wininet.dll file recovery

[Guest]

I've got the virus Trojan.Alemod on my computer and have followed all
instructions given by an UPDATED Norton Antivirus. I've submitted the
information to the Symantic website since the repair fails and this is their
response:

"Developer notes:
C:\WINNT\system32\wininet.dll is non-repairable threat. Please delete this
file and replace it if necessary."

OK, that's fine if it'll really, really gets rid of the virus and does not
screw up my computer. I know very well how to delete a file, but knowing that
this is an important file, can someone please tell me how to replace it?

THANKS!!
lp

 

[David H. Lipman]

From: "lp" <[email protected]>

| I've got the virus Trojan.Alemod on my computer and have followed all
| instructions given by an UPDATED Norton Antivirus. I've submitted the
| information to the Symantic website since the repair fails and this is their
| response:
|
| "Developer notes:
| C:\WINNT\system32\wininet.dll is non-repairable threat. Please delete this
| file and replace it if necessary."
|
| OK, that's fine if it'll really, really gets rid of the virus and does not
| screw up my computer. I know very well how to delete a file, but knowing that
| this is an important file, can someone please tell me how to replace it?
|
| THANKS!!
| lp

Execute;

sfc /scannow

 

[Guest]

From: "lp" <[email protected]>

| I've got the virus Trojan.Alemod on my computer and have followed all
| instructions given by an UPDATED Norton Antivirus. I've submitted the
| information to the Symantic website since the repair fails and this is their
| response:
|
| "Developer notes:
| C:\WINNT\system32\wininet.dll is non-repairable threat. Please delete this
| file and replace it if necessary."
|
| OK, that's fine if it'll really, really gets rid of the virus and does not
| screw up my computer. I know very well how to delete a file, but knowing that
| this is an important file, can someone please tell me how to replace it?
|
| THANKS!!
| lp

Execute;

sfc /scannow

Thanks for replying, however, I have a few things to add that I forgot to
mention earlier.

1. According to this site:
http://securityresponse.symantec.com/avcenter/venc/data/trojan.alemod.html

once the virus has executed, it changes a few files and adds some values to
the registry, however, it apparently hasn't been executed on my computer
because none of those values were in the registry when I tried to follow
their instructions. Also, the antivirus program finds only Trojan.Alemod, not
Trojan.Desktophijack.B like it says it would if Trojan.Alemod had been
executed.

2. Every time I open IE, it triggers my Spyware Doctor program to open up,
or at least something that looks like my Spyware Doctor program. The program
is closed prior to opening IE and the preferrences are set to keep it
disabled.

3. If none of this matters and your instructions remain the same, could you
please ellaborate on "Execute; sfc/scannow" and finally,

4. If I still should follow the directions in the first link you've included
here, (http://www.claymania.com/removal-trojan-adware.html) and I already
have an antispyware program (2 actually) and an antivirus program that has
detected the virus already, do I still need to dl those 4 items that it
instructs me to? (i.e. McAfee Stinger, Trend Sysclean Package, Latest Trend
Virus Pattern Files & Ad-Aware SE)

Thanks for your help!

lp

 

[David H. Lipman]

From: "lp" <[email protected]>


| Thanks for replying, however, I have a few things to add that I forgot to
| mention earlier.
|
| 1. According to this site:
| http://securityresponse.symantec.com/avcenter/venc/data/trojan.alemod.html
|
| once the virus has executed, it changes a few files and adds some values to
| the registry, however, it apparently hasn't been executed on my computer
| because none of those values were in the registry when I tried to follow
| their instructions. Also, the antivirus program finds only Trojan.Alemod, not
| Trojan.Desktophijack.B like it says it would if Trojan.Alemod had been
| executed.
|
| 2. Every time I open IE, it triggers my Spyware Doctor program to open up,
| or at least something that looks like my Spyware Doctor program. The program
| is closed prior to opening IE and the preferrences are set to keep it
| disabled.
|
| 3. If none of this matters and your instructions remain the same, could you
| please ellaborate on "Execute; sfc/scannow" and finally,
|
| 4. If I still should follow the directions in the first link you've included
| here, (http://www.claymania.com/removal-trojan-adware.html) and I already
| have an antispyware program (2 actually) and an antivirus program that has
| detected the virus already, do I still need to dl those 4 items that it
| instructs me to? (i.e. McAfee Stinger, Trend Sysclean Package, Latest Trend
| Virus Pattern Files & Ad-Aware SE)
|
| Thanks for your help!
|
| lp

1. Alemond is similar to Trojan.Desktophijack.B in what it does with the DLL file.

2. You may have something going on with IE such as adware/spywware.

3. Start --> run;
enter; sfc /scannow

If the DLL was replced, the System File Checkert (SFC) will replce it from a backup
location.

4. Do follow step #2 on the Claymania page. For possible adware/spyware...

Please download, install and update the following software...

Ad-aware SE v1.06
http://www.lavasoft.de/
http://www.lavasoftusa.com/

SpyBot Search and Destroy v1.4
http://security.kolla.de/

After the software is updated, I suggest scanning the system in Safe Mode.

I also suggest downloading, installing and updating BHODemon for any Browser Helper Objects
that may be on the PC.

BHODemon
http://www.definitivesolutions.com/bhodemon.htm

 

[Guest]

From: "lp" <[email protected]>


| Thanks for replying, however, I have a few things to add that I forgot to
| mention earlier.
|
| 1. According to this site:
| http://securityresponse.symantec.com/avcenter/venc/data/trojan.alemod.html
|
| once the virus has executed, it changes a few files and adds some values to
| the registry, however, it apparently hasn't been executed on my computer
| because none of those values were in the registry when I tried to follow
| their instructions. Also, the antivirus program finds only Trojan.Alemod, not
| Trojan.Desktophijack.B like it says it would if Trojan.Alemod had been
| executed.
|
| 2. Every time I open IE, it triggers my Spyware Doctor program to open up,
| or at least something that looks like my Spyware Doctor program. The program
| is closed prior to opening IE and the preferrences are set to keep it
| disabled.
|
| 3. If none of this matters and your instructions remain the same, could you
| please ellaborate on "Execute; sfc/scannow" and finally,
|
| 4. If I still should follow the directions in the first link you've included
| here, (http://www.claymania.com/removal-trojan-adware.html) and I already
| have an antispyware program (2 actually) and an antivirus program that has
| detected the virus already, do I still need to dl those 4 items that it
| instructs me to? (i.e. McAfee Stinger, Trend Sysclean Package, Latest Trend
| Virus Pattern Files & Ad-Aware SE)
|
| Thanks for your help!
|
| lp

1. Alemond is similar to Trojan.Desktophijack.B in what it does with the DLL file.

2. You may have something going on with IE such as adware/spywware.

3. Start --> run;
enter; sfc /scannow

If the DLL was replced, the System File Checkert (SFC) will replce it from a backup
location.

4. Do follow step #2 on the Claymania page. For possible adware/spyware...

Please download, install and update the following software...

Ad-aware SE v1.06
http://www.lavasoft.de/
http://www.lavasoftusa.com/

SpyBot Search and Destroy v1.4
http://security.kolla.de/

After the software is updated, I suggest scanning the system in Safe Mode.

I also suggest downloading, installing and updating BHODemon for any Browser Helper Objects
that may be on the PC.

BHODemon
http://www.definitivesolutions.com/bhodemon.htm

OK, although I wasn't sure at which point I should run sfs /scannow, I did
it first and I got a message box that said:

Files that are required for Windows to run properly must be copied to the
DLL Cache

Insert your Windows XP Professional Service Pack 1 CD now.

~ I have no such CD. I only have the Operating System CD that came with my
computer. I also do not have the Professional Edition of Windows XP, I have
the Home Edition. ?????

Leslie

 

[Guest]

From: "lp" <[email protected]>


| Thanks for replying, however, I have a few things to add that I forgot to
| mention earlier.
|
| 1. According to this site:
| http://securityresponse.symantec.com/avcenter/venc/data/trojan.alemod.html
|
| once the virus has executed, it changes a few files and adds some values to
| the registry, however, it apparently hasn't been executed on my computer
| because none of those values were in the registry when I tried to follow
| their instructions. Also, the antivirus program finds only Trojan.Alemod, not
| Trojan.Desktophijack.B like it says it would if Trojan.Alemod had been
| executed.
|
| 2. Every time I open IE, it triggers my Spyware Doctor program to open up,
| or at least something that looks like my Spyware Doctor program. The program
| is closed prior to opening IE and the preferrences are set to keep it
| disabled.
|
| 3. If none of this matters and your instructions remain the same, could you
| please ellaborate on "Execute; sfc/scannow" and finally,
|
| 4. If I still should follow the directions in the first link you've included
| here, (http://www.claymania.com/removal-trojan-adware.html) and I already
| have an antispyware program (2 actually) and an antivirus program that has
| detected the virus already, do I still need to dl those 4 items that it
| instructs me to? (i.e. McAfee Stinger, Trend Sysclean Package, Latest Trend
| Virus Pattern Files & Ad-Aware SE)
|
| Thanks for your help!
|
| lp

1. Alemond is similar to Trojan.Desktophijack.B in what it does with the DLL file.

2. You may have something going on with IE such as adware/spywware.

3. Start --> run;
enter; sfc /scannow

If the DLL was replced, the System File Checkert (SFC) will replce it from a backup
location.

4. Do follow step #2 on the Claymania page. For possible adware/spyware...

Please download, install and update the following software...

Ad-aware SE v1.06
http://www.lavasoft.de/
http://www.lavasoftusa.com/

SpyBot Search and Destroy v1.4
http://security.kolla.de/

After the software is updated, I suggest scanning the system in Safe Mode.

I also suggest downloading, installing and updating BHODemon for any Browser Helper Objects
that may be on the PC.

BHODemon
http://www.definitivesolutions.com/bhodemon.htm


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


OK, I tried everything! I followed every step for procedure #1 at the claymania site and I also dl, installed and ran SpyBot S&D and BHODemon. Some of the programs got rid of a BUNCH of junk, others found nothing at all. Still, my sweet little message comes up when I reboot and Norton finds that nasty little virus we know as Trojan.Alemod! BTW - I ran the sfc /scannow correctly, that last reply just had a typo in it. (sfs /scannow). Well, now what? I've been looking at other posts that seem to have a slightly similar problem, and was wondering if some of the solutions you and others were offering would work for me since the last did not? i.e. deleting the wininet.dll file altogether, re-dl Service Pack 1 for WinXP or a patch or something...?, or what? Also, don't know if this makes a difference or not, I did a search for the file wininet.dll (found several) and oleadm.dll (found none). My computer seems to act ok right now, the only problem I have is that annoying little box

alerting me to the fact that NAV has detected a virus on my computer. Once in awhile it seems to slow down. However, I feel it's only a matter of time before something goes drastically wrong!

Thanks for any help!! (anyone)
lp