Re: WinFixer 2005





"David H. Lipman" wrote:

> From: "kuehnel trading" <kuehnel trading@xxxxxxxxxxxxxxxxxxxxxxxxx>
>
> |
> | 1. Go to add/remove programs and remove any programs that resemble ad/spyware.
> |
> | 2. Run Lavasoft's Ad ware remover
> | http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022_4-10399602.html?tag=lst-0-1
> | it should find or recogize about 4 processes that Winfixer requires to
> | run. I believe it's Side bar Buddy, Alexa, CCrs and another I forget.
> |
> | 3. Run msconfig and find the listing for winfixer or winsoftware in the
> | startup folder. Check in windows explorer for the about name folders also and
> | delete them.
> |
> | 4. Reboot
> |
> | **Disclaimer: Not responsible for any damage to computer for advice given.
> | To the best of my knowledge the above steps are that I did to remove that
> | silly program. No more pop up window at bootup or pop up in general. Hope it
> | helps.
> | I tend to remember this process fixing my compuer
>
> If that's what you did, you are still infected.
>
> WinFixer 2005 is associated with the Vundo Trojan and Adware-Virtumundo and can be
> auto-installed via a downloader Trojan.
>
> Two phase answer...
>
> Perform Part 1 the perform part 2
>
> Part 1
> ------------
> Download Adware-Virtumundo Removal Tool v1.5 --
> http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe
>
> Information on the Adware-Virtumundo Removal Tool:
> http://forums.mcafeehelp.com/viewtopic.php?t=57049
>
> Part 2
> ------------
> Download WinFixerFix.exe from the URL --
> http://www.ik-cs.com/programs/virtools/WinFixerFix.exe
>
> Execute; WinFixerFix.exe { Note: You must accept the default of C:\McAfee }
> Choose; Unzip
> Choose; Close
>
> NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
> FireWall to enable WGET.EXE to download the needed McAfee related files.
>
> Execute; c:\mcafee\clean.bat
> { or Double-click on 'Clean Link' in c:\mcafee }
>
> A final report in HTML format called C:\mcafee\ScanReport.HTML will be generated. At the
> end of the scan, it will be displayed in your browser (Opera, FireFox or Internet Explorer).
> It is suggested that you move the report out of c:\mcafee before performing another scan.
> It would be a good idea to scan in Safe Mode and in Normal Mode and save a copy of the HTML
> report for each session.
>
> * * * Please report back your results * * *
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
> Sounds good Dave! Yes, I've not had or seen any of the annoying problems I had for a day or so after I did MY procedure. But, I'll implement or other two suggestions just to make sure and save in my bible of tech tips myself. Thanks for the extra suggestions. I hope Sherri is error free without having to do a hard drive reformat and re-install which is a LAST resort option.
.



Relevant Pages

  • Re: adware/spyware removal
    ... FireWall to enable WGET.EXE to download the needed McAfee related files. ... On Win9x/ME platforms the report will not be shown in your bowser ... It would be best to scan in both Safe Mode and in Normal Mode and save a copy of the HTML ...
    (microsoft.public.windowsxp.security_admin)
  • Re: WinFixer 2005
    ... Run msconfig and find the listing for winfixer or winsoftware in the ... Download Adware-Virtumundo Removal Tool v1.5 -- ... Information on the Adware-Virtumundo Removal Tool: ... It is suggested that you move the report out of c:\mcafee before performing another scan. ...
    (microsoft.public.security.virus)
  • Re: Anti Spyware Beta
    ... Download Adware-Virtumundo Removal Tool v1.5 -- ... It is suggested that you move the report out of c:\mcafee before performing another scan. ... It would be a good idea to scan in Safe Mode and in Normal Mode and save a copy of the HTML ...
    (microsoft.public.security.virus)
  • Re: trojan vundo in system 32
    ... I ask that you download the updated version of WinFixerFix again and use it once again. ... It is suggested that you move the report out of c:\mcafee before performing another scan. ... It would be a good idea to scan in Safe Mode and in Normal Mode and save a copy of the HTML ...
    (microsoft.public.windowsxp.security_admin)