I have a blog on Xanga and every time logged into it recently, I got the dreaded Winfixer window popping up over and over again.
I trie Spy Sweeper, Ewido (free), AdAware and none of them found it, so I installed Spypot and ran a scan. I was so pleased when it came up with "Winfixer" which I fixed straight away. A couple of days passed with no problems on my Xanga blog.
Now when I log in to Xanga I get a different window popup with "Microsoft Internet Explorer" in the top bar. The Popup window says, "There is a security vulnerability from the Baktera virus. We recommend you DOWNLOAD one of the security software programs to prevent malware infections."
I try to delete this popup with the X in the top right corner but then a new webpage appears advertising:
Win AntiVirus Pro 2006 Win AntiSpyware 2006
I have written down the address of this webpage and it is as follows;
ok, I have examined my hijackthis log to see if the O2 and O20 file names (not the paths) match up, and they don't. So according to the Bleeping Computer website I don't have Vundo/Winfixer/WinAntiVirus or whatever name it morphs into, although at the moment it's using the WinAntiVirus Pro 2006 name on my computer.
I now find that having installed the new version of CCleaner I'm stuck with a Yahoo Toolbar which I don't want. I remove the tick in Toolbars and the dam thing comes back again a few minutes later when I change sites! I can't find it in MSconfig Startup either.