Forum Home
Press F1
 
Thread ID: 61573 2005-09-09 08:37:00 bloodhound.W32.ep infect wininet.dll CCF (6760) Press F1
Post ID Timestamp Content User
387164 2005-09-09 08:37:00 Hi there

Hope some one here can help, just got a friend's comp here infected with bloodhound.w32.ep, whats worse is that it infected the wininet.dll file. Which from what I've been through trying to fix this is almost impossible. What I currently know is that this virus is known but AV companies but none is able to repair its infection. I have been through some sites and fourms and looked for a way to fix this but all seem too confusing, so what I thought that I may just replace or overwrite the wininet.dll file, though I read somewhere that it may cause some problems is the version is not right nor something. So if any one can help, it'll be greatly appreciated :)

His comp is running with Window XP Home with SP1 and SP2 installed and have Norton AV 2005 unregistered (dont know why) and I think its not fully updated. What makes this a harder job is that he doesnt have the recovery disk,so :S. His comp is a HP Pavilion 522a.

Thanks
CCF (6760)
387165 2005-09-09 08:45:00 bloodhound is a generic term for "we don't know what it is" ;)

i would start with another antivirus, fully upto date and go from there.
tweak'e (69)
387166 2005-09-09 08:59:00 You could have a look here (Symantec) (securityresponse.symantec.com), and try there recommendations

My recommendation, tell your mate to get a decent AV as Nortons isn't that great.
To avoid issues with a Nortons uninstall... get symnrt (service1.symantec.com) (removal tool for most of the crap Nortons leaves behind)
Myth (110)
387167 2005-09-09 11:22:00 I'll uninstall Norton and use symnrt as suggested...though as for the virus or how I can overwrite that wininet.dll file? I wouldnt mind doing it dos...though I dont know much commands...so :S

Thanks
CCF (6760)
387168 2005-09-09 11:28:00 Did you look at the first link I gave you... there are removal instructions on that page

After you uninstall Nortons, get another anti-viirus scanner. For a freebie, AVG is pretty good. If you want to pay... BitDefender Pro or Kaspersky (though its a lil slow)
Myth (110)
387169 2005-09-09 11:34:00 Have a crack at it using EWIDO Security Suite (www.ewido.net) either as an install or an online scan.
Only suitable for windows 2000 and up.
EX-WESTY (221)
387170 2005-09-09 13:56:00 If you can lay your hands on a copy of XP on CDROM, you can do a start-run
SFC /SCANNOW
which will replace that file, if it is different to the XP original one.

Download either AVG (free.grisoft.com) or Avast (www.avast.com) , then uninstall Nortons and install the other Antivirus.
pheonix (36)
387171 2005-09-10 07:33:00 Sorry there was a mistake in my forum, the AV that he had was not Norton 2005 but instead 2002 >_< (I have no idea how or why I typed 2005). Sorry about that. Norton had been uninstalled and just had Avast install and fully updated. Now when I scan that Wininet.dll file, the virus name is Win32:Nsag-B[DII]. Any suggestions on how I could remove it?

Thanks
CCF (6760)
387172 2005-09-10 07:47:00 www.viruslist.com tweak'e (69)
387173 2005-09-10 08:31:00 Thanks alot for that site, never knew just but getting rid of 1 L from the DLL can make such a difference. Thanks alot the virus is gone, now is just all these small spywares, these I can handle.

Thanks again for everyones suggestions ^^
CCF (6760)
1