Virus on my pc

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by scully91, Sep 29, 2005.

  1. scully91

    scully91 Private First Class

    Whilst running AVG anti virus check it has come up with this :
    windows\$NtUninstallKB896727$\wininet.dll and says it has a virus called win32/nsag.
    I have done a hjt check and it doesnt appear to have any problems.
    How, please, do i get rid of the virus ?
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    That folder is just a backup folder from installing a patch. See: http://support.microsoft.com/kb/896727

    wininet.dll has been recently plagued with problems due to win32/nsag (more commonly referred to in the forums as SmitFraud). It is possible that this copy was infected too. You can safely delete that folder.

    Are you sure you do not still have Smitfraud problems elsewhere on your PC? You may want to do the below:

    Download smitRem.exe and save the file to your desktop.

    Double click on the file to extract it to it's own folder on the desktop.

    Reboot into safe mode.

    Open the smitRem folder, then double click the RunThis.bat file to start the tool. Follow the prompts on screen. Wait for the tool to complete and disk cleanup to finish.

    The tool will create a log named smitfiles.txt in the root of your drive, eg; Local Disk C: or partition where your operating system is installed. Please attach this log to your next reply.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds