winihetd.exe????

Today my Norton 2003 found a file that it said had a virus. The file name is windows/system/wininetd.exe. I tried to have Norton AV quarantine it and it said it couldn't. It said it couldn't delete it either. When I went to "find file ", the Norton window popped back up and when I said to delete it, the system crashed. After I rebooted, the Norton AV window popped back up on it's own and said the problem was now fixed, and to click Ok to go on.
So, what is (was) this file for anyway, and do I need to download a good one from someplace else? bbne

 

It is a virus!

Norton could not remove it while in use. Was able to do it on next boot.

See this:
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.winet.html

I would update virus scanner and do a full scan now!

Mike

 

Thanks flynner. I was doing the weekly full scan when NAV found it. I have "live update" and it just ran this afternoon. I see that the symantec fix is dated May 21, 2003 or something like that. So am I covered or should I run NAV again. Also the Symantec article you referred to said I need to fix the register, right?? bbne

 

The registry was fixed by Norton. The mention on the link was if you had to do a manual fix.

Should be OK now.

The ref to May 23 is when the norton fix for this was included in the update files.

Mike

 

Thanks for the info & new question

Thanks for the explanation. I did go into my registry and didn't see anything like NAV described.
Another question, awhile back I accidently downloaded something off from email that put a program and a bunch of files on my computer under the name of "Enjoy It ". I should have probably gotten rid of it with the control panel 'uninstall', however I deleted everything by using find file and wildcards and the windows explorer. The only left over thing I see now is in 'Internet Explorer' Tools, there is a line in "Tools" right above internet options in the drop down menu that says 'Enjoy It'. How can I get rid of something like that in the drop down menu?? Of course it won't run, and I don't want it to, because all the program files have been deleted.
Thanks again for letting me pick your brain. bbne

 

Here are all the tools you need. I reccomend you run them all but at least SpyBot and HiJackThis.

I would run Registy cleaners last after you have cleaned everything else.

Spyware and adware removal

SpyBot http://security.kolla.de/index.php?lang=en&page=download
Run this twice delete all it finds. Leave all it wants to leave after the second run.

HiJackThis: http://www.tomcoyote.org/hjt/

Spider: http://www.fsm.nl/ward/

Registry and System cleaners

RegCleaner

http://www.vtoy.fi/jv16/shtml/regcleaner.shtml

Look in first 2 cols for programs you thought you uninstalled or removed, these are the dregs left by the uninstaller.

Also tag and remove any that you are POSITIVE are not supposed to be on your computer.

After removing these go to the top Tools-Registry Cleanup-Do them all. Delete all it finds.

EasyClean1.7
http://gswi.com/downloads.htm

Run only unnecessary files and registry clean delete all it finds. If you have ME or XP in the "Unnessesary Files" type the word HELP in the skip box. Do not do Duplicate files!

RegScrubXP http://www.lexunfreeware.com/LexunFreeware.htm
NOTE: W2K and XP only!

Select RegScrub finds problems and remove all it finds.

Mike

 

Thanks again

to mflynn, Got rid of the extra entry in IE Tools pull-down, and a bunch of other "old stuff" with the hijack download. No ill effects that I can see so far. I also ran spybot and adaware. Seems like I am clean. Do I just leave hijack on my drive or remove it? kudos to you, bbne

 

All of these tools should stay and you should use them regularly as maintenance and cleanup.

Once a month or so, or especially and immediately at the first sign of trouble.

Mike