Winfixer - followed all instructions but still there

Discussion in 'Malware Help (A Specialist Will Reply)' started by tyty, Mar 9, 2006.

  1. tyty

    tyty Private E-2

    I read the tutorial, downloaded all the programs, ran them in safe mode and the results turned up nothing. I'm attaching my hijack log file.

    PLEASE help...sometimes this malware redirects my webpage to a sight where I can purchase a "fix" for the problem and other times my webpage comes up as several porn sites.

    Thanks in advance!
     

    Attached Files:

  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You must follow all steps in the READ and RUN ME. You have skip steps. In particular
    - step 3
    - you did not install & run MS Windows Defender
    - step 6
    - step 7 ( you did not follow the directions for installing)
    - also you did not click the Special Removal Procedures link that appears in the READ ME in a couple places and it even tells you to do so for WinFixer.

    Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

    - Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

    Downloading, Installing, and Running HijackThis


    When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too (these scans are covered in steps 6 & 7 of the READ & RUN ME sticky)
    • Bitdefender
    • Panda Scan
    • HijackThis
    .
     
  3. tyty

    tyty Private E-2

    Step 3 - I have tried and tried to uninstall McAfee but it tells me I have to uninstall all services before it will completely uninstall, but I can't find anythign else to turn off. I just disable the icon on the taskbar....

    I downloaded MS Windows Definder but was unable to install it due to an error message telling me my version of Windows was "unverifiable."

    Step 6 - I did online scans - Bitdefinder and PandaScan - both turned up nothing.

    I've changed the location of Hijack this and rerun.

    I did download/install/run the vundofix, which also turned up nothing.

    The entire time I was doing all of this in safe mode, my desktop kept on disappearing and I kept on having to go to "new task" and type in explorer.exe...sometimes it worked but most of the time it just flickered on for a minute and disappeared.

    I'm sorry I seem to be so inept.
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Hmmm! Illegal copy of Windows???

    According to your HJT log you may have run Panda but you did not run BitDefender. I also find it unlikely that they found nothing. You have a Virtumonde infection and Panda always seems to find these. Run both scans and attach the logs.

    Seems unlike too! But I cannot say it is impossible. Run it again from normal boot mode and follow the directions. If you do not attach the log, we cannot help you.
     
  5. tyty

    tyty Private E-2

    I reran Pandascan and it did catch the virtumondo spyware. I downloaded the fix from this website and it returned nothing. I even downloaded the fix from Symantec and IT didn't find it either. I can SEE it on the panda log.

    Also, still when I run in safe the mode the screen stays dark no matter how many times I try to run explorer.exe. It flickers and shows me the safe mode warning again but then the screen remains black.

    i'm frustrated and still getting redirected.
     
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    If you do not follow our directions it is rather difficult to help you.

    You MUST attach the logs from:
    Bitdefender
    PandaActiveScan
    VundoFix

    and then attach a new HJT log that was run after completing all the steps in the READ & RUN ME.

    Note the Symantec Tool has always been a total waste of time at fixining Vundo infections.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds