[loophole]

Your not clean. We have to replace that file. Until we do you will keep getting all this garbage. Im here for the long haul. As long as you keep replying ill keep replying. Just hang in there we will get it. Let me do some checking and get back to you in a few

[Advertisements]

Cool deal ...I won't go anywhere...but I got to log off and call my girlfriend...let her know I can't come over...I'll be right back...and wait for further instructions:)

Thanks for everything...!!!!!!!!!!!!!!

PS- If Intell32 returns when I try to log back on...it'll slow me down until it's finished. So...it may be a few minutes until I can get things stablized...but I'll be back for sure!

[totenkopff]

Cool deal ...I won't go anywhere...but I got to log off and call my girlfriend...let her know I can't come over...I'll be right back...and wait for further instructions:)

Thanks for everything...!!!!!!!!!!!!!!

PS- If Intell32 returns when I try to log back on...it'll slow me down until it's finished. So...it may be a few minutes until I can get things stablized...but I'll be back for sure!

[loophole]

Ill be here tomorrow and we can pick up from there. No need to get you in hot water with your girl

[totenkopff]

Oh no...it's cool...I'm back...I'd like to finish it as well...if it's cool with you...I already talked to her...I'm here for the night:)

[totenkopff]

Oh...just to let you know...I now have (2) "Wininet.dll" files in my computer. The original one on the SYSTEM folder and the "new" one on my Desktop. The one I guess we created...does this matter...what should I do with it...if anything?

Hope you're still there...

[loophole]

Lets try this a little different.

I wont be available for some of these directions Be sure to print them out

Boot to safemode

Please reboot into safe mode Safe mode(continually tap the F8 key while your system is starting, select Safe Mode from the menu).

Click start>run and type command

Type:

copy c:\windows\system\wininet.dll c:\windows\desktop

Reboot.into normal mode Scan the desktop folder with eTrust Web Scanner. When done, make sure the box is check for wininet.dll and click cure.

Reboot to command prompt( Click start>run and type command)and delete system\wininet and oleadm (oleext), then copy clean wininet from desktop.
Directions below

del c:\windows\system\wininet.dll

del c:\windows\system\Intell32

del c:\windows\system\oleext.dll

copy c:\windows\desktop\wininet.dll c:\windows\system

Run the smit.rem tool and post the results with a new log

[totenkopff]

Cool...Thanks...but I don't know what "Reboot to command prompt" means...? Is this in Safe Mode...again?

[loophole]

reboot to safe mode and then Click start>run and type command

[totenkopff]

Cool...I still have the alternate "Wininet.dll" on my desktop from before...can I use this? It appears to still be clean. I just did the online scan and nothing turned up. Also, ANYTHING I can do to not have to reboot as many times will help. As the Intell32 will return and slow things down...not once...but twice...

Can the Desktop wininet be used in your new instructions?

[loophole]

Escan said it was clean?

[totenkopff]

Apparently...it's scanning my entire desktop like before but didn't pick up on it like it did in the first scan. Which had said it cured it anyways...so I guess it's still clean.

[totenkopff]

Well...since I have (2) Wininets...let me real quick run SmitRem and see what it says, if anything, concerning one or the other or both. I forget what it said before...but if one of them was still infected...it should say...

[loophole]

If thats the case then do this

Go to Start->Run and type in notepad and hit OK. Then copy and paste the following into Notepad:

del c:\windows\system\intell32
del c:\windows\system\wininet.dll
del c:\windows\system\oleadm.dll
del c:\windows\system\oleext.dll
copy c:\windows\desktop\wininet.dll c:\windows\system
del delete.bat

Save the file as "delete.bat". Make sure to save it with the quotes. Double click on it.

Run the smit.rem tool and post the results with a new log

[totenkopff]

Ok...smitrem says there is still infection...that "delete" file has a few things to say...I can't cut and paste...so I'll have to copy for you...it looks important...give a minute...I will have the results in the next post...

[totenkopff]

Ok...here's what the black "delete" box had to say...

C:\WINDOWS\Desktop>del c:\windows/system\intell32
File not found

C:\WINDOWS\Desktop>del c:\windows\system\wininet.dll
Access denied

C:\WINDOWS\Desktop>del c:\windows\system\oleadm.dll
File not found

C:\WINDOWS\Desktop>del c:\windows\system\oleext.dll
Access denied

C:\WINDOWS\Desktop>copy c:\windows\desktop\wininet.dll c:\windows\system
Sharing violation - c:\windows\system\WININET.DLL
0 file(s) copied

C:\WINDOWS\Desktop>del delete.bat
Batch file missing

C:\WINDOWS\Desktop>File not found