Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

BloodHound Virus on File Wininet.DLL


  • Please log in to reply

#1
Gween

Gween

    New Member

  • Member
  • Pip
  • 5 posts
I cant Quarantine it, I cant delete it..and I need a Password to Change it...

Its WINDOWS/System 32/Wininet.DLL

What can I do now? :tazz:

I have WIN XP.

Edited by Gween, 10 July 2005 - 06:20 PM.

  • 0

Advertisements


#2
makai

makai

    Portlock - Oahu

  • Member
  • PipPipPipPipPip
  • 2,793 posts
Wininet.dll is a system file. Not recommended you delete it. So, don't do it!

I am not "allowed" to give you malware advice. But someone will probably come by and ask you to post in the Malware forum. :tazz:

makai
  • 0

#3
Gween

Gween

    New Member

  • Topic Starter
  • Member
  • Pip
  • 5 posts
Thanks..

PLEASE someone help..

Edited by Gween, 10 July 2005 - 05:14 PM.

  • 0

#4
coachwife6

coachwife6

    SuperStar

  • Retired Staff
  • 11,413 posts
Is it on you r98 or xp?
  • 0

#5
coachwife6

coachwife6

    SuperStar

  • Retired Staff
  • 11,413 posts
Upload a copy of wininet to thespykiller. Label the topic '(either xp or 98)wininet'. thumbsup.gif

Just go to the Uploads section and start a new topic, click the browse button and navigate to and select the file, then add subject and a link to this topic and post.

http://www.thespykiller.co.uk/forum/
  • 0

#6
Gween

Gween

    New Member

  • Topic Starter
  • Member
  • Pip
  • 5 posts
Im sorry, I really dont get what you want me to do.

ALSO! MY DESKTOP IS HIJAKED it seems! :tazz:

Also on display I only have two settings..Screensaver and screen resolution.

WHATS GOING ON!!!!???

Edited by Gween, 10 July 2005 - 06:10 PM.

  • 0

#7
coachwife6

coachwife6

    SuperStar

  • Retired Staff
  • 11,413 posts
1. Is it on a 98 machine or your xp machine?
2. Find the wininet.dll file on your machine and then go to this site:

http://www.thespykiller.co.uk/forum/

Go to the Uploads section and start a new topic and upload a copy of your wininet.dll to the link.

Label the topic either:

98 wininet.dll
or
xp wininet.dll

(It depends if it's on a 98 machine or an xp machine)
  • 0

#8
Gween

Gween

    New Member

  • Topic Starter
  • Member
  • Pip
  • 5 posts
I said on my first Post it was on XP.
  • 0

#9
coachwife6

coachwife6

    SuperStar

  • Retired Staff
  • 11,413 posts
I apologize. Please label it wininet xp

I said on my first Post it was on XP.


  • 0

#10
Gween

Gween

    New Member

  • Topic Starter
  • Member
  • Pip
  • 5 posts
So I must register at that place?

ALSO, My DISPLAY SETTINGS only have tow tabs, Screensaver and Resolution..WHAT GIVES?

So I cant change my Wallpapers.

Edited by Gween, 10 July 2005 - 07:56 PM.

  • 0

#11
Eelco

Eelco

    New Member

  • Member
  • Pip
  • 1 posts
Hello, this is a pretty nasty trojan that tries to trick you into downloading a program PS guard. I am having trouble with it myself, I hope I can get it fixed myself now after much reading on the net.

Some info here that may help:

http://www.antivirus...s/smitfraud.php

Here somebody with the same problem, infected wininet.dll and trojan dynamic linked libraries oleadm.dll, oleadm32.dll and a trojan program intel32.exe are the main culprits that you have to get rid of. Wininet.dll is a Windows systemfile, you cannot simply delete it, you must get a clean copy of it from your backup files after you have removed the trojans. With antispyware software that this victim is using it is easier to see what exactly is infected.

http://forums.spywar...t=

You have to know what you are doing if you want to get rid of it, and make new entries in the Registry etc. so maybe it is best to post in a specialized forum. My system is with Windows 98, so I'm afraid I can't give you exact instructions on how to get rid of it on a Windows XP computer.

Success, Eelco
  • 0

#12
b3rusty

b3rusty

    New Member

  • Member
  • Pip
  • 4 posts
well i have the same problem you do, on an xp like you. i just went to that link posted above: http://www.antivirus...s/smitfraud.php

and read that it adds a registry key, so i went to start run, typed in regedit.exe and navigated to the exact key that it said this software/virus adds, at: HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows\ CurrentVersion\ Uninstall\ Internet update
and i deleted the whole [bleep] thing. this seemed to solve about a third of my problem, but never the less it is still improvement. it got my desktop back to normal and under the properties on the desktop all the tabs have come back. i still have no internet connection, and am unable to even ping my modem. if you find anything else out about the other problems, like why is the anti virus software i had installed still telling me that it is unable to repair the w32.desktophijack file and that the wininet.dll is still infected. but yeah let me know please if you come up with anything. thanks,

~bbr
  • 0

#13
coachwife6

coachwife6

    SuperStar

  • Retired Staff
  • 11,413 posts
eelco and b3rusty:

if you need help, please start a new topic in the malware section after reading

this
  • 0

#14
justsumguru

justsumguru

    Member

  • Member
  • PipPip
  • 20 posts
If I am having the same problem, do I add my post here or do I post a new thread topic?

Windows XP Home
Symantec Antivirus is picking up that the wininet.dll is infected with W32.Desktophijack.

A bit of history.

I managed to get rid of intell32.exe and ps guard and a host of other spy ware.

Spy sweeper found 225 things.
I just installed Adaware SE Pro. Should I run that?

This thing is pain. :tazz: And it's not even my computer. ;)

Thanks

BTW: I have posted my wininet.dll file in the forum where you said to post it and pointed back to this thread.

Edit to my post.
I'm pretty comfortable editing .dll's and the registry. Can't I just remove the NUL-C:\program files\mywebssearch\bar\1.bin\mwsoestb.dll and mwsoemon.exe code lines?

Edited by justsumguru, 01 August 2005 - 06:58 AM.

  • 0

#15
coachwife6

coachwife6

    SuperStar

  • Retired Staff
  • 11,413 posts

If I am having the same problem, do I add my post here or do I post a new thread topic?


Post a new thread in the malware section. Thanks for asking. :tazz:
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP