I'm helping a coworker with her personal computer, and she's run into a major issue that I don't know how to fix.

First, she got WinFixer on it from some website, so I RECOMMENDED she download SpyBot and see if that would clear it up before I had time to go over and mess with it. She downloaded SpyBot and attempted to install it, but when she reached the point where she had to reboot, the computer just won't start up in any boot mode except Safe Mode. In Safe Mode, the program shows as not being installed yet.

I've tried going to Safe Mode w/ Networking and Regular, but the computer hangs at the XP screen where the logo appears, then jumps back to the "Choose which mode you would like to boot in" screen.

Unfortunately, as it's her only computer and mine's a desktop, I can't give any real specifics about the computer besides that it appears to be XP Home Edition that it's working with. I'm not even sure she has a boot CD, but I've never used one anyway, so if that's a possible solution, I'd need someone to walk me through that.

Any ideas?First, make sure, she has Windows CD. That would be the easiest way to try to fix it.Quote

WinFixer, WinAntiVirus, WinAntiVirusPro, ErrorSafe, SystemDoctor, WinAntiSpyware, AVSystemCare, WinAntiSpy, Performance Optimizer, StorageProtector, PrivacyProtector and others are very similar computer programs available only for Microsoft Windows that claim to repair computer system problems [1][2][3], but do not actually do so. They are sometimes installed without the user's consent, usually through Internet Explorer. They display false information about the user's computer, confusing the user into believing that their PC is infected with viruses, spyware and/or other forms of malware. The advertisements pop up a display with notifications to convince the user that SOMETHING may be amiss with the computer, or run a fake diagnostic. The program repeatedly prompts the user to purchase a licensed copy of the program. Due to these problems, WinFixer and its sister applications are generally considered SCAREWARE spyware through misleading popups and forced downloads.

WinFixer claims it "is a useful utility to scan and fix any system, registry and hard drive errors. It ensures system stability and performance, frees wasted hard-drive space and recovers damaged Word, Excel, music and video files", but it has never been shown to do such things.

Do you have a flash drive to transfer over Vundofix

Removal Steps:

1. Please print these instructions as they will be needed later when Internet access is not available.

2. Save these instructions in word or notepad to the desktop where they can be easily found.

3. Download Vundo Fix and save it to your desktop.

4. When it has completed downloading, double-click VundoFix.exe to run it.

5. Click the Scan for Vundo button.

6. Once it's done scanning, click the Remove Vundo button.

7. You will now receive a prompt asking if you want to remove the files, click the YES button. Once you click yes, your desktop will go blank as it starts removing Vundo.

8. When completed, it will prompt that it will shutdown your computer, click the OK button.

9. When the computer has shutdown, turn your computer back on.

The WinFixer and Vundo infection should now be removed from your computer.

Next go HERE and do the instructions and post the logs back in the Computer Viruses and Spyware forum.

• Double-click on HJTInstall.
• Click on the Install button.
  
• It will automatically place HJT in C:\Program Files\TrendMicro\HijackThis\HijackThis.exe.
  
• Upon install, HijackThis should open for you.
• Close HijackThis and rename it.
  
• Go to C:\Program Files\Trend Micro\HijackThis.exe
  
• Right click on HijackThis.exe and select Rename.
  
• Type in sniper.exe and press Enter.
  
• Right-click on sniper.exe and select Send To > Desktop (create shortcut)
  
• From the desktop open Hijackthis.
• If using Windows Vista, Right-click and Run As Administrator.
  
• Click on the Do a system scan and save a log file button
  
• Hijackthis will scan and then a log will open in notepad.
• Copy and then paste the entire contents of the log in your post.
  
  • Do not have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.