Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

wininet.dll


  • Please log in to reply

#1
b3rusty

b3rusty

    New Member

  • Member
  • Pip
  • 4 posts
another user had this problem and this is what i responded to him earlier, and was instructed to start a new topic, so here goes.

i guess at some point while browsing the net yesterday i (my computer) got sick. at first it was just annoying because i couldnt access the internet at all, but then i realized i had bigger problems. i have since completely fixed the wininet.dll problem following the instructions fround on another thread, i had downloaded the good one from where you specified and booted into safe mode changing the name of the bad one and pasting the good one in then rebooting normally and restarting the virus scan and quartining and deleting the bad wininet.old file. i am virus free once again, but i am still unable to connect to the internet on the machine that was sick. my isp wont help me becuase according to them this is way to technical for their specific click to automatically obtain an ip address training.

the first step i did to fix this wininet.dll problem was to go into the regedit.exe and delete the new key that the spyware added. then i did more reading and accomplished the rest of the virsu removal steps. can you help me out with this problem. it would be much appreciated. thanks,



~bbr

"well i have the same problem you do, on an xp like you. i just went to that link posted above: [url="http://www.antivirusworld.com/articles/vir...fraud.php""]http://www.antivirusworld.com/articles/vir...fraud.php"[/url]

"and read that it adds a registry key, so i went to start run, typed in regedit.exe and navigated to the exact key that it said this software/virus adds, at: HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows\ CurrentVersion\ Uninstall\ Internet update
and i deleted the whole [bleep] thing. this seemed to solve about a third of my problem, but never the less it is still improvement. it got my desktop back to normal and under the properties on the desktop all the tabs have come back. i still have no internet connection, and am unable to even ping my modem. if you find anything else out about the other problems, like why is the anti virus software i had installed still telling me that it is unable to repair the w32.desktophijack file and that the wininet.dll is still infected. but yeah let me know please if you come up with anything. thanks,

~bbr"
  • 0

Advertisements


#2
b3rusty

b3rusty

    New Member

  • Topic Starter
  • Member
  • Pip
  • 4 posts
i guess i should put my hijack log file on here so here goes:

Logfile of HijackThis v1.99.1
Scan saved at 1:32:44 PM, on 7/24/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\S3tray2.exe
C:\Documents and Settings\bronson\Desktop\killing time\hijack this\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by JENS Corporation
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_3_12_0.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [S3TRAY2] S3tray2.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll (file missing)
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE (file missing)
O9 - Extra button: Support - {A1C62740-93D5-4E72-A5B6-B668D58C5197} - C:\Program Files\Internet Explorer\SIGNUP\Presario.htm (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\fltmgr.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\fltmgr.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\fltmgr.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{BABBA799-9541-44C1-A90A-5FEEB736E479}: NameServer = _._._._,_._._._

Edited by b3rusty, 25 July 2005 - 10:02 AM.

  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP