|
|
31-10-2005, 09:59
|
#1
|
|
Registered User
Join Date: Jul 2005
Total Posts: 2,226
|
Has anyone heard of winfixer and if so what are their views about it. It appeared quite unexpectedly on this system without my having tried to find it or do anything like this at all. According to this programme which scanned the hard drive without my knowing, it has apparently found 49 system errors 
MOD: link removed.
Last edited by max; 31-10-2005 at 10:11.
|
|
|
|
|
31-10-2005, 10:04
|
#2
|
|
Registered User
Join Date: Sep 2004
Total Posts: 2,083
|
__________________
Are you going to come along quietly, or am I going to have to use ear plugs?
|
|
|
|
|
31-10-2005, 10:09
|
#3
|
|
Registered User
Join Date: Oct 2004
Total Posts: 19,248
|
Wendy,
Run Spybot Search and Destroy to get rid of what this program has probably left behind.
Please also edit your post to remove the link as anyone going to that page stands a good chance of being infected themselves as they try and navigate their way through all the pop-ups!
|
|
|
|
|
31-10-2005, 11:11
|
#4
|
|
Registered User
Join Date: Jul 2005
Total Posts: 2,226
|
Quote:
Originally posted by cgksheff
Wendy,
Run Spybot Search and Destroy to get rid of what this program has probably left behind.
Please also edit your post to remove the link as anyone going to that page stands a good chance of being infected themselves as they try and navigate their way through all the pop-ups!
|
Thanks cgk. Right now I've got more immediate problems to sort out but in any event when I get round to it how do I do that? Dont think I've got it on this system.
|
|
|
|
|
31-10-2005, 11:12
|
#5
|
|
Registered User
Join Date: Jul 2005
Total Posts: 2,226
|
Thanks for that link also steve.
|
|
|
|
|
31-10-2005, 11:13
|
#6
|
|
Registered User
Join Date: Jul 2005
Total Posts: 2,226
|
By the way if it found 49 system errors and there are obvious problems with the product what do I do about these 49 potential system errors and how do I go about detecting them now? I need this like I need a hole in the head.
|
|
|
|
|
31-10-2005, 11:26
|
#7
|
|
Psychenaut
Join Date: Mar 2003
Location: The Here And Now
Total Posts: 14,813
|
Quote:
Originally posted by wendygs
By the way if it found 49 system errors and there are obvious problems with the product what do I do about these 49 potential system errors and how do I go about detecting them now? I need this like I need a hole in the head.
|
You probably don't have any of those errors. It's a spyware program and is more conncerned with tracking your web browsing and popping windows open.
http://www.PCpitstop.com (IE only) can give you a general 'health check' for your computer.
__________________
http://www.edl.me/ - click here for more information about the EDL. Then boogie.
|
|
|
|
|
31-10-2005, 11:29
|
#8
|
|
Registered User
Join Date: Jul 2005
Total Posts: 2,226
|
Think the problem may now be resolved, but cant say for certain.
|
|
|
|
|
31-10-2005, 11:45
|
#9
|
|
Registered User
Join Date: Jul 2005
Total Posts: 2,226
|
Thanks for clarifying that Phan; how do I know what is safe to remove? Spybot has just completed a system restore point and I now need to do some deleting of various stuff it found but dont know what this should be
|
|
|
|
|
31-10-2005, 12:16
|
#10
|
|
Registered User
Join Date: Jul 2005
Total Posts: 2,226
|
Found this virus as a result; is it very serious and how do I go about deleting it from this system.
W32/Sdbot.ftp Virus was found in file C:\WINDOWS\system32\i
|
|
|
|
|
31-10-2005, 12:35
|
#11
|
|
Registered User
Join Date: Sep 2004
Total Posts: 2,083
|
That's kind of bad, but not necessarily so if it's the only thing found. it's apparently a script which downloads another more serious virus.
Tell Spybot S&D to get rid of it, then run a full anti-virus check, & run Spybot S&D again afterwards. Hopefully it won't appear again.
If it does re-appear it may've already downloaded the proper virus, which will appear in either the anti-virus or second S&D scan as something of a different name.
It's an installer script for potentially some nasty pieces of work, if you see anything like agobot or anything similar it may be easier to call in a geek, depending on your level of technical knowledge...
At the very least I'd unplug it from t'internet & post asking for help from a different PC.
__________________
Are you going to come along quietly, or am I going to have to use ear plugs?
|
|
|
|
|
31-10-2005, 13:20
|
#12
|
|
Registered User
Join Date: Jul 2005
Total Posts: 2,226
|
Quote:
Originally posted by steev
That's kind of bad, but not necessarily so if it's the only thing found. it's apparently a script which downloads another more serious virus.
Tell Spybot S&D to get rid of it, then run a full anti-virus check, & run Spybot S&D again afterwards. Hopefully it won't appear again.
If it does re-appear it may've already downloaded the proper virus, which will appear in either the anti-virus or second S&D scan as something of a different name.
It's an installer script for potentially some nasty pieces of work, if you see anything like agobot or anything similar it may be easier to call in a geek, depending on your level of technical knowledge...
At the very least I'd unplug it from t'internet & post asking for help from a different PC.
|
CANT 'cos if I do that I cant access any info and this is the ONLY computer I've got. Oh Alchresearch said to contact his mate for help with any problems only problem I've lost the mobile number he PMed and I forgot to enter it in to my address book;
Where am I likely to see this appear [*url=http://www.f-secure.com/v-descs/agobot.shtml]agobot[/url]
Last edited by wendygs; 31-10-2005 at 13:23.
|
|
|
|
|
31-10-2005, 13:27
|
#13
|
|
Registered User
Join Date: Sep 2004
Total Posts: 2,083
|
First of all do the (full) anti-virus scan, & a second S&D scan.
If anything appears in the AV scan or second S&D scan, then post the results here...
Chances are you just scraped the surface of the malware world due to your encounter with Winfixer (which is pretty a poor effort & easy to get rid of), but I'm sure a few people here will be able to let you know some removal tools should you have anything a bit more nasty...
__________________
Are you going to come along quietly, or am I going to have to use ear plugs?
|
|
|
|
|
31-10-2005, 13:40
|
#14
|
|
Registered User
Join Date: Jul 2005
Total Posts: 2,226
|
How do I tell spybot S&D to get rid of it?
|
|
|
|
|
31-10-2005, 13:43
|
#15
|
|
Registered User
Join Date: Sep 2004
Total Posts: 2,083
|
After it's finished scanning there'll be a "fix selected problems" button on the screen at the top of the box next to the "check for problems" one...
Generally anything in red text is good for removal...
__________________
Are you going to come along quietly, or am I going to have to use ear plugs?
Last edited by steev; 31-10-2005 at 13:48.
|
|
|
|
|
31-10-2005, 14:57
|
#16
|
|
Purple Power
Join Date: Apr 2005
Location: Kent
Total Posts: 2,957
|
Do you have a firewall and/or any pop-up blockers and, of course, an antivirus?
If you haven't and after you've done all the above, do a search on SF, and there are loads of threads advising which you should install.
|
|
|
|
|
31-10-2005, 15:08
|
#17
|
|
Registered User
Join Date: Jul 2005
Total Posts: 2,226
|
Just to update on this. Im trying to do the anti-virus using the pcpitstop tools and it gets so far but keeps crashing out.
I am trying to disable McAfee Norton AV which incidentally did not prevent the previous diagnosis.
GOing out now to get some keys cut otherwise I could be up the creek without a paddle if I loose this set with all the costs which that would entail. 
|
|
|
|
|
31-10-2005, 21:39
|
#18
|
|
Registered User
Join Date: Jul 2005
Total Posts: 2,226
|
Cant complete a 2nd AV using PC-pitstop.com or temporarily disable McAfee Anti-Virus to find out whether this virus has now been removed.
I tried a Windows search whcih found nothing but as I dont rate the Windoze search engine as being at all capable of finding my files let alone a virus in the system files, it doesnt mean much.
As I've got urgent work to finish by tomorrow night and am then unavailable due to urgent hospital tests for my voice I may have to sort it out when I get back unless I've missed out on some tricks.
I'm around all day tomorrow and possibly for a couple more hours tonight so if there are any good ideas please keep them coming.
|
|
|
|
|
01-11-2005, 00:36
|
#19
|
|
Registered User
Join Date: Jul 2005
Total Posts: 2,226
|
Ok this contraption has got 5 viruses 4 of which were transferred automatically to the quarantine file as follows: - generic malware.a!.zip
- Qlow ZOnes-26.reg
- Reg/Low Zones
- Reg/Low Zones
- W32/Sdbot.worm!ftp
BUT It didnt put the W32/Sdbot.work!ftp in to quarantine though. Spybot got rid of most of the stuff and after I've switched off it will probably get rid of the rest which just leaves the above virus and defragmenting which I'm leaving until last.
And NOW I'm going to sleep. Thanks again
Last edited by wendygs; 01-11-2005 at 01:12.
|
|
|
|
|
01-11-2005, 06:21
|
#20
|
|
Registered User
Join Date: Jul 2005
Total Posts: 2,226
|
Some more info from PC Pitstop re the hard drive
Cluster size 4 KB
Drive label No Label
Size 78152 MB
Free space 35746 MB (46%)
Junk files 25624 MB (33%)
Data fragmentation 77%
File fragmentation 4%
Uncached speed 38 MB/s (111%)
- cluster size 4kb
- drive label No lable
- size 78152MB
- free space 35746MB (46%)
- Junk files 25624MB (33%)
- Data fragmentation 77%
- File fragmentation 4%
- uncashed speed 38MB/s (111%)
|
|
|
|
| Thread Tools |
Search this Thread |
|
|
|
All times are GMT. The time now is 04:53.
POSTS ON THIS FORUM ARE NOT ACTIVELY MONITORED
Click "Report Post" under any post which may breach our terms of use.
|
