Removing Winfixer Popups - Comments Page 2

How would i do a sytem restor point?

WinFixer 2005 should be held accountable for all the pain, discomfort, misery, financial expences and waisted time folks have had to endure due their invasion of privacy! They have forced something upon us we did not ask for and therefore should be held accountable. I think everyone should contact the media such as described in another letter I read here. Start complaining loudly! They don't own the internet we do...without us there wouldn't even be an internet! Congress people CAN YOU HEAR US !? DO SOMETHING!

SPY SWEEPER!!!!! I wish I had found this post early this morning. The $29.99 then would have saved me a bundle compared to the hours I spent looking for a fix from MS, Norton and the likes. Installed easily in minutes and ran down and killed not only the WinFixer, but a bunch of other junk I didn't even know I had. Simple to use too!

I finally got rid of Winfixer for good, thanks to reading Rob's November 20 post mentioned above. And, at the same time, I also my anti-span/anti-virus finally says I have a clean machine again (I didn't even know the two were related!) Thank you Rob! Thank you Techguy! I am also going to send Techguy a donation.

Hi- after reading Rob's post, I used the link above and for the first time in eons, Winfixer did not pop up when I went to my home page.

It has a really scary disclaimer and in my case resulted in a fatal error causing me to do a forced shut down, but everything came up okay afterwards. So other than the heart palpitations and cold sweat, life seems good. :-)

http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe

Its free and worth a try, since Spybot, McCaffee, Microst updates and Xoft didn't work for me.

Hi: I was having problem with tbe Winfixer, for last two weeks. After Restoring the system got rid of the problem.
Many of the readers asked about how to do the System Restore. The steps are as follows: Click on "Start", then click on "Control Panel". Then click on "Performance and Maintenace", then click on "System Restore" at left. Select "Restore my computer to an earlier time" and click on "next". The "Select a Restore Point" menu will pop-up with the calender of the latest month. Restore point dates will be with bold text. Select a date before the Winfixer problem started. To select a date for previous month, click on back arrow key next to the month. After selecting the date click on "next". Windows will complete the Restore operation and hopefully your problem will be gone. If the problem persist, then Restore to an earlier date, definitely your problem will go away.

I've got the same WinFixer problem and also had the Vundo virus that was eradicated by Adaware only AFTER I uninstalled Norton. It was hiding in Norton. I installed McAfee and Vundo is not coming up on the scans of the system, but I still have the WinFixer. I'm afraid to do a system restore for fear it might delete some important documents hubby wrote in Word. Does anyone know if those would be safe? I think I'll check out Rob's suggestion at Techguy. Oh...in my research for this WinFixer thing, I found something that correlates the HalfLife software to this. You have to have internet connection with this version and I'm wondering it we didn't get it when we installed this. Anyone else with the WinFixer problem have HalfLife 2 on their system?

EDITOR'S NOTE: System Restore will not remove or change your personal data files (Word documents, e–mails, etc.).

Thanks to your site I did download Spysweeper, available from Webroot, last night. Immediate fix and I am sailing through the internet again. Worked so well I immediately ordered a 2 year subscription. Thanks for the help, I had spent in excess of 20 hrs over the last month attempting to rid my system of Winfixer and probably some other unidentified trash programs. Restore had not worked for me.

PEST PATROL DOES NOT WORK! PURCHASED THIS PRODUCT.. IT DOESN'T EVEN DETECT WINFIXER..

I have Xoftspy 4.21 (the newest I believe) and it looks like it includes a vundo removal tool. When it detects the Vundo trojan, and you proceed to remove it, a cmd prompt opens and explains that it will search for several threats. In my case, it didn't detect anything except for the Conhook trojan. Upon reboot, I also ran the virtumundobegone.exe tool which didn't tell me a whole lot other than it was going to shutdown my machine. After the reboot, I THINK my winfixer popups are gone...I'm keeping my fingers crossed...

Download HijackThis.exe and VirtumundoBeGone.exe.
Then run hijackthis; it should show your trojan as (02) BHO: (program name) and (20)Winlogin Notify (program name). Close and boot into safe mode (F8). Run Virtumundobegone.exe, it should kill all entries that have to do w/ this trojan. It will more than likley re-boot your computer. When it boots back up re-run hijackthis and those two entries should be gone. Worked for me.

