Warning

 

Close
Confirm Action

Are you sure you wish to do this?

Cancel Confirm
AR15.COM
11/13/2005 8:49:42 AM EDT
Was surfing on the in-laws almost brand new dell and it was dragging ass.  Downloaded spybot and adaware and cleaned off tons of crap.  There's one I can't get rid of though.  It's called winfixer.  It keeps popping up windows wanting me to download something and closes all of the other windows.  Everytime I do a spyware clean it says it cleans it off.  I redo the scan, it's there again. My brother-in-law downloaded some online poker thing, is that the problem?  I deleted it but the winfixer is still there.

Any suggestions?
11/13/2005 8:54:18 AM EDT
[#1]
Just finished another adaware scan.  It keeps coming up with the same 5 critical registry entries.  They are all called virtumonde.  Adaware list it as malware.  What is that?
11/13/2005 8:55:28 AM EDT
[#2]
I had the same problem.  I used this download yesterday & I think I got it.

www.xoftspy.com/
11/13/2005 9:00:57 AM EDT
[#3]

Quoted:
I had the same problem.  I used this download yesterday & I think I got it.

www.xoftspy.com/



They want money.  Is there a free one out there that will clean this off?
11/13/2005 9:04:10 AM EDT
[#4]
Try this


http://forums.spywareinfo.com/index.php?showtopic=61264&hl=winfixer
11/13/2005 9:12:26 AM EDT
[#5]

Quoted:
My brother-in-law downloaded some online poker thing, is that the problem?  I deleted it but the winfixer is still there.


Yep, the viruses, adware, and malware was probably hidden in that software, and someone gave it authorization to install on your computer, that is probably what caused it.  Be double-sure that you download anything that it is absolutely trustworthy.  My daughter downloaded an MP3 file conversion utility to convert to WMA files.  We got the Cool Search virus instead.  It took us weeks to get rid of it.  Don't leave virus' on your computer thinking that they are benign, many of them have keystroke loggers and will reveal confidential info to unsavory people.
11/13/2005 9:12:35 AM EDT
[#6]
The free Housecall virus scan now has adware capabilities.

It saved my ass last week at work.
11/13/2005 9:20:47 AM EDT
[#7]
You could try this. Saved my ass from a downloader virus.

www.anti-spy.info/
11/13/2005 9:36:08 AM EDT
[#8]
This one ROCKS, you need to know a bit on using it, but they have great help on the site and hints:

www.neuber.com/taskmanager/index.html

Security Task Manager

Finds processes that adaware and spybot might overlook as "User installed apps".
11/13/2005 9:52:14 AM EDT
[#9]
Security Task Manager also has a "Quarantine" option, which will disable a program/service from automatically restarting, plus it finds "hidden" processes.  I highly recommend it for when you have problems AFTER running Spybot S&D and AdAware.

You might also want to try out Microsoft AnitSpyware.  Go to windowsupdate.com, get all of your updates, then search for "antispyware" and install that.
11/13/2005 10:56:47 AM EDT
[#10]
xblock

a squared

hijackfree

stinger


spywareinfo.com

spyware rogue

11/13/2005 10:59:04 AM EDT
[#11]
spybot and adaware are really crappy now compared to newer programs. The microsoft antispyware does a pretty fair job of keeping a computer usable. It's free from microsoft.com, no worries with trial periods or anything.
11/13/2005 11:10:56 AM EDT
[#12]

Quoted:
spybot and adaware are really crappy now compared to newer programs. The microsoft antispyware does a pretty fair job of keeping a computer usable. It's free from microsoft.com, no worries with trial periods or anything.



I just downloaded that.  It seems pretty good.  Running a second scan now to see if it really cleaned it all off.  It has some nice cleaning features in advanced tools too.  
11/13/2005 11:26:59 AM EDT
[#13]
Get a Mac.
11/13/2005 11:33:18 AM EDT
[#14]

Quoted:
Get a Mac.



11/13/2005 11:50:00 AM EDT
[#15]
It's still there.  Seems to be duplicating itself.  Was originally at 5 entries, last clean found 31.
11/13/2005 2:09:39 PM EDT
[#16]
trendmicro antispyware

hijackthis.de         click direct download

post WITH A LOG FILe and then paste it  into the home page and it will tell you what to remove



USE AT YOUR OWN RISK
11/13/2005 2:10:09 PM EDT
[#17]

Quoted:
It's still there.  Seems to be duplicating itself.  Was originally at 5 entries, last clean found 31.



That means the process is still running.  Run the process explorer above and quarantine it.  The program will show you which files it is using, and you can narrow it down quick.