WS2_32.dll TSR.Win32 Virus

Discussion in 'NOD32 version 2 Forum' started by PnP, Mar 2, 2004.

Thread Status:
Not open for further replies.
  1. PnP

    PnP Registered Member

    Joined:
    Jun 12, 2003
    Posts:
    194
    Location:
    Italy
    This morning I open my PC and AMON found this...
     

    Attached Files:

  2. Unzy

    Unzy Registered Member

    Joined:
    Nov 2, 2003
    Posts:
    1,098
    Location:
    Belgium
    Hi PnP,

    Hmm that dll points to the windows socket.

    Did you experienced a sudden reboot the last few days?

    And more importantly did you click on an email attachment the last few days, and experienced something suspicious?

    Thnx!

    Cheers,
     
  3. PnP

    PnP Registered Member

    Joined:
    Jun 12, 2003
    Posts:
    194
    Location:
    Italy
    Hi Unzy,
    thanks for your quick reply... No in this day I cannot recieve any email suspicius... I recieve only email from work but it's secure..

    Sorry but If scan this file with other antivirus cannot find any virus.... How repair this file? Is it possible?

    The reboot of my PC is normal..
     
  4. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,332
    Location:
    Netherlands
    Hi PnP,

    It would have been nice if you had stated that this was discussed before.
    http://www.wilderssecurity.com/showthread.php?t=22996

    Regards,

    Pieter
     
  5. PnP

    PnP Registered Member

    Joined:
    Jun 12, 2003
    Posts:
    194
    Location:
    Italy
    Hi Pieter,
    thanks for your reply.. I have already read the post but cannot resolve my problem... I have already sent the email with this file to eset for investigate..

    I have set the NOD32 with the defaults option...
     
  6. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,332
    Location:
    Netherlands
    Then I would advise to wait for Eset's answer.
    They are the virus specialists, right?
    I'm sure they are working on it and will get back to you.

    Regards,

    Pieter
     
  7. PnP

    PnP Registered Member

    Joined:
    Jun 12, 2003
    Posts:
    194
    Location:
    Italy
    Ok I hope.... Because it's not very beatiful say that have virus on my PC :)

    Thanks for you support Pieter

    Where I can find this file original? thanks
     
  8. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,332
    Location:
    Netherlands
    What version of Windows are you running and do you have a CD-ROM for it?
    And, as noted before, the warning says "probable", so replacing it may not be necessary.

    Regards,

    Pieter
     
  9. PnP

    PnP Registered Member

    Joined:
    Jun 12, 2003
    Posts:
    194
    Location:
    Italy
    Thanks Pieter :)

    I Have Windows XP SP1 USA
     
  10. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,332
    Location:
    Netherlands
    Hi PnP,

    This is at your own risk. I normally advise this program for XP computers with a totally ruined Winsock. If it backfires, you could end up having to remove and reinstall your network card.
    Download and run: http://members.shaw.ca/techcd/WinsockXPFix.exe

    Keep us posted,

    Pieter
     
  11. PnP

    PnP Registered Member

    Joined:
    Jun 12, 2003
    Posts:
    194
    Location:
    Italy
    Ok I will tested at my risk now :)

    Thanks for help
     
  12. Tweakie

    Tweakie Registered Member

    Joined:
    Feb 28, 2004
    Posts:
    90
    Location:
    E.U.
    Hello,

    Did you save the old version of the file before ? I'd really like to have a copy
    of it for analysis before you repair/replace it (I think and hope this kind of request is not
    forbidden by the forum's policy). I also would be very interested by knowing
    what eset people will answer to you :)

    If it's OK for you you can send it to tweakie-at-mail.nu (preferably in a password
    protected .zip archive).

    Regards,

    --
    Tweakie
     
  13. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,332
    Location:
    Netherlands
    PnP,

    Before you use the program, make a Manual Restore Point and disconnect from, the internet, please.

    Regards,

    Pieter
     
  14. PnP

    PnP Registered Member

    Joined:
    Jun 12, 2003
    Posts:
    194
    Location:
    Italy
    I have already make a backup of win, and disconnect from internet..

    I fixed with your program and now IMON has reinstalled for work..

    Now the filex isn't infected.. I will test PC for a bit hour and I hope that problem is fixed

    Thanks Pieter for fix and help :)
     
  15. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,332
    Location:
    Netherlands
    Excellent. Keep us posted on Eset's response. :)

    Pieter
     
  16. PnP

    PnP Registered Member

    Joined:
    Jun 12, 2003
    Posts:
    194
    Location:
    Italy
    Ok When recieve the reply I will posted the email here :)

    Thanks for support and help to all
     
Thread Status:
Not open for further replies.