DLL file appearing as Virus

[martin]

Hi

I have reformated my brother's pc last week and once i got XP back on, i
updated Win XP and my antivirus programme is telling me that a DLL file is a
virus. The file is called XWR14021.DLL. But i don't understand it. My
brother's pc has the file but not me, we both use Win XP Home but the file is
only on one pc.

Plus i had the virus on Win Vista Home Basic and it was the same file. But i
found out that it was a add-on for IE7.

What can i do to fix this problem.

[r. mccarty]

That filename does indicate it's malicious. It only takes a very few
seconds on the Internet without protection to become infected. What
Anti-Virus app do you have on this PC ? No single AV will detect &
remove 100% of the threats on the web.

One way to clean the PC is to boot to Safe Mode with Networking
and run one or more of the following online scans:
http://www.eset.com/onlinescan/
http://www.kaspersky.com/virusscanner
http://www.bitdefender.com/scan8/ie.html



"Martin" <Martin@discussions.microsoft.com> wrote in message
news:C5F68DEA-81D5-4881-8AAF-FF82A72EF441@microsoft.com...
> Hi
>
> I have reformated my brother's pc last week and once i got XP back on, i
> updated Win XP and my antivirus programme is telling me that a DLL file is
> a
> virus. The file is called XWR14021.DLL. But i don't understand it. My
> brother's pc has the file but not me, we both use Win XP Home but the file
> is
> only on one pc.
>
> Plus i had the virus on Win Vista Home Basic and it was the same file. But
> i
> found out that it was a add-on for IE7.
>
> What can i do to fix this problem.

[elmo]

Martin wrote:
> Hi
>
> I have _reformatted_ my brother's pc last week and once I got XP back on, I
> updated Win XP and my antivirus programme is telling me that a DLL file is a
> virus. The file is called XWR14021.DLL. But I don't understand it. My
> brother's pc has the file but not me, we both use Win XP Home but the file is
> only on one pc.
>
> Plus I had the virus on Win Vista Home Basic and it was the same file. But I
> found out that it was an add-on for IE7.
>
> What can I do to fix this problem.

Remove the infected file.

--
Joe =o)

[nass]

"Martin" wrote:

> Hi
>
> I have reformated my brother's pc last week and once i got XP back on, i
> updated Win XP and my antivirus programme is telling me that a DLL file is a
> virus. The file is called XWR14021.DLL. But i don't understand it. My
> brother's pc has the file but not me, we both use Win XP Home but the file is
> only on one pc.
>
> Plus i had the virus on Win Vista Home Basic and it was the same file. But i
> found out that it was a add-on for IE7.
>
> What can i do to fix this problem.

This an Adware, try to run a thorough scan with an up2date Anti-virus and
Anti-malware (full scan not Express/Quick scan!).

Go through these Cleaning steps:
1... Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button called
[ Clear History ..] click on it to clear your History caches, then click on
[Delete Files..] to delete Internet Files created over the time, click on [
Delete Cookies...] to delete your cookies left by visiting websites.

Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the Non/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit .
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
SuperAntispyware - Free
http://www.superantispyware.com/superan ... vspro.html

Run a scan from here on-line:
http://security.symantec.com/sscv6/defa ... &venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (off-line scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html

Run disk clean up then this command:
sfc /scannow

HTH,
nass

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
^^^ http://www.nasstec.co.uk ^^^^^^^^^^^^^^
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

[robert kochem]

Martin schrieb:

> I have reformated my brother's pc last week and once i got XP back on, i
> updated Win XP and my antivirus programme is telling me that a DLL file is a
> virus. The file is called XWR14021.DLL.

Have you performed an online scan of that particular file e.g. with
http://www.virustotal.com if it is really a virus and not a false alert?
Virus scanner often accuse clean files of being a virus - even original
files from Microsoft Windows.

Robert

[martin]

Hi Robert

no i didn't do a online scan but i will do one tomorrow. I will do one with
symantec. The antivirus system i use is Norton 360 and sometimes Avast 8 but
Norton is the best. I was told to remove the file but it will not remove, so
what i will do is, find out what the virus is and download the removal tool
and see if i can fix the file.

Martin

"Robert Kochem" wrote:

> Martin schrieb:
>
> > I have reformated my brother's pc last week and once i got XP back on, i
> > updated Win XP and my antivirus programme is telling me that a DLL file is a
> > virus. The file is called XWR14021.DLL.
>
> Have you performed an online scan of that particular file e.g. with
> http://www.virustotal.com if it is really a virus and not a false alert?
> Virus scanner often accuse clean files of being a virus - even original
> files from Microsoft Windows.
>
> Robert
>

[martin]

Hi R. McCarty

So is this file something to do with the internet because i found out that
the file is an add-on for the internet. I use Norton 360 v1 as my antivirus
programme and sometimes Avast 8 but Norton is the best for me. I will be
downloading an removal toll tomorrow to see if i can fix the file without
deleting it.

I will also try a online scan as well.

Thanks

Martin

"R. McCarty" wrote:

> That filename does indicate it's malicious. It only takes a very few
> seconds on the Internet without protection to become infected. What
> Anti-Virus app do you have on this PC ? No single AV will detect &
> remove 100% of the threats on the web.
>
> One way to clean the PC is to boot to Safe Mode with Networking
> and run one or more of the following online scans:
> http://www.eset.com/onlinescan/
> http://www.kaspersky.com/virusscanner
> http://www.bitdefender.com/scan8/ie.html
>
>
>
> "Martin" <Martin@discussions.microsoft.com> wrote in message
> news:C5F68DEA-81D5-4881-8AAF-FF82A72EF441@microsoft.com...
> > Hi
> >
> > I have reformated my brother's pc last week and once i got XP back on, i
> > updated Win XP and my antivirus programme is telling me that a DLL file is
> > a
> > virus. The file is called XWR14021.DLL. But i don't understand it. My
> > brother's pc has the file but not me, we both use Win XP Home but the file
> > is
> > only on one pc.
> >
> > Plus i had the virus on Win Vista Home Basic and it was the same file. But
> > i
> > found out that it was a add-on for IE7.
> >
> > What can i do to fix this problem.
>
>
>

[kelly]

Follow the manually removal instructions from here:
http://www.oral8.cn/viruscom/viruscom_36092.html

--

All the Best,
Kelly (MS-MVP/DTS&XP)

Taskbar Repair Tool Plus!
http://www.kellys-korner-xp.com/taskbarplus!.htm


"Martin" <Martin@discussions.microsoft.com> wrote in message
news:C5F68DEA-81D5-4881-8AAF-FF82A72EF441@microsoft.com...
> Hi
>
> I have reformated my brother's pc last week and once i got XP back on, i
> updated Win XP and my antivirus programme is telling me that a DLL file is
> a
> virus. The file is called XWR14021.DLL. But i don't understand it. My
> brother's pc has the file but not me, we both use Win XP Home but the file
> is
> only on one pc.
>
> Plus i had the virus on Win Vista Home Basic and it was the same file. But
> i
> found out that it was a add-on for IE7.
>
> What can i do to fix this problem.