From: "lp" <
[email protected]>
| Thanks for replying, however, I have a few things to add that I forgot to
| mention earlier.
|
| 1. According to this site:
|
http://securityresponse.symantec.com/avcenter/venc/data/trojan.alemod.html
|
| once the virus has executed, it changes a few files and adds some values to
| the registry, however, it apparently hasn't been executed on my computer
| because none of those values were in the registry when I tried to follow
| their instructions. Also, the antivirus program finds only Trojan.Alemod, not
| Trojan.Desktophijack.B like it says it would if Trojan.Alemod had been
| executed.
|
| 2. Every time I open IE, it triggers my Spyware Doctor program to open up,
| or at least something that looks like my Spyware Doctor program. The program
| is closed prior to opening IE and the preferrences are set to keep it
| disabled.
|
| 3. If none of this matters and your instructions remain the same, could you
| please ellaborate on "Execute; sfc/scannow" and finally,
|
| 4. If I still should follow the directions in the first link you've included
| here, (
http://www.claymania.com/removal-trojan-adware.html) and I already
| have an antispyware program (2 actually) and an antivirus program that has
| detected the virus already, do I still need to dl those 4 items that it
| instructs me to? (i.e. McAfee Stinger, Trend Sysclean Package, Latest Trend
| Virus Pattern Files & Ad-Aware SE)
|
| Thanks for your help!
|
| lp
1. Alemond is similar to Trojan.Desktophijack.B in what it does with the DLL file.
2. You may have something going on with IE such as adware/spywware.
3. Start --> run;
enter; sfc /scannow
If the DLL was replced, the System File Checkert (SFC) will replce it from a backup
location.
4. Do follow step #2 on the Claymania page. For possible adware/spyware...
Please download, install and update the following software...
Ad-aware SE v1.06
http://www.lavasoft.de/
http://www.lavasoftusa.com/
SpyBot Search and Destroy v1.4
http://security.kolla.de/
After the software is updated, I suggest scanning the system in Safe Mode.
I also suggest downloading, installing and updating BHODemon for any Browser Helper Objects
that may be on the PC.
BHODemon
http://www.definitivesolutions.com/bhodemon.htm
--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm
OK, I tried everything! I followed every step for procedure #1 at the claymania site and I also dl, installed and ran SpyBot S&D and BHODemon. Some of the programs got rid of a BUNCH of junk, others found nothing at all. Still, my sweet little message comes up when I reboot and Norton finds that nasty little virus we know as Trojan.Alemod! BTW - I ran the sfc /scannow correctly, that last reply just had a typo in it. (sfs /scannow). Well, now what? I've been looking at other posts that seem to have a slightly similar problem, and was wondering if some of the solutions you and others were offering would work for me since the last did not? i.e. deleting the wininet.dll file altogether, re-dl Service Pack 1 for WinXP or a patch or something...?, or what? Also, don't know if this makes a difference or not, I did a search for the file wininet.dll (found several) and oleadm.dll (found none). My computer seems to act ok right now, the only problem I have is that annoying little box