Virus Advice

Discussion in 'PC Help Desk' started by Raven, Mar 16, 2006.

  1. Raven

    Raven Well-Known Member

    Need advice on cleaning out (2) viruses that is in my sons laptop
    He let his older brother borrow it and they downloaded them in some program
    one is called oleext.dll((Trojan.Desktophijack)
    the other is wininet.dll(Trojan.Alemod)
    Norton AntiVirus can't repair or delete them
    need advice
     
  2. appcomm

    appcomm Well-Known Member

    Raven,

    A good way to attack this problem is to use Trend Micro's online virus scan called HouseCall. It will often take care of the problem. You can find it at:

    http://housecall.trendmicro.com/


    After you have run HouseCall and the PC is clean, I would advise removing and reinstalling Norton Antivirus, as it may very well have corrupted Norton's.

    BTW, just read your message again. If Norton's says that they can't be repaired or deleted, but it DOES say they were quarantined, then you should be OK. As long as Norton's moves it into quarantine, you should be pretty well off, but I would still recommend running HouseCall for a second opinion!

    And, if you are running Windows XP, you might also want to "roll back" to a previous recovery point, prior to the virus showing up, which can also help in setting things straight. You can find that by clicking on START, HELP, SYSTEM RESTORE.

    Hope that helps!
     
  3. Raven

    Raven Well-Known Member

    Norton can't quarantine ,repair or delete it
    when I try to go anywhere ,can not find server page comes up
     
  4. Raven

    Raven Well-Known Member

    The virus may be in( Windows/Schedlgu.txt) and( Windowsupdate.log)
     
  5. Devildog

    Devildog Well-Known Member

    Does anyone here recommend PC-cillin antivirus
     
  6. Devildog

    Devildog Well-Known Member

    I was just wondering because I am looking for a antivirus and I am interested in Mcafee, but Pc-cillin by Trend Micro advertised Wi-Fi intrusion detection.
     
  7. appcomm

    appcomm Well-Known Member

    Raven,

    Unfortunately you have some nasty ones on that PC - in terms of getting rid of them. They really cause a mess, including adding entries to your HOSTS file, which is what is preventing you from getting onto the web sites properly.

    The links below provide information on the removal of the viruses you are dealing with:

    http://www.symantec.com/avcenter/venc/data/trojan.alemod.html
    http://www.symantec.com/avcenter/venc/data/trojan.desktophijack.html

    As the instructions involve the editing of the Registry files, Hosts file, etc., if you don't feel comfortable with that, you may want to have it serviced by a local tech.

    Removing the bogus Hosts file entries first would likely allow you to access the Trend Micro HouseCall. If you could run that, it would likely clean this up for you.
     
  8. appcomm

    appcomm Well-Known Member

    I agree. Norton used to be good, but it is so bloated now that each new version causes additional problems and it is a drain on resources. Same with Macafee.

    AVG has a smaller footprint, does what it is supposed to (protect from viruses) and stays out of the way for the most part. Plus their pricing model is better than Norton's or Macafees.
     
  9. ddrdan

    ddrdan Well-Known Member

    DO NOT ATTEMP A SYSTEM RESTORE!!!! This trojan changes the registry entries on the restore process if you attempt to do one.

    The trojan also executes Internet Explorer, without displaying any windows, and then puts code into the Internet Explorer processes' memory space that loads " oleext.dll ", allowing it to hide its presence from the user. This is a pre-stage rootkit.

    OLEEXT.dll is a Windows file but it is infected
    wininet.dll is a trojan

    This tool is made especially for this trojan in Win 2000 & XP only. If you not real good with PC's get some help hwen using this software. Download http://noahdfear.geekstogo.com/click counter/click.php?id=1 and save the file to your desktop. Close all other app's and Double click on the file to extract it to it's own folder on the desktop.

    Next, reboot your computer in Safe Mode:

    Open the "smitRem" folder, then double click the "RunThis.bat" file to start the tool. Follow the prompts on screen. Your desktop and icons will disappear and then reappear again --- this is normal. The XP theme may change to the Classic Windows theme. This can be changed on the themes tab of desktop properties when the fix is done.

    Wait for the tool finish --- this may take a while; be patient. Get a cup of coffee and walk away from it for a while.

    Good Luck,
    DDR Dan
     
  10. Devildog

    Devildog Well-Known Member

    Maybe I'm just thinking into it too much. My wife is using the laptop at school and that is why the Wi-fi connection thought came to me. I was just wondering if there is a way to get around the antivirus on the laptop.
     
  11. Raven

    Raven Well-Known Member

    DD,so you're the laptop man :D
    Let me take a page from some of these ,,,,Hey DD ,man check your PM,
    :lol:
     

Share This Page