WS2_32.dll TSR.Win32 Virus

This morning I open my PC and AMON found this...

 

Hi PnP,

Hmm that dll points to the windows socket.

Did you experienced a sudden reboot the last few days?

And more importantly did you click on an email attachment the last few days, and experienced something suspicious?

Thnx!

Cheers,

 

Hi Unzy,
thanks for your quick reply... No in this day I cannot recieve any email suspicius... I recieve only email from work but it's secure..

Sorry but If scan this file with other antivirus cannot find any virus.... How repair this file? Is it possible?

The reboot of my PC is normal..

 

Hi PnP,

It would have been nice if you had stated that this was discussed before.
http://www.wilderssecurity.com/showthread.php?t=22996

Regards,

Pieter

 

Hi Pieter,
thanks for your reply.. I have already read the post but cannot resolve my problem... I have already sent the email with this file to eset for investigate..

I have set the NOD32 with the defaults option...

 

Then I would advise to wait for Eset's answer.
They are the virus specialists, right?
I'm sure they are working on it and will get back to you.

Regards,

Pieter

 

Ok I hope.... Because it's not very beatiful say that have virus on my PC

Thanks for you support Pieter

Where I can find this file original? thanks

 

What version of Windows are you running and do you have a CD-ROM for it?
And, as noted before, the warning says "probable", so replacing it may not be necessary.

Regards,

Pieter

 

Thanks Pieter

I Have Windows XP SP1 USA

 

Hi PnP,

This is at your own risk. I normally advise this program for XP computers with a totally ruined Winsock. If it backfires, you could end up having to remove and reinstall your network card.
Download and run: http://members.shaw.ca/techcd/WinsockXPFix.exe

Keep us posted,

Pieter

 

Ok I will tested at my risk now

Thanks for help

 

Hello,

Did you save the old version of the file before ? I'd really like to have a copy
of it for analysis before you repair/replace it (I think and hope this kind of request is not
forbidden by the forum's policy). I also would be very interested by knowing
what eset people will answer to you

If it's OK for you you can send it to tweakie-at-mail.nu (preferably in a password
protected .zip archive).

Regards,

--
Tweakie

 

PnP,

Before you use the program, make a Manual Restore Point and disconnect from, the internet, please.

Regards,

Pieter

 

I have already make a backup of win, and disconnect from internet..

I fixed with your program and now IMON has reinstalled for work..

Now the filex isn't infected.. I will test PC for a bit hour and I hope that problem is fixed

Thanks Pieter for fix and help

 

Excellent. Keep us posted on Eset's response.

Pieter

 

Ok When recieve the reply I will posted the email here

Thanks for support and help to all