trojan.alemod virus on my damn pc...

[Spaz]

what the hell i follow norton anti virus directions to remove this bastage and it still is on my god damn pc...ARGH!!!

any idea's advice... any thing?!

[Spaz]

any one?!

[Motrv8d Steve]

are you sure it's a virus?
some of that crap is spyware and from what I've heard Norton won't kill all spyware.
You might have to get a Spyware application like Spy Sweeper.

But I'm a mac guy and I don't have to worry about that shit. Wish I could help.

[foshizl]

Did you edit all the registry keys like it says?....

MANUAL REMOVAL:

1. Disable System Restore (Windows Me/XP). [how to]
2. Update the virus definitions.

3. Restart the computer in SafeMode.
4. Run a full system scan.
5. Delete any values added to the registry.

Navigate to the subkey and delete values:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Se ssion Manager
Values:
"AllowProtectedRenames" = "1"
"PendingFileRenameOperations" = "\??\%System%\oleadm32.dll !\??\%System%\wininet.dll"

Navigate to the subkey and delete value:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run
Value: "WindowsFZ" = "[path to executable file]"

Navigate to the subkey and delete values:
HKEY_CURRENT_USER\Control Panel\Desktop
Values:
"WallpaperStyle" = "0"
"Wallpaper" = "%System%\wp.bmp"

Navigate to the subkey and delete values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\System
Values:
"NoDispAppearancePage" = "1"
"NoDispBackgroundPage" = "1"

Navigate to the subkey and delete value:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer
Value: "NoActiveDesktopChanges" = "1"

Navigate to and delete the registry keys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\Internet update
HKEY_CLASSES_ROOT\CLSID\{357A87ED-3E5D-437d-B334-DEB7EB4982A3}

5. Exit the Registry Editor and restart the computer.

***If it makes changes to Windows registry that may prevent you from running executable files. A tool to reset registry values to the default value is available for download. Click Here.


6. Download a clean copy of wininet.dll here. Unzip and save to your desired location.



7. Go to C:\Windows\System32\ , look for the infected wininet.dll file and replace it with the clean copy you have just downloaded.

Note: You must be in SafeMode to successfully replace the file.



8. Restart the computer

[ReBop]

Boot to System

C:\

Format c: /u

[Spaz]

Did you edit all the registry keys like it says?....

MANUAL REMOVAL:

1. Disable System Restore (Windows Me/XP). [how to]
2. Update the virus definitions.

3. Restart the computer in SafeMode.
4. Run a full system scan.
5. Delete any values added to the registry.

Navigate to the subkey and delete values:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Se ssion Manager
Values:
"AllowProtectedRenames" = "1"
"PendingFileRenameOperations" = "\??\%System%\oleadm32.dll !\??\%System%\wininet.dll"

Navigate to the subkey and delete value:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run
Value: "WindowsFZ" = "[path to executable file]"

Navigate to the subkey and delete values:
HKEY_CURRENT_USER\Control Panel\Desktop
Values:
"WallpaperStyle" = "0"
"Wallpaper" = "%System%\wp.bmp"

Navigate to the subkey and delete values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\System
Values:
"NoDispAppearancePage" = "1"
"NoDispBackgroundPage" = "1"

Navigate to the subkey and delete value:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer
Value: "NoActiveDesktopChanges" = "1"

Navigate to and delete the registry keys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\Internet update
HKEY_CLASSES_ROOT\CLSID\{357A87ED-3E5D-437d-B334-DEB7EB4982A3}

5. Exit the Registry Editor and restart the computer.

***If it makes changes to Windows registry that may prevent you from running executable files. A tool to reset registry values to the default value is available for download. Click Here.


6. Download a clean copy of wininet.dll here. Unzip and save to your desired location.



7. Go to C:\Windows\System32\ , look for the infected wininet.dll file and replace it with the clean copy you have just downloaded.

Note: You must be in SafeMode to successfully replace the file.



8. Restart the computer

yup... did all that shit... as soon as windows came back on, norton poped up the virus alert box...i can't kill this fucker...

[Spaz]

Damn It!!! Useless Norton!!!...

[nhraformula]

did you try system restore?

[tpilews]

Go to google and search for Trend Micro Housecall.

It is an online virus + spyware scan. Make sure you check the auto fixed box.

You are right, Norton is worthless, that's why I switched to AVG, which is also free.

[Spaz]

Go to google and search for Trend Micro Housecall.

It is an online virus + spyware scan. Make sure you check the auto fixed box.

You are right, Norton is worthless, that's why I switched to AVG, which is also free.

well i tried that and it didn't do shit...

[JWBZ SVT]

Just last weekend my friend had to completely wipe my computer and start over from scratch. I had a "groove virus". I lost almost everthing! I was able to save a few pics and outlines for only 2 of my classes, which means I lost outlines for my other 2 classes. Losing an outline in law school is like tring run a marathon with your leg amputated.

Viruses SUCK. WTH do people do that crap for anyway? What's to be gotten from it? I sure hope you come out better than I did!!

[ss~zoso~ss]

post a link to the virus , i got a mac, sux for you

[rbob93]

did you try system restore?

For this type virus you would need to turn it off during the removal process.

[OSU Buckeyes]

I use Trend Micro and Spy Sweeper and never get anything on my pc except for an occasional bs cookie or so, I look at porn and all kinds of shit. The two best programs I've ever bought. Fuck Norton.

[FSANE]

I use Trend Micro and Spy Sweeper and never get anything on my pc except for an occasional bs cookie or so, I look at porn and all kinds of shit. The two best programs I've ever bought. Fuck Norton.

same here.