BleepingComputer.com: Windows XP won't boot iertutil.dll missing tried reinstalling

My Laptop was getting very slow browsing the interent, so i ran spybot and found nothing. Then i ran malwarebytes, which found a couple of problems and a trojan which it removed and told me to rebot. It also told me to upgade to a newer version of internet explorer as there were know security issues with version 7 i was using. After the install of IE 8 it told me to restart and thats when the problem started.

I got a message saying explore.exe couldn't start as "iertutil.dll couldn't be located". And the startup stops with just the desktop screen with no icons or taskbar.

I Googled the problem and found a couple of guides showing how to fix the problem by downloading the missing .dll file and copying it onto a USB flash drive and using Crtl+ Alt+ Del to access taskmanager to select it and copy and paste it into and windows system32 folder.

Rebooted and now i get a different error message "the ordinal 650 could not be located in the dynamic link library iertutil.dll"

If i Crtl+ Alt+ Del now to open taskmanager and select processes tab there are hundreds of processes running and it just gets slower and slower.

Any ideas??

It's a Dell Latitude D630 laptop running Windows XP Pro


Just tried to copy iertutil.dll from my spare laptop which is running ie 7 using the usb flash drive. When i CTRL + ALT + DEL to open task manager it very slow and showed 600+ processes and this just keeps going up every few seconds it's now up to 900 and 1407M/2441M. Every new process had SrvSrvSrvSrv after it.
It's now reducing as i type this back down to 700 processes.

any ideas whats going on and how to get my laptop back to normal?

This post has been edited by Jbenny2: 03 October 2010 - 08:28 AM
Reason for edit: Moved from XP forum to Am I Infected ~ Hamluis.

looking down the list of processes there are numerous (like 300+) "iexplore.exe" all with cpu usage 00 and mem usage 912k

the list of processes has shot up to 1700 and is still rising all the newest ones at the top of the list end in SRVSrvSrvSrv eg. cmdSrvSrvSrvSrv.... and runonceSrvSrvSrvSrv.... CPU usage is 100% and Memory is also up to 2707M/2937M

Hello, possible corrupt install of IE8 due to malware. In cotrol Panel ,Uninstall IE8,Reboot and see what errors if any are left. Removeing 8 will automatilly bring back 7 as you upgraded.

Rerun MBAM (MalwareBytes) like this:

Open MBAM in normal/regular mode and click Update tab, select Check for Updates,when done
click Scanner tab,select Quick scan and scan (normal mode).
After scan click Remove Selected, Post new scan log and Reboot into normal mode.



Next run ATF and SAS: If you cannot access Safe Mode,run in normal ,but let me know.

Note: On Vista, "Windows Temp" is disabled. To empty "Windows Temp" ATF-Cleaner must be "Run as an Administrator".

From your regular user account..
Download Attribune's ATF Cleaner and then SUPERAntiSpyware , Free Home Version. Save both to desktop ..
DO NOT run yet.
Open SUPER from icon and install and Update it
Under Scanner Options make sure the following are checked (leave all others unchecked):
Close browsers before scanning.
Scan for tracking cookies.
Terminate memory threats before quarantining.
Click the "Close" button to leave the control center screen and exit the program. DO NOT run yet.

Now reboot into Safe Mode: How to enter safe mode(XP)
Using the F8 Method
Restart your computer.
When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu.
Select the option for Safe Mode using the arrow keys.
Then press enter on your keyboard to boot into Safe Mode.

Double-click ATF-Cleaner.exe to run the program.
Under Main "Select Files to Delete" choose: Select All.
Click the Empty Selected button.

If you use Firefox or Opera browser click that browser at the top and choose: Select All
Click the Empty Selected button.
If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.

NOW Scan with SUPER
Open from the desktop icon or the program Files list
On the left, make sure you check C:\Fixed Drive.
Perform a Complete scan. After scan,Verify they are all checked.
Click OK on the summary screen to quarantine all found items.
If asked if you want to reboot, click "Yes" and reboot normally.

To retrieve the removal information after reboot, launch SUPERAntispyware again.
Click Preferences, then click the Statistics/Logs tab.
Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
If there are several logs, click the current dated log and press View log.
A text file will open in your default text editor.
Please copy and paste the Scan Log results in your next reply.
Click Close to exit the program.


Please ask any needed questions,post logs and Let us know how the PC is running now.

I can't access my desktop or start menu. All i can do is CTRL + ALT + DEL to open task manager. How do i run MBAM (MalwareBytes) from just the task manager

I've managed to select MBAM (MalwareBytes) by selecting file new task and then browsing and locating the icon in my desktop folder.
Now i get the following errors

An Error has occurred. Please report this to our support team.
MBAM_EEEOR_EXPANDING_VARIABLES(0,53)

I click OK then i get this message

An Error has occurred. Please report this to our support team.
MBAM_EEEOR_MISSING_FILE(3, 0, mbamswissarmy.sys)
The system could not find the specified path.

I click OK then it takes me back to task manager

Lets see if running SAS first will allow MBAM second. These can be downloaded and run from a CD or Flashdrive also.

i've downloaded them both to a flashdrive and also installed SAS onto the flashdrive. After a lot of waiting i've managed to get back into task manager and copy sas onto the desktop. I've doubled clicked it and installed it onto the harddrive c: and then gone into where it was installed and ran sasupdate as a new task, nothing happened, so i ran sas as a new task. nothing. I'm just going to reboot it and try it again. The problem is with over 1000 processes running it takes ages to even just move the mouse sometimes and wait for it to catch up on the screen !

I've managed to select RunSAS.exe as a new task in task manager, but all that happensis 2 new processes come up in task manager RunSASSrv.exe and RunSASSrvSrv.exe and then it continues to run more and more task all ending in SrvSrvSrvSrv...

Should i be logged in as my usual user or admin. And is it a normal boot into windows or should i try and boot into safemode and give it a try?

This post has been edited by Jbenny2: 05 October 2010 - 03:24 PM

Man I had a crazy day!!
SAS is better in Safe Mode. Use of your regular user is best,

I'm still getting nothing trying to Run SAS in safe mode as my regular user.
I'm starting to regret ever trying to update interent explorer!

This post has been edited by Jbenny2: 06 October 2010 - 09:32 AM

We need a deeper look. Please go here....
Preparation Guide ,do steps 6 - 9.

Create a DDS log and post it in the new topic explained in step 9,which is here Virus, Trojan, Spyware, and Malware Removal Logs and not in this topic,thanks.
Skip Gmer.
Let me know if that went well.

I will give it a go when i get home tonight, but i don't know how much of it i can do with only task manager. I will try and copy everything via USB flash dive hopefully this will work,.
Thanks for all you help.

Sorry i've not had chance to have a go at it yet i'll try one evening this week and let you know how i get on.
Thanks again

No problem ,just as soon as you can as there is a couple of day back log in that forum,so get in the queue.