EDITOR'S NOTE: That does seem to zap some/most instances of Winfixer. But I would recommend using X-Ray PC instead of HijackThis. X-Ray was designed as a replacement for HJT, works great, and is super easy to use.

Hi i bought Spy Sweeper.. and it certainly does seem to detect problems early and exlain it in black and white- much more then norton. But im afraid my problem is not gone.. it found virtumund or whatever its called, and im pretty sure i removed it.

but everytime i use IE i still get popups... and now some have been popping up in mozilla. I would do that restore thing. but will i loose all information files and programs that i have made since the date i go back to?

EDITOR'S NOTE: System Restore will not remove your personal files, such as word processor documents, spreadsheets, pictures, music, etc. It will only undo software installs and system changes.

Thank You Rob !!!!!!!!! (Nov 20th entry) It works!

Go back and read Robs entry. Make sure you read everything on that Dell site page before you begin. It works perfectly.

http://forums.us.dell.com/supportforums/board/message?board.id=si_virus&message.id=44634

You can download a removal tool from Norton called FixVundo.
It does the trick.

In September, WinFixer invaded my computer. I bought Spy Sweeper, and it fixed the problem. Unfortunately, I became reinfected with WinFixer a couple of weeks ago, and this time Spy Sweeper was not able to get rid of it. I contacted Spy Sweeper support on several occasions, and each time they sent me a solution that did not work. Next I tried Eddie's FixVundo solution (12/29/05). It took over a half hour to scour my system, but failed to get rid of WinFixer. One last hope was to try: http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe, which Rob recommended (11/20/05). Well, surprisingly IT WORKED! Not only that, it worked in seconds, and now my system works crisply again without the WinFixer albatross. Like others, I'm going to send a donation to the Techguy who developed this program. Isn't it amazing that he succeeds where Symantec and Webroot fail. As for the folks who developed the WinFixer adware, they should be tracked down and held accountable for their misdeeds. Big fines and jail time would be appropriate for all the grief that they've caused.

I too have been struck with the WinFixer malware since December even though my WinXP Pro SP2 PC is always patched with the latest protection from Microsoft and goes through a Verizon and MS router. I do have Half Life 2 on my PC but it was installed back when the product shipped.

I'll try Rob's fix and I'll let you know how that work's out.

There are least three posts here by people who, having successfully fixed their WinFixer problem by running VirtumundoBeGone, have expressed their desire to send a donation to "TechGuy". If you read things carefully, the "Tech Support Guy" forum is just one of many forums (along with the DELL forum, and "Bleeping Computer" forum) that have recommended the use of VirtumundoBeGone. However, the author/developer of that program is NOT "TechGuy", but rather "secured2k". So if people are making donations, I feel it important that the record be set straight here.
P.S. I am NOT secured2k.

I think the problem is that Winfixer has several variants. The VirtumundoBeGone and the Vundo removal tools I've found do NOT work for my variant.

What I can't believe is that the pay for tools/utilities don't seem to work either. I just can't believe that something that has been around for several weeks still gets past their detections. First couple of days, I'd understand, but this is absurd. I guess SpySweeper is where I'll go next.

Hi, In response to the earlier gentleman who wrote about the Antivirus companies placing some of these on the net. I think he is absolutely correct. The Winfixer virus contantly urges me to buy new antivirus software from Winsoft telling me there is something wrong with my computer.

I have written to them and Urge everyone to write to their local states attorney General's office seeking they take action. While there may be no specific law against them putting a virus on the net per sae , The vast majority of States regard the crime of Fraud as "Theft by deception". Convincing you something is wrong with your computer (when they created the problem) so you will buy their product is fraud!
The States Atty General has the power to act on behalf of the thousands of us affected and sue these clowns into poverty.
Please do like I have done and send out an e mail complaint today! WHen they hear enough, they'll act!

With some detective work (whois lookups and United Kingdom Companies House searches) I was able to work out that Winsoftware Ltd (who apparently created WinFixer) were a company based in Croydon in the UK. This company is now defunct and the winfixer domains are now registered to a post office box in the Ukraine. Maybe WinFixer was originally legitimate software (who knows), but what is clear is that this is now quite a large and organised scam. I wouldn't be surprised if it was being operated by the Russian Mafia.