Help with trojan.agent.eo, psguard,intel.32 please [CLOSED]
Started by
able195
, Jul 22 2005 02:45 AM
#16
Posted 24 July 2005 - 09:41 AM
#17
Posted 24 July 2005 - 09:59 AM
Are you logged in as an administrator account?
#18
Posted 25 July 2005 - 03:41 AM
Sure am!
#19
Posted 25 July 2005 - 04:32 AM
I have managed to rename it. On reboot it does not set up a new wininet.dll file. Nortons has now picked it up, quarantined it but cannot repair it?
Currently I am trying to load sP@. See how I go and whether it will load another one. At the moment, the internet etc will not work wothout wininet.dll.
Will let you know what happens - any other ideas?
Thanks,
Gavin
Currently I am trying to load sP@. See how I go and whether it will load another one. At the moment, the internet etc will not work wothout wininet.dll.
Will let you know what happens - any other ideas?
Thanks,
Gavin
#20
Posted 25 July 2005 - 05:30 AM
Hi again,
Won't install sPT - something about cryptographis services not running. Most things eg norton etc won't run without wininet.dll.
???
Won't install sPT - something about cryptographis services not running. Most things eg norton etc won't run without wininet.dll.
???
#21
Posted 25 July 2005 - 05:47 AM
Hi Able195 and Rock,
Rock I hope you don't mind me jumping in here.
Able195 please follow my instructions below.
Download and run File Find:
Rock I hope you don't mind me jumping in here.
Able195 please follow my instructions below.
Download and run File Find:
- Download File Find.
- Extract the contents of FileFind.zip to a convenient location like your Desktop.
- Double-click FileFind.exe.
- In the "Enter the directory to search:" box, type C:\
- In the "Enter the file to search:" box, type wininet.dll
- Click the "Find" button.
- Please wait while File Find searches for the file on your PC.
- After the search is completed, click the "Export" button.
- Exit File Find.
- Navigate to C:\Export.txt.
- Copy and paste all the contents of Export.txt in your next post.
Edited by Atribune, 25 July 2005 - 05:51 AM.
#22
Posted 25 July 2005 - 06:00 AM
Hi,
No I don't mind at all. As below from FileFind:
C:\Documents and Settings\Heidi Avolio\Desktop\havolio\WINDOWS\SYSTEM\WININET.DLL - 476432 Bytes
C:\Don't Use!!!\wininet.dll - 133 Bytes
C:\WINDOWS\system32\dllcache\wininet.dll - 588288 Bytes
Thanks!
Gavin
No I don't mind at all. As below from FileFind:
C:\Documents and Settings\Heidi Avolio\Desktop\havolio\WINDOWS\SYSTEM\WININET.DLL - 476432 Bytes
C:\Don't Use!!!\wininet.dll - 133 Bytes
C:\WINDOWS\system32\dllcache\wininet.dll - 588288 Bytes
Thanks!
Gavin
#23
Posted 25 July 2005 - 06:04 AM
Can you repeat the above steps and use wininet.* instead of wininet.dll please then post the results.
#24
Posted 25 July 2005 - 06:12 AM
Hi,
Here it is, run under normal windows as wininet.*
C:\Documents and Settings\Heidi Avolio\Desktop\havolio\WINDOWS\SYSTEM\WININET.DLL - 476432 Bytes
C:\Don't Use!!!\wininet.dll - 133 Bytes
C:\WINDOWS\system32\dllcache\wininet.dll - 588288 Bytes
Thanks,
Gavin
Here it is, run under normal windows as wininet.*
C:\Documents and Settings\Heidi Avolio\Desktop\havolio\WINDOWS\SYSTEM\WININET.DLL - 476432 Bytes
C:\Don't Use!!!\wininet.dll - 133 Bytes
C:\WINDOWS\system32\dllcache\wininet.dll - 588288 Bytes
Thanks,
Gavin
#25
Posted 25 July 2005 - 06:14 AM
can you go to http://virusscan.jotti.org/ and upload and scan this file
C:\WINDOWS\system32\dllcache\wininet.dll
Post the results here.
C:\WINDOWS\system32\dllcache\wininet.dll
Post the results here.
#26
Posted 25 July 2005 - 06:29 AM
Hi,
Done - results as below:
Service load:
0% 100%
File: wininet.dll
Status:
OK (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database)
MD5 4f64d1df989e3aa2fad91a2f1167b9c7
Packers detected:
-
Scanner results
AntiVir
Found nothing
ArcaVir
Found nothing
Avast
Found nothing
AVG Antivirus
Found nothing
BitDefender
Found nothing
ClamAV
Found nothing
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
Fortinet
Found nothing
Kaspersky Anti-Virus
Found nothing
NOD32
Found nothing
Norman Virus Control
Found nothing
UNA
Found nothing
VBA32
Found nothing
Thanks,
Gavin
Done - results as below:
Service load:
0% 100%
File: wininet.dll
Status:
OK (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database)
MD5 4f64d1df989e3aa2fad91a2f1167b9c7
Packers detected:
-
Scanner results
AntiVir
Found nothing
ArcaVir
Found nothing
Avast
Found nothing
AVG Antivirus
Found nothing
BitDefender
Found nothing
ClamAV
Found nothing
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
Fortinet
Found nothing
Kaspersky Anti-Virus
Found nothing
NOD32
Found nothing
Norman Virus Control
Found nothing
UNA
Found nothing
VBA32
Found nothing
Thanks,
Gavin
#27
Posted 25 July 2005 - 06:36 AM
Hi Gavin,
Copy the text from the quotebox below and paste it into a blank notepad window.
Save it to your desktop as copy.bat and save it as type all files
Next double click on copy.bat then run filefind again with the original instructions I provided, post the results back here.
Copy the text from the quotebox below and paste it into a blank notepad window.
copy C:\WINDOWS\system32\dllcache\wininet.dll C:\windows\system32\wininet.dll
Save it to your desktop as copy.bat and save it as type all files
Next double click on copy.bat then run filefind again with the original instructions I provided, post the results back here.
#28
Posted 25 July 2005 - 07:00 AM
Hi,
Copies, pasted, ran, restarted, just scanning again with everything to make sure (panda as well). Looks good so far!
Back soon!
Thanks,
Gavin
Copies, pasted, ran, restarted, just scanning again with everything to make sure (panda as well). Looks good so far!
Back soon!
Thanks,
Gavin
#29
Posted 25 July 2005 - 07:58 AM
Hi,
Spybot just finished - 51 entries for smit that cannot be removed by Spybot...
Now???
Spybot just finished - 51 entries for smit that cannot be removed by Spybot...
Now???
#30
Posted 25 July 2005 - 08:14 AM
Can you find and post the spybot log?
Run Spybot again when it is done scanning right click and choose save results to file
Then in spybot click tools then view reports then view previous reports. Open the report you just saved copy the complete contents and post it here.
Run Spybot again when it is done scanning right click and choose save results to file
Then in spybot click tools then view reports then view previous reports. Open the report you just saved copy the complete contents and post it here.
Similar Topics
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users