Protect your privacy with CyberScrub Privacy Suite
Advertisement

Trojan.Win32.Obfuscated.gx Removal Process

December 10, 2007 – 12:54 pm
Image
Ads by Clickxchange

Trojan.Win32.Obfuscated.gx is a new rogue anti-spyware program, which is a form of fake malicious software engineered by Internet hackers. It is a variant of Trojan.Win32 or Trojan.Win32.agent.akk. “Your browser was infected by trojan.win32.obfuscated.gx” error message might appears in your screen.

Trojan.Win32.Obfuscated.gx is not a virus by itself, but it is a fake anti-spyware program. Do NOT purchase Trojan.Win32.Obfuscated.gx under any circumstances since it is a fake anti-spyware software. The following process will help you remove it from your system easily and safely.

The following process will help you remove it from your system easily and safely.

Trojan.Win32.Obfuscated.gx Manual Removal Process:

1. Click on the Start Menu button, then click on the Control Panel option, and then Double-click on the Add or Remove Programs icon.

2. Locate Trojan.Win32.Obfuscated.gx and double-click on it to uninstall Trojan.Win32.Obfuscated.gx. Follow the screen step-by-step screen instructions to complete uninstallation of Trojan.Win32.Obfuscated.gx. Do not worry about this if you cannot find it in Add/Remove window. Simply skip to #5.

3. Restart the computer.

4. When it has completed uninstalling you can close Add or Remove Programs and your Control Panel.

5. Close all programs.

6. Search and delete the following infected entries in registry. If you do not know how to edit registry, click here to read more.

7df5417b22988d88e8080a44392ade95
cbdc7b3033e82c2065a1b48061b2ca01
6d3c4dbecf4aaf1ae826a0a7edde5951
e05997f932f826f0271cf32d00bbd3be
c18c3b4771120703624baaf835feecd8
9ceecf911241c9890541167edf53739f
40613dee6ad5fec910606c25b25262fd
3ba096caa45ab117721e725079cc53a1
bb5be1c92c299a1c6bcfe67655b0a0c7
9a9f57899a28547b04fc2da3700c95cf
7a329404de21925daacbbbee093ff6dc
7d4b39e4cab018496e2fe9bf9c3234b2
69c9be662f7f284aae171adeb136cb24
1bc5752bd72f44f004d9f061dd7f9e00
bcf3a381bbe26d9c1ec24bac8b18f567
8266c79a434aed795a5f3f7abb0aff0d
696ce23305a35bb118afc42d58845791
2982068d063848ddb0b8029750411a84
fe6e6a62a572e84e9eaee12eb3ee8a2b
1057a2dcd13130963be0a51c41dc4d1c
396955766b2e512bc3545a24bc485dbe
5f9523529ce2cac480acbda2b8bf4e1e

7. Stop Trojan.Win32.Obfuscated.gx process. If you do not know how to stop a running process, click here to read more.

8. Find and delete the following infected files from your system.
mlljh.dll
ibpmxtbv.dll
ljjhedc.dll
cabvie.dll
windivx.dll
ddayv.dll
vkcxxfvi.dll
ssqpo.dll
stream32a.dll
vipextqtr.dll
ecxwp.dll
gebca.dll
ddcdedd.dll
advpac.dll
tdlRMS.dll
lcxmehhg.dll
hdbxuqje.dll
mljge.dll
ddcbyvt.dll
advrepkon.dll
ddccd.dll
sgqddvym.dll
pofwjina.dll
bkfgnqhm.dll
orkbobob.dll
tuvttrr.dll
cpwvehup.dll
enhtb.dll

If you do not know how to find it or having difficulties locating the file, click here to read more.

9. Rename the files that you found above to “foundbadfile1.dll” and “foundbadfile2.dll” (if you can not rename this file, then try to restart your computer in safe mode then try to rename this file.) If you don’t know how to start the computer in safe mode, click here to read more.

10. Go to C:\Program Files\ folder and delete the “IE Defender” folder (if you can’t delete it, reboot your computer to safe mode then delete the folder. Do not worry about it if you can’t find this folder.)

11. Click here to bookmark this page (you will need to comeback to this page after reboot)
(If you are using Firefox click on Ctrl+D on your keyboard to bookmark this page)

12. Restart your computer

13. Go to your computer and delete the “foundbadfile1.dll” and “foundbadfile2.dll” file

14. You have just removed Trojan.Win32.Obfuscated.gx from your computer manually.

Remove Trojan.Win32.Obfuscated.gx with SmithfraudFix:

SmithfraudFix is a free tool that S!Ri created to remove fake anti-spyware programs. It can be risky so we cannot guarantee the result. Please use it with reservations. We would never recommend to purchase anything unless it’s necessary. That’s why we produce this free removal process.

1. Download SmithfraudFix tool and save it to your desktop.

2. Restart your computer and boot into Safe Mode. If you don’t know how to start the computer in safe mode, click here to read more.

3. Double-click on the SmithfraudFix.exe icon then follow the screen instructions. Option #2 should be selected in this case.

4. When you are prompted with “Do you want to clean the registry ?”, simply answer “Y”.

5. Reboot.

6. You should have removed Trojan.Win32.Obfuscated.gx from your computer. Sometimes it might take more than once to work properly. If SmithfraudFix removal tool does not work, which is in no-guarantee due to the nature of spyware, please refer to the manual removal steps above or purchase a legitimate removal tool if necessary.

(Disclaimers: These instructions are free and not guaranteed to work. Please use it at your own risks. We are not responsible for any damages.)

  1. 54 Responses to “Trojan.Win32.Obfuscated.gx Removal Process”

  2. This is absolutely beautiful! I took out the dll files as listed. Now everything is gone!

    By Desmond on Dec 10, 2007

  3. Thank you so much…I thought my computer was totally screwed…I only had to delete one file “windivx.dll”, and it went away! I hope that was all that was needed…

    By mia on Dec 11, 2007

  4. You guys are awesome :D I’ve been sitting in front of my computer for the past 4 hrs trying to remove this without having to download and buy any spyware remover. And finally after reading your post and after a few clicks and ofcourse fingers crossed lol I finally removed this pain-in-the-butt, piece-of-crap misleading pop-up!! Thank you guys sooo much…I’m letting everyone know about this website :D Thanks again guys!!

    By Milly on Dec 11, 2007

  5. I can not find a program “Trojan.Win32.Obfuscated.gx” in the “ADD/REMOVE PROGRAMS” componant. Should I just delete the dll files?

    thanx,

    Jim

    By Jim Allen on Dec 11, 2007

  6. Great Guide, Seems easy to follow and nice use of the SmithfraudFix tool, I just recommended it to a friend who has the virus.

    By Dan on Dec 11, 2007

  7. You guys saved my butt !! I have been working on this for three days now, pulling out what little hair I have, downloading this and that thru several sleepless nights. I deleted the windivx.dll thru the safe mode and it all came to an end.

    Thanks again,
    Phil

    By Phil on Dec 11, 2007

  8. Thank you so much. :))

    By lonelyking on Dec 11, 2007

  9. Yai cant find that program to uninstall it either, im having a tech come to my house to fix it but it would be great if you can contact me and tell me how to do this myself. like i said i went to the add or remove programs and could not find it, i have a Win Vista Home Pre.

    from
    ~Shane~

    By shane on Dec 11, 2007

  10. Thank you very much..really helped me a lot..
    just go safe mode and remove windivx.dll..done

    By naknak on Dec 11, 2007

  11. Wow this worked great…windivx.dll. Rather than reboot to safe mode though I used Unlocker:

    http ://www.download.com/Unlocker/3000-2248-10493998.html

    It removes the locking handle a program may have on a file…it will also delete the file in question if no locking handle is found. I did reboot afterwards so the windivx.dll would be unloaded from memory.

    By Rick on Dec 11, 2007

  12. Like Jim and Shane, i can not find a program “Trojan.Win32.Obfuscated.gx” in the “ADD/REMOVE PROGRAMS” componant. Could someone help me to remove it from my computer, please?
    Thanks.

    By guigui on Dec 11, 2007

  13. guys…. i can’t open TASK MANAGER… if it opens it shuts down in a few seconds…. i can’t really do anything ….. …… i just can’t get it off

    By DaNyElL on Dec 12, 2007

  14. FORGOT TO TELL U ……. IT’S THE TROJAN.WIN32.OBFUSCATED.GX THING…… I JUST CAN’T REMOVE IT……. TRYED EVERY WAY U MENTIONED…

    By DaNyElL on Dec 12, 2007

  15. After looking for everything listed in the removal process, the ONLY thing I had on my system was the windivx.dll file.
    Once that was removed, everything was back to normal.
    THANK YOU!!!

    By Rick on Dec 12, 2007

  16. this rubbish had me screwed up for almost a day
    thanks a lot guys and gals out there
    finally i am free
    i had to delete the “windivx.dll” file extension

    thanks again

    By tim on Dec 12, 2007

  17. Man! I can’t thank you all enough. I wandered on to a site after searching for something on google, and whapooowww - that damn trojan hit me. I deleted windivx.dll and all is well now.

    If anyone encounters any problems after only deleting windivx.dll, please post. I am bookmarking this site and will return often.

    Again, THANK YOU!!!!!!

    By JP on Dec 12, 2007

  18. OMGaush! i <3 you all!
    ty for solving my problem, i just had to boot in safe mode and delete the windivx.dll file aswell. In fact i saw that file the night i got the virus, but didnt think anything of it; i thought was just getting more divx codecs.

    By K3vin on Dec 12, 2007

  19. OMG!!!!!!!!!!!!!!!!!!!!! i owe you for helping me get rid of that virus…… you are my hero :)

    By nicole on Dec 12, 2007

  20. All i gotta say is… THANKS, that popup has been bugging me for a week now, i must have d/led like 6 diff trojan/virus/spyware remover progs and most of them wanted 30 bucks to clean my comp.

    all i did was go thought the manual way of getting rid of the file but didn’t find it anymore, so i d/l the SmithfraudFix tool and ran it like it said too. Now when i open IE i get no popup system error message.

    Thanks again

    By Nims on Dec 13, 2007

  21. thank the guy who posted this!

    thank you x10000000!!!!

    my pc would be dead without you. . . .

    thanx a lot again!

    god bless always and take care!

    By PierceHead on Dec 13, 2007

  22. Awsome solution… Thanks…

    By Kuleen Upadhyaya on Dec 13, 2007

  23. I too had the windivx.dll - Installed the ‘Unlocker’ to delete the file and I feel so much cleaner now ;)

    THANK YOU ALL !!!!

    By Carrie on Dec 13, 2007

  24. THANK YOU SO MUCH!!!!! thanks a ton this saved me a LOT of time. We just had the trojan.win32 virus and got it fixed within the last week and somehow got this one two days ago. It was a pain getting rid of the other one but this made it a lot easier. Great job thanks!

    By Mike on Dec 13, 2007

  25. Hello webmaster…Man i just love your blog, keep the cool posts comin..holy Thursday . Sasha Cohen

    By Sasha Cohen on Dec 13, 2007

  26. I don’t know how to delete trojan.win32. I tried everything. Can you help me?

    By Tom on Dec 14, 2007

  27. my search on the computer can’t find windivx.dll….
    my mom’s gonna killll me.
    somebody help!!!

    By George on Dec 14, 2007

  28. I deleted windivx.dll and the IE Defender folder and contents in Safe Mode. I searched for half-a-dozen of the registry entries and found none. Since it took up to five minutes each, I just decided to delete windivx. Rebooted computer, and the Trojan appears to be gone. Oh, yeah, I also emptied the Trash Bin. Thank you!!! By the way, since IE was the one busted, I searched and found this site using Google via Firefox. Good thing to have two browsers available.

    By Michael Pool on Dec 14, 2007

  29. how can i find the file windivx.dll? Like i said, the regular Start > Search doesn’t work…

    By George on Dec 14, 2007

  30. Thanks Giant Help!!!

    By Dan on Dec 15, 2007

  31. Small problem. I followed all the steps listed. I found none of the .dll files listed above nor any of the entries in registry. Still get the pop-up ad though. Do you think the sleeze that advertises this way got smarter? Any suggestions?

    By Bob on Dec 16, 2007

  32. Thanks, your instructions were great, but I didn’t have any of those files you mentioned. The file that got rid of the pop up for me was c:\windows\pmspl.dll. Thanks!!

    By Lacy on Dec 16, 2007

  33. hi there, i m using vista, all i had to do was to start my computer in safe mode and restore it to a previous point.. and its gone, i tried the same while computer was running in normal mode but it failed then..

    By sam on Dec 16, 2007

  34. thank you sooooooooooo much i owe you 1 mate oh jesus i fought id f***ed my new laptop up fr good thank u soooooooooooooooo much i cant tell u how happy i am

    By Andre gregg on Dec 16, 2007

  35. heyyyy/…..thx for this guide

    though none of the registries or files were found…..

    the smitfraud tool worked for me…thxxxxxx

    By Aditya on Dec 16, 2007

  36. You guys are gods. I have just 1 question: Where did you learn all this? :)

    By Andrius on Dec 16, 2007

  37. Thanks very much for the help.

    I didn’t actually have the virus, because Norton caught it but, I had the annoying pop up when I tried to use IE.

    Smitfraud tool fixed it.

    Thanks again.

    By Dave on Dec 16, 2007

  38. respect from Russia!)

    By avyst on Dec 16, 2007

  39. Fu$k, you’re the best! =)

    I’ve broke my head on whats going on for few hours… Unexpectedly found this comments… and just used sam’s advice and in safe mode restored my comp (Im using vista home pre) And this SH%t gone for now =)

    THANX for such great people as you are ;P LOL :D

    By Oleg on Dec 16, 2007

  40. When I first saw this Trojan.Win32.Obfuscated.gx pop on my screen, it gave me the jitters. I’m so happy that a website like yours exist and would like to thank you very much as it got rid of this with the help of SmithfraudFix (though I struggled with the maunal removal process). The instructions were very simple and lucid to follow.

    By Sam on Dec 17, 2007

  41. I am so happy to tell you that my PC have saved by you people, this is nothing but the amazing sevice I got through your site without paying anything, when i first sw Trojan.Win32.Obfuscated.gx on my sreen, I was just felt that my all files will currupt but with SmithfraudFix made it possible to remove it thank you so much……

    By Jitendra on Dec 17, 2007

  42. THX a lot.
    I had it for days and I am so happy it’s gone!!!

    By Belgian Pinguin on Dec 18, 2007

  43. i cannot find trojan.win32.obfuscated.gx in the add remove programs

    By hamad on Dec 20, 2007

  44. A big THANKYOU guys, I found the Trojan.Win32.Obfuscated.gx to be one of the peskiest sucker viruses I have come across, then I Googled it and found all I needed here, so the SmithfraudFix thing, followed instructions and whammo no more trojan!!!
    Havagreat NewYears!! I know I will now!

    By Bob F on Dec 31, 2007

  45. Not fixed:

    I do not have a “windivx.dll” file.
    I already updated Adaware and ran program.
    I updated Spybot S&D and ran program.
    I deleted “IE Defender”
    I ran SmithfraudFix twice.

    No luck…please help!

    By Jon on Jan 11, 2008

  46. Gosh you guys are the BEST!!
    I’ve had this crap on my PC for like 4 weeks and got so annoyed with that pop up “Infected” -.- I recomended your program and site to all my friends with somesort of Spywear or Something I think your guild can help them like it helped me!
    Once again THANKS!!

    By Karizma on Jan 16, 2008

  47. Thank you guys so much!you are the best!!!!!!!!

    By Ani on Jan 19, 2008

  48. Hi guys manual process does not worked for me i have not founf any thibg in registry and no dll so last tool was left SmithfraudFix:
    and it works for me…..its good its work must try it to remove that fucking virus……

    By Praveen on Jan 31, 2008

  49. i ran the program once and it worked! thats a bunch guys!

    By Ace on Feb 8, 2008

  50. I couldn’t find any of the reg keys or windivx.dll like a lot of other people found. but i DID find advpac.dll and deleted it in safe mode. nothing’s popped up so far, *keeps fingers crossed* thank you!

    By Tiffany on Feb 11, 2008

  51. It came back. I tried running the Smithfraud too. Can someone please help me?

    By Tiffany on Feb 11, 2008

  52. U guys are giving us a very profesional guidance…Thanks alot of giving such effective solution~

    By Ziont on Feb 14, 2008

  53. SmithfraudFix worked. Thanks so much! Finally that irritating pop-up is gone! :)

    By Sammi on Feb 14, 2008

  54. thank you very much for giving suggestions.

    By naveen on Mar 2, 2008

  55. I wanted to scream as I tried everything and could to pinpoint where this stupid Trojan was hiding. Finally, I found it under C:\WINDOWS and then deleted it in safe mode. Thanks for all the great advice and information… if it weren’t for you guys I might have searched for weeks looking for random files and getting nowhere.

    By Elisha on Mar 5, 2008

Post a Comment

*
To prove you're a person (not a spam script), type the security word shown in the picture.
Anti-Spam Image