Saturday, November 26, 2005

Winfixer 2005 pop up problem ( and now, WinAntivirusPro 2006)

Lately my computer is having this annoying popup problem - Winfixer 2005. Cannot get rid of it with my spybot remover. The google popup blocker cannot block it either. Try to use ad-aware software, but need to purchase it to use it. Can anyone help out here?!!?


My HiJackThis Logs is at the following Link

http://www.geekstogo.com/forum/index.php?showtopic=81358

13 comments:

Chien Chien said...

Winfexer.... Well Pete, that's some nasty bug you got there. The removal process, depending on how many other adwares you have, can be fairly complex and sometimes very frustrating. Uusually, by the time you actually see the popups, adwares have already build a considerable stronghold in you computer. Programs like Spybot or adware removal can only remove about 70% of of the adwares, and you can be asure that the remaining 30% won't go without a fight. Follow these two links

http://www.geekstogo.com/forum/You_Must_Read_This_Before_Posting_A_Hijackthis_Log-t2852.html
and
http://www.geekstogo.com/forum/index.php?showtopic=74184

The first gives you a brief overview of the programs that you can use, plus some preliminary steps to take before you actually perform a registry scan.
The second link takes you to a message thread on how to remove winfixer from your computer. Take heed about using the program Hijackthis.
Also, if you want, bring the computer to Alex's house tonight and let me take a look at it.

eatgod said...

my lord...
I tried all the things they suggested.. It is so LONG!!

I sent them the hijacklog.

do you know how to interpret the log?

Anonymous said...

too many trouble..

some options:

1) uninstall I.E and reinstall it again (might not help since registry may stays in your PC)
2) backup your data to CD/DVD Roms and reinstall Windows XP with SP2.
when do you that, make sure you make at least 2 partitions for your HD. C & D. so this way you won't need to backup your stuff again in the future if you decide to reinsall/change operating system. everything saved in D drive will remain untouched.
3) use Firefox. It's a very popular free browser.

http://www.mozilla.org/products/firefox/

Anonymous said...

Please download VundoFix.exe to your desktop.

* Double-click VundoFix.exe to extract the files
* This will create a VundoFix folder on your desktop.
* After the files are extracted, please reboot your computer into Safe Mode. You can do this by restarting your computer and continually tapping the F8 key until a menu appears. Use your up arrow key to highlight Safe Mode then hit enter.
* Once in safe mode open the VundoFix folder and doubleclick on KillVundo.bat
* You will first be presented with a warning.
It should look like this
QUOTE
VundoFix V2.15 by Atri
By using VundoFix you agree that you are doing so at your own risk
Press enter to continue....


* At this point press enter one time.
* Next you will see:
QUOTE
Please Type in the filepath as instructed by the forum staff
and then press enter:

* At this point please type the following file path (make sure to enter it exactly as below!):

C:\WINDOWS\system32\qopon.dll


* Press Enter to continue with the fix.
* Next you will see:
QUOTE
Please type in the second filepath as instructed by the forum
staff then press enter:
* At this point please type the following file path (make sure to enter it exactly as below!):

C:\WINDOWS\system32\nopoq.*
* Press Enter to continue with the fix.
* The fix will run then HijackThis will open. If it does not open automatically please open it manually.
* In HiJackThis, please place a check next to the following items and click FIX CHECKED:


O2 - BHO: MSEvents Object - {CE70731D-F28D-4D81-9D61-C8EE60378401} - C:\WINDOWS\system32\qopon.dll
O16 - DPF: {3A7FE611-1994-4EF1-A09F-99456752289D} - http://install.wildtangent.com/ActiveLaunc...iveLauncher.cab
O20 - Winlogon Notify: imgrun - C:\WINDOWS\
O20 - Winlogon Notify: qopon - C:\WINDOWS\system32\qopon.dll

* After you have fixed these items, close Hijackthis.
* Press enter to exit the program then manually reboot your computer.
* Once your machine reboots please continue with the instructions below.

Download and install CleanUp!

Open Cleanup! by double-clicking the icon on your desktop (or from the Start > All Programs menu).
Set the program up as follows:
Click "Options..."
Move the arrow down to "Custom CleanUp!"
Put a check next to the following (Make sure nothing else is checked!):

* Empty Recycle Bins
* Delete Cookies
* Delete Prefetch files
* Cleanup! All Users

Click OK
Press the CleanUp! button to start the program.

It may ask you to reboot at the end, click NO.

Then, please run this online virus scan: ActiveScan

Copy the results of the ActiveScan and paste them here along with a new HiJackThis log and the vundofix.txt file from the vundofix folder into this topic.

eatgod said...

Thanks for all the helps.
to the second anonymous person, did you read my hijackthis log then come up the solution, or just cut and paste other people's solution??

Anonymous said...

hi big bro Peter,
Thanks for the comments on my msn thing. i just get tat once in a while. i m ok. yea,i m pretty comfy in the tc group, although i dont say much.
thanks again. =p
Jen

Anonymous said...

Hey bro!

You can download Ad-aware on this website

http://www.majorgeeks.com/download506.html


Angela

eatgod said...

Thanks again for all the info. I think I can almost get rid of it now.

Anonymous said...

so did you get the Mac?

eatgod said...

did not get the imac yet.

man.. this popup bullshit took me so much time.

whoever invented this winfixer crap should get his penis chopped off.

Actually, if you really hate someone, just install this winfixer thing on their computer.

IChiban said...

I guess you are having a huge issue. u cant even blog anymore.

IChiban said...

I guess you are having a huge issue. u cant even blog anymore.

Anonymous said...

he can still blog at work