BleepingComputer.com: malware removal

Jump to content

Forum Guidelines

Posted Image Read the following topic before creating a new topic in this forum. It contains instructions on the what we would like you to post, which will enable us to help you more quickly.

Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help


Posted Image Unfortunately, with the amount of logs we receive per day, the average response time is 5 days. I want to assure you, though, that your topic will be looked at and responded to. So please be patient.


Posted Image DO NOT RUN ComboFix unless requested to.


Posted Image Only members of the Malware Response Team or Moderators are allowed to help people with logs. Anyone else should refrain from posting to another user's log.


Posted Image When posting a log please put the type of infection you have in the topic title. IE: Winfixer, Virtumonde, WinