[juicy1]

The box appeared but then quickly closed...so I don't think it worked.

[Advertisements]

Copy everything in the code box below and paste it into notepad. Go up to "File > Save As..." and click the drop-down box to change the "Save As Type" to "All Files". Save it as wininet.bat on your desktop.

dir %Systemdrive%\wininet.dll /a h /s > files.txt
start notepad files.txt

Double click wininet.bat and when it is ready it will open files.txt
Copy the content of files.txt and paste it here.

[Justin]

Copy everything in the code box below and paste it into notepad. Go up to "File > Save As..." and click the drop-down box to change the "Save As Type" to "All Files". Save it as wininet.bat on your desktop.

dir %Systemdrive%\wininet.dll /a h /s > files.txt
start notepad files.txt

Double click wininet.bat and when it is ready it will open files.txt
Copy the content of files.txt and paste it here.

[juicy1]

files.txt was blank.

[Justin]

Copy everything in the code box below and paste it into notepad. Go up to "File > Save As..." and click the drop-down box to change the "Save As Type" to "All Files". Save it as wininet.bat on your desktop.

cd c:\ 
dir \wininet.dll /a h /s > files.txt 
start notepad files.txt

Double click wininet.bat and when it is ready it will open files.txt
Copy the content of files.txt and paste it here.

[juicy1]

volume in drive c has nolabel.
Volume Serial Number is 6043-8AE9

Directory of C:\Program Files]AT&T\WnClient\Programs

01/13/2003 07:55 PM 459,024 WININET.DLL
1 File(s) 459,024 bytes

Directory of C:\Program Files\USMLE\Step3 CCS\tutorial

06/17/3003 11:58 AM 480,528 wininet.dll
1 File(s) 480,528 bytes

Directory of C:\WINDOWS\system32\dllcache

02/06/2004 10:05 PM 588,288 WININET.DLL
1 File(s) 588,288 bytes

Total Files Listed:
3 File(s) 1,527,840 bytes
0 Dir(s) 59,874,488,320 bytes free

[Justin]

Hello!

Navigate to

Directory of C:\WINDOWS\system32\dllcache\WININET.DLL

Highlight Wininet.dll and press CTRL-C

Then navigate to C:\Windows\System32

and press Ctrl-V

That should solve the wininet.dll issues.

[juicy1]

Thanks! Computer works again.

Here's the new pandascan log:


Incident Status Location

Adware:adware/azesearch No disinfected C:\DOCUMENTS AND SETTINGS\BRIAN LEUNG\FAVORITES\SPORTS\Baseball news.url
Adware:adware/ilookup No disinfected C:\DOCUMENTS AND SETTINGS\BRIAN LEUNG\FAVORITES\Gambling
Adware:adware/cws No disinfected Windows Registry
Hacktool:Hacktool/Processor No disinfected C:\Documents and Settings\Brian Leung\Desktop\spyware\l2mfix.exe[Process.exe]
Virus:Trj/Qhost.AX Disinfected C:\Documents and Settings\Brian Leung\Local Settings\Temp\73C.tmp
Virus:Trj/Qhost.AX Disinfected C:\Documents and Settings\Brian Leung\Local Settings\Temp\73D.tmp

[Justin]

1) Please download the Killbox.
Unzip it to the desktop but do NOT run it yet.

2) Then please reboot into Safe Mode by restarting your computer and pressing F8 as your computer is booting up. Then select the Safe Mode option.

3) Once in Safe Mode, please run Killbox.

4) Select "Delete on Reboot".

5) Open the text file with these instructions in it, and copy the file names below to the clipboard by highlighting them and pressing Control-C:

C:\DOCUMENTS AND SETTINGS\BRIAN LEUNG\FAVORITES\SPORTS\Baseball  C:\DOCUMENTS AND SETTINGS\BRIAN LEUNG\FAVORITES\Gambling
C:\Documents and Settings\Brian Leung\Local Settings\Temp\73C.tmp
C:\Documents and Settings\Brian Leung\Local Settings\Temp\73D.tmp

6) Return to Killbox, go to the File menu, and choose "Paste from Clipboard".

7) Click the red-and-white "Delete File" button. Click "Yes" at the Delete on Reboot prompt. Click "No" at the Pending Operations prompt.

If you receive a message such as: "Component 'MsComCtl.ocx' or one of its dependencies not correctly registered: a file is missing or invalid." when trying to run TheKillbox, click here to download and run missingfilesetup.exe. Then try TheKillbox again..

Let the system reboot.

[juicy1]

Thank you very much!

I think my computer's finally clean.

Thanks for all your help!

[Justin]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.