Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

still infected [RESOLVED]


  • This topic is locked This topic is locked

#46
juicy1

juicy1

    Member

  • Topic Starter
  • Member
  • PipPip
  • 45 posts
The box appeared but then quickly closed...so I don't think it worked.
  • 0

Advertisements


#47
Justin

Justin

    I do a little bit of everything

  • Member
  • PipPipPipPipPip
  • 2,353 posts
Copy everything in the code box below and paste it into notepad. Go up to "File > Save As..." and click the drop-down box to change the "Save As Type" to "All Files". Save it as wininet.bat on your desktop.

dir %Systemdrive%\wininet.dll /a h /s > files.txt
start notepad files.txt

Double click wininet.bat and when it is ready it will open files.txt
Copy the content of files.txt and paste it here.
  • 0

#48
juicy1

juicy1

    Member

  • Topic Starter
  • Member
  • PipPip
  • 45 posts
files.txt was blank.
  • 0

#49
Justin

Justin

    I do a little bit of everything

  • Member
  • PipPipPipPipPip
  • 2,353 posts
Copy everything in the code box below and paste it into notepad. Go up to "File > Save As..." and click the drop-down box to change the "Save As Type" to "All Files". Save it as wininet.bat on your desktop.

cd c:\ 
dir \wininet.dll /a h /s > files.txt 
start notepad files.txt


Double click wininet.bat and when it is ready it will open files.txt
Copy the content of files.txt and paste it here.
  • 0

#50
juicy1

juicy1

    Member

  • Topic Starter
  • Member
  • PipPip
  • 45 posts
volume in drive c has nolabel.
Volume Serial Number is 6043-8AE9

Directory of C:\Program Files]AT&T\WnClient\Programs

01/13/2003 07:55 PM 459,024 WININET.DLL
1 File(s) 459,024 bytes

Directory of C:\Program Files\USMLE\Step3 CCS\tutorial

06/17/3003 11:58 AM 480,528 wininet.dll
1 File(s) 480,528 bytes

Directory of C:\WINDOWS\system32\dllcache

02/06/2004 10:05 PM 588,288 WININET.DLL
1 File(s) 588,288 bytes

Total Files Listed:
3 File(s) 1,527,840 bytes
0 Dir(s) 59,874,488,320 bytes free
  • 0

#51
Justin

Justin

    I do a little bit of everything

  • Member
  • PipPipPipPipPip
  • 2,353 posts
Hello!

Navigate to

Directory of C:\WINDOWS\system32\dllcache\WININET.DLL

Highlight Wininet.dll and press CTRL-C

Then navigate to C:\Windows\System32

and press Ctrl-V

That should solve the wininet.dll issues.
  • 0

#52
juicy1

juicy1

    Member

  • Topic Starter
  • Member
  • PipPip
  • 45 posts
Thanks! Computer works again.

Here's the new pandascan log:


Incident Status Location

Adware:adware/azesearch No disinfected C:\DOCUMENTS AND SETTINGS\BRIAN LEUNG\FAVORITES\SPORTS\Baseball news.url
Adware:adware/ilookup No disinfected C:\DOCUMENTS AND SETTINGS\BRIAN LEUNG\FAVORITES\Gambling
Adware:adware/cws No disinfected Windows Registry
Hacktool:Hacktool/Processor No disinfected C:\Documents and Settings\Brian Leung\Desktop\spyware\l2mfix.exe[Process.exe]
Virus:Trj/Qhost.AX Disinfected C:\Documents and Settings\Brian Leung\Local Settings\Temp\73C.tmp
Virus:Trj/Qhost.AX Disinfected C:\Documents and Settings\Brian Leung\Local Settings\Temp\73D.tmp
  • 0

#53
Justin

Justin

    I do a little bit of everything

  • Member
  • PipPipPipPipPip
  • 2,353 posts
1) Please download the Killbox.
Unzip it to the desktop but do NOT run it yet.

2) Then please reboot into Safe Mode by restarting your computer and pressing F8 as your computer is booting up. Then select the Safe Mode option.

3) Once in Safe Mode, please run Killbox.

4) Select "Delete on Reboot".

5) Open the text file with these instructions in it, and copy the file names below to the clipboard by highlighting them and pressing Control-C:
C:\DOCUMENTS AND SETTINGS\BRIAN LEUNG\FAVORITES\SPORTS\Baseball  C:\DOCUMENTS AND SETTINGS\BRIAN LEUNG\FAVORITES\Gambling
C:\Documents and Settings\Brian Leung\Local Settings\Temp\73C.tmp
C:\Documents and Settings\Brian Leung\Local Settings\Temp\73D.tmp
6) Return to Killbox, go to the File menu, and choose "Paste from Clipboard".

7) Click the red-and-white "Delete File" button. Click "Yes" at the Delete on Reboot prompt. Click "No" at the Pending Operations prompt.

If you receive a message such as: "Component 'MsComCtl.ocx' or one of its dependencies not correctly registered: a file is missing or invalid." when trying to run TheKillbox, click here to download and run missingfilesetup.exe. Then try TheKillbox again..

Let the system reboot.
  • 0

#54
juicy1

juicy1

    Member

  • Topic Starter
  • Member
  • PipPip
  • 45 posts
Thank you very much!

I think my computer's finally clean.

Thanks for all your help!
  • 0

#55
Justin

Justin

    I do a little bit of everything

  • Member
  • PipPipPipPipPip
  • 2,353 posts
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :tazz:

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.
  • 0

Advertisements







Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP