Brian LowranceNetwork AdministratorCommented:
I used this website last week and it worked like a charm to remove the annoying WinFixer popups.
http://www.help2go.com/Tutorials/Spyware_Information/Winfixer_Removal.html

8 simple steps to follow.
I recommend you print it out and check each item off as you do it.

This step-by-step instructs you to download HiJackThis.  You can download using this link: http://216.180.233.162/~merijn/files/HijackThis.exe  or  http://www.merijn.org/files/hijackthis.zip


0
adamtodd16Commented:
I have had a number of issues removing WinFixer, PSGuard, Spy Falcon, Spy Sheriff, etc. Most of the supported tools available at the moment appear to be completely useless most of the time. The one program I have found that works about 90% of the time is called SmitRem. It is not supported, but it has always worked wonders for me. Check it out!

http://noahdfear.geekstogo.com/
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Security

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.