Trojan Win32/Qoologic Removal Process

December 27, 2007 – 12:21 pm

Trojan Win32/Qoologic is a new warning message that introduced by a rogue anti-spyware program, which is a form of fake malicious software engineered by Internet hackers. It is a variant of Trojan.Win32 or Trojan.Win32.agent.akk. “Your browser was infected by Trojan Win32/Qoologic” critical system error message might appears in your screen.

Trojan Win32/Qoologic is not a virus by itself, but it is part of a fake anti-spyware program. Do NOT purchase Trojan Win32/Qoologic-related software under any circumstances since it is a fake anti-spyware software.

The following process will help you remove it from your system easily and safely.

Trojan Win32/Qoologic Manual Removal Process:

1. Click on the Start Menu button, then click on the Control Panel option, and then Double-click on the Add or Remove Programs icon.

2. Locate Trojan Win32/Qoologic and double-click on it to uninstall Trojan Win32/Qoologic. Follow the screen step-by-step screen instructions to complete uninstallation of Trojan Win32/Qoologic. Do not worry about this if you cannot find it in Add/Remove window. Simply skip to #5.

3. Restart the computer.

4. When it has completed uninstalling you can close Add or Remove Programs and your Control Panel.

5. Close all programs.

6. Search and delete the following infected entries in registry. If you do not know how to edit registry, click here to read more.

369A87BB-07DF-4AB6-B23D-B5BF81338572
69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014
3e0cee63-f8bc-4485-a745-cc01b2a0e9d9
4EBAA7B0-740D-4CFA-9455-5C233BB354E1
CAA8DC4B-648A-4C2F-8F2A-39E607830DEF
4AAC4708-FE47-4B80-92EF-47406444DDD2
8E015787-B1E3-404a-95DE-3E71E1FA0305
3D50DBC0-414E-480F-9C5E-5DB9E4568EF7
4E7BD74F-2B8D-469E-A0E8-F479B685FA7D
a60e765a-fd37-4529-bf73-cf805dfd84ea
83CDEF6B-98D2-4C60-84FC-00C44606A4F8
85589B5D-D53D-4237-A677-46B82EA275F3
CA4F0D8D-5F2B-4F16-838A-8D52249EAB21
7E24E909-FB8A-4837-9DF7-05E7587CB26C
F10587E9-0E47-4CBE-84AE-7DD20B8684BB
4AAC4708-FE47-4B80-92EF-47406444DDD2
55E04179-C2DF-4D7F-B74E-3E644C983237
44a5d01d-1dd0-4412-be7e-ce652025d433
FF64059D-4D2A-4D6B-AA0F-2EE4A2FE3856

7. Stop Trojan Win32/Qoologic process. If you do not know how to stop a running process, click here to read more.

8. Find and delete the following infected files from your system.
poswin.dll
isfmdl.dll
pdswin.dll
oggview32.dll
pbukv2.dll
pwnbho.dll
spads.dll
vturppp.dll
jkklm.dll
huriscos.dll
hsirziq.dll
tgfaifwm.dll
dataclenu.dll
domnftwpto.dll
PhWh11M3.dll
qomllji.dll

If you do not know how to find it or having difficulties locating the file, click here to read more.

9. Rename the files that you found above to “foundbadfile1.dll” and “foundbadfile2.dll” (if you can not rename this file, then try to restart your computer in safe mode then try to rename this file.) If you don’t know how to start the computer in safe mode, click here to read more.

10. Go to C:\Program Files\ folder and delete the “IE Defender” folder (if you can’t delete it, reboot your computer to safe mode then delete the folder. Do not worry about it if you can’t find this folder.)

11. Click here to bookmark this page (you will need to comeback to this page after reboot)
(If you are using Firefox click on Ctrl+D on your keyboard to bookmark this page)

12. Restart your computer

13. Go to your computer and delete the “foundbadfile1.dll” and “foundbadfile2.dll” file

14. You have just removed Trojan Win32/Qoologic from your computer manually.

Remove Trojan Win32/Qoologic with SmithfraudFix:

SmithfraudFix is a free tool that S!Ri created to remove fake anti-spyware programs. It can be risky so we cannot guarantee the result. Please use it with reservations. We would never recommend to purchase anything unless it’s necessary. That’s why we produce this free removal process.

1. Download SmithfraudFix tool and save it to your desktop.

2. Restart your computer and boot into Safe Mode. If you don’t know how to start the computer in safe mode, click here to read more.

3. Double-click on the SmithfraudFix.exe icon then follow the screen instructions. Option #2 should be selected in this case.

4. When you are prompted with “Do you want to clean the registry ?”, simply answer “Y”.

5. Reboot.

6. You should have removed Trojan Win32/Qoologic from your computer. Sometimes it might take more than once to work properly. If SmithfraudFix removal tool does not work, which is in no-guarantee due to the nature of spyware, please refer to the manual removal steps above or purchase a legitimate removal tool if necessary.

(Disclaimers: These instructions are free and not guaranteed to work. Please use it at your own risks. We are not responsible for any damages.)

  1. 19 Responses to “Trojan Win32/Qoologic Removal Process”

  2. i cannot locate Trojan Win32/Qoologic in step 2

    and the infected registries in step 6.

    But i do get a popup saying win32\Qoologic

    By 203132 on Dec 26, 2007

  3. I am having the same problem as the above entry. I cannot locate Trojan Win32/Qoologic in Step 2. Or the infected registries.

    I do however get a popup saying win32/Qoologic.

    I need HELP! I just purchased this computer & already there is something wrong with it.

    By Kylie on Dec 27, 2007

  4. Look at step 6. Click on the option for not knowing how to edit registry. Look through the responses and do what Brayden says. The responses are talking about another Trojan Win/32 but it worked perfectly. Good Luck.

    By Jaybay on Dec 27, 2007

  5. i found out a way to solve this problem from someone else ppl!! go to tools on you options bar then go down to internet options. click on it delete the temp files and cookies then look down and reset all settings after doing that click the advance button and hit reset again. this will change most all of your settings but you can change it back easily and then restart you pc and wa la!! back to buiz! im so glad i seen someone else come up with this other than what this is telling you to do!!

    By marlin on Dec 27, 2007

  6. I need to Trojan Anti virus - Win32/Qoologic to my PC.

    By amit on Dec 27, 2007

  7. Marlin!!! You’re the man! All these complicated instructions are simply not necessary. Buying software isn’t necessary. Your instructions NAILED IT!

    Thanks!

    By Kenny on Dec 28, 2007

  8. I had the same issue. Identifed oggview32.dll as the problem. Re booted in safe mode and deleted this from the C:\windows directory. Also removed any reference to it in the registry. Problem went away after this.

    By zmand on Dec 28, 2007

  9. when i open up my ie7, it freezes!

    is there a way to fix it using firefox?

    By andy on Dec 28, 2007

  10. Thanks so much!!!!!

    now i gotta get rid of hacked by godzilla, lol.

    By andy on Dec 29, 2007

  11. Thanks Marlin! Much easier and it worked! You nailed it!

    By sumobear50 on Dec 29, 2007

  12. Thanks zmand.
    I was infected on 12-28-07. After cleaning out all of the temp files and cookies we found oggview32.dll files and cleaned everthing out. Thanks

    By Dwayne on Dec 29, 2007

  13. Much easier instructions Marlin. Thanks for adding them here. I went through all registry entries listed above before I read your post. Kudos to you!!!

    By momj on Dec 29, 2007

  14. thank you Craig you are a god send!!!!

    By Lisa on Dec 29, 2007

  15. thanks marlin,
    your advice worked well!

    By wayne on Dec 29, 2007

  16. Hay all I used Smithfraudfix: to remove most annoying Qoologic infection. Smithfraudfix was easy to follow / use and IT WORKED ! ! ! ! Thanks to all for your assistance and advice. needless to say I have bookmarked this site. Happy new year to you all………Taff

    By Taff on Dec 30, 2007

  17. Marlin,
    You are an absolute godsend. I have had a really difficult time physically, mentally, and financially over the last two years, I suffer from severe depression, financially we have had to sell two homes, I no longer have a car and a year and a half ago i was in a coma for three weeks. I was also given a 20% chance to live. I was in the hospital for 6 weeks I had to learn to talk eat and walk again, I have three great kids and 4 beautiful grandchildren. You are probably wondering why I would post all this. The reason is I just found your page tonight, The post you had about internet explorer worked for me!!!!!!!!!!
    I have not been without a computer in my life until this year, My youngest son started college and I had to let him have the system I had. I am 47 and have been using computers since the packard bell 386 was the bomb lol!

    Before christmas I had to sell many things mostly jewelry that meant a lot to me to get this computer, I got the win32/qoologic three days ago, I have spent days trying to find a fix without having to spend more money. THANK YOU! THANK YOU! THANK YOU! I think it really sucks for people like me who are having a lot of physical and emotional problems to have to deal with this on a brand new system.

    Please have a wonderful new year, I know mine is sure going to be better thanks to you. I also have a question for you and some of the other posters. When my norton’s trial ends, could you share some of the internet security software that you like. sorry so long, But I had to take the time to let you know how happy I am I found your site.
    Cathy

    By Cathy on Dec 30, 2007

  18. Guys

    Thanks a million….. followed Marlins instructions together with the Smithfraudfix program and all my problems have disappeared.

    I will be making this site my first port of call from now on.

    Brownie (Australia)

    By Brownie on Dec 31, 2007

  19. Hi All,
    I’ll be trying this out this weekend. I spent 4 hours trying to fix this with Norton the other night only to find out that Norton cannot fix it and when I contacted Norton support online, they wanted $99.99 to fix it remotely…..then I called Best Buy and CompUSA Tech Support to see how much they would charge and they were charging between $150 and $260. to fix it…not willing to give up my money so easily, I googles the fix for the virus today and found this page….hoping it works and thank you in advance if it does…gg

    By Gina on Dec 31, 2007

  20. Thanks man,real thanks

    By ahmed on Jan 1, 2008

Post a Comment

*
To prove you're a person (not a spam script), type the security word shown in the picture.
Anti-Spam Image

PCHubs.com Connect Your PC Safely Contact Us | About Us | Terms of Use |RSS Feed