Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Help with trojan.agent.eo, psguard,intel.32 please [CLOSED]


  • This topic is locked This topic is locked

#16
able195

able195

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts
It won't let me rename it: Access denied.
  • 0

Advertisements


#17
therock247uk

therock247uk

    Expert

  • Expert
  • 14,671 posts
  • MVP
Are you logged in as an administrator account?
  • 0

#18
able195

able195

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts
Sure am!
  • 0

#19
able195

able195

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts
I have managed to rename it. On reboot it does not set up a new wininet.dll file. Nortons has now picked it up, quarantined it but cannot repair it?

Currently I am trying to load sP@. See how I go and whether it will load another one. At the moment, the internet etc will not work wothout wininet.dll.

Will let you know what happens - any other ideas?

Thanks,
Gavin
  • 0

#20
able195

able195

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts
Hi again,

Won't install sPT - something about cryptographis services not running. Most things eg norton etc won't run without wininet.dll.

???
  • 0

#21
Atribune

Atribune

    HijackThis Expert

  • Visiting Consultant
  • 956 posts
  • MVP
Hi Able195 and Rock,


Rock I hope you don't mind me jumping in here.

Able195 please follow my instructions below.

Download and run File Find:
  • Download File Find.
  • Extract the contents of FileFind.zip to a convenient location like your Desktop.
  • Double-click FileFind.exe.
  • In the "Enter the directory to search:" box, type C:\
  • In the "Enter the file to search:" box, type wininet.dll
  • Click the "Find" button.
  • Please wait while File Find searches for the file on your PC.
  • After the search is completed, click the "Export" button.
  • Exit File Find.
  • Navigate to C:\Export.txt.
  • Copy and paste all the contents of Export.txt in your next post.

Edited by Atribune, 25 July 2005 - 05:51 AM.

  • 0

#22
able195

able195

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts
Hi,

No I don't mind at all. As below from FileFind:

C:\Documents and Settings\Heidi Avolio\Desktop\havolio\WINDOWS\SYSTEM\WININET.DLL - 476432 Bytes
C:\Don't Use!!!\wininet.dll - 133 Bytes
C:\WINDOWS\system32\dllcache\wininet.dll - 588288 Bytes

Thanks!
Gavin
  • 0

#23
Atribune

Atribune

    HijackThis Expert

  • Visiting Consultant
  • 956 posts
  • MVP
Can you repeat the above steps and use wininet.* instead of wininet.dll please then post the results.
  • 0

#24
able195

able195

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts
Hi,

Here it is, run under normal windows as wininet.*

C:\Documents and Settings\Heidi Avolio\Desktop\havolio\WINDOWS\SYSTEM\WININET.DLL - 476432 Bytes
C:\Don't Use!!!\wininet.dll - 133 Bytes
C:\WINDOWS\system32\dllcache\wininet.dll - 588288 Bytes

Thanks,
Gavin
  • 0

#25
Atribune

Atribune

    HijackThis Expert

  • Visiting Consultant
  • 956 posts
  • MVP
can you go to http://virusscan.jotti.org/ and upload and scan this file

C:\WINDOWS\system32\dllcache\wininet.dll

Post the results here.
  • 0

Advertisements


#26
able195

able195

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts
Hi,

Done - results as below:

Service load:
0% 100%
File: wininet.dll
Status:
OK (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database)
MD5 4f64d1df989e3aa2fad91a2f1167b9c7
Packers detected:
-
Scanner results
AntiVir
Found nothing
ArcaVir
Found nothing
Avast
Found nothing
AVG Antivirus
Found nothing
BitDefender
Found nothing
ClamAV
Found nothing
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
Fortinet
Found nothing
Kaspersky Anti-Virus
Found nothing
NOD32
Found nothing
Norman Virus Control
Found nothing
UNA
Found nothing
VBA32
Found nothing

Thanks,
Gavin
  • 0

#27
Atribune

Atribune

    HijackThis Expert

  • Visiting Consultant
  • 956 posts
  • MVP
Hi Gavin,

Copy the text from the quotebox below and paste it into a blank notepad window.

copy  C:\WINDOWS\system32\dllcache\wininet.dll C:\windows\system32\wininet.dll


Save it to your desktop as copy.bat and save it as type all files

Next double click on copy.bat then run filefind again with the original instructions I provided, post the results back here.
  • 0

#28
able195

able195

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts
Hi,

Copies, pasted, ran, restarted, just scanning again with everything to make sure (panda as well). Looks good so far!

Back soon!

Thanks,
Gavin
  • 0

#29
able195

able195

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts
Hi,

Spybot just finished - 51 entries for smit that cannot be removed by Spybot...

Now???
  • 0

#30
Atribune

Atribune

    HijackThis Expert

  • Visiting Consultant
  • 956 posts
  • MVP
Can you find and post the spybot log?
Run Spybot again when it is done scanning right click and choose save results to file

Then in spybot click tools then view reports then view previous reports. Open the report you just saved copy the complete contents and post it here.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP