TechSpot

Two persistent problems--Winfixer and funbangladesh

By Winipo75
Nov 13, 2005
  1. I started having problems a few weeks ago with various viruses and other nasties contaminating my computer. I followed the instructions in "How to remove Begin2Search / Coolwebsearch and other Nasties" which helped me get rid of some of the problems (Thanks.) However, I have two problems that just won't go away. I've run McAfee, Spybot and Ad-Adware SE and searched for solutions, but nothing has worked so far.

    First, Winfixer2005 keeps wanting to run on my system. Up until last week, it kept opening windows and trying to install itself. Now, I have McAfee Internet Security and I also followed instructions from another site on how to remove it. Since that time, a window appears when I boot up my computer, saying that Winfixer could not run and would I like it to run on the next system startup. I choose the "no" option (the x in the upper right-hand corner is greyed out) and the window does not reapper. This is less of a pain than before, when it kept trying to install itslef, but it would still be nice to get rid of this persistent window.

    My second problem also occurs when my computer boots up. Internet Explorer opens up (I use Netscape as my default browser) and tries to connect to a site called "funbangladesh.com." Ultimately, it can't find the server and I close Internet Explorer and proceed with what I was doing. I went into the options in IE to see if this site had somehow set itself as my home page. However, www.msn.com is set as the home page (I just double-checked now). Do you know what could be causing this site to pop up and how I could get rid of it?

    I posted the log from Hijack This. If I did it wrong, let me know.

    Thanks in advance for any help you can give me.

    Winipo
     
  2. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 6,503

    First follow this: Read: How to remove Trojans and its ilk!

    Next follow Read: Only use these HJT-instructions when asked!
    /P/ Process needs to be stopped
    /S/ Service needs to be stopped
    Transfer the text from between these dotted lines underneath to between the dotted lines of that post.
    Make sure to follow ALL instructions in SEQUENCE, and in HiJackThis tick/fix ALL lines indicated here!
    ...................................................................................................
    /P/ O4 - HKLM\..\Run: [qp5U37l] migdll.exe
    /P/ O4 - HKLM\..\Run: [Microsoft Update] wuamkop.exe
    /P/ O4 - HKLM\..\Run: [REGSYS] C:\pmrx9.exe
    /P/ O4 - HKLM\..\Run: [Windows Command Prompt] WINSHELL.EXE
    /P/ O4 - HKLM\..\Run: [NI.UWFX5_0001_NI53TEST] "C:\WINDOWS\Downloaded Program Files\CONFLICT.1\UWFX5_0001_NI53TESTNetInstaller.exe" -nag
    /P/ O4 - HKLM\..\Run: [NI.UWFX5_0001_N56T0311] "C:\WINDOWS\Downloaded Program Files\UWFX5_0001_N56T0311NetInstaller.exe" -nag
    /S/ O4 - HKLM\..\RunServices: [Windows Command Prompt] WINSHELL.EXE
    O4 - HKLM\..\RunServices: [Explorer] explorer.exe
    /S/ O4 - HKLM\..\RunServices: [Microsoft Update] wuamkop.exe
    /P/ O4 - HKCU\..\Run: [ozro] C:\PROGRA~1\COMMON~1\ozro\ozrom.exe
    /P/ O4 - HKCU\..\Run: [bEu8RXJ7e] mfccjt32.exe
    ...................................................................................................

    Click Start/Run, type regedit and click OK.

    Before you edit the registry, you should make a backup. On the 'Registry' menu, click 'Export Registry File'. In the 'Export range' panel, click 'All', then save your registry as Backup.

    Locate the HKEY_LOCAL_MACHINE entries:

    HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Explorer = "explorer.exe"
    HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\Explorer = "explorer.exe"

    and, if there, delete the Explorer reference in the righthand panel by rightclicking/select Delete.
    Close the registry editor.

    STOP using that crappy IE (other than for Windows-updates) and install Firefox from www.getfirefox.com
     
  3. Winipo75

    Winipo75 TS Rookie Topic Starter

    Thanks for all your help. Everything seems to be fine now.
     
  4. EyrtheFyre

    EyrtheFyre TS Rookie

    Same Problem, needing different solution

    I have the same problem as winipo 75, however:
    1) the only time I've ever used internet explorer was to install firefox- so how did I get a bug in IE?
    2) I followed your directions for regedit, however I didn't find the entries I'm supposed to look for. I've run all of my spyware and anti-virus progams, and nothing seems to work.
    Please help me figure this out! I'm stumpd and don't know what to do!
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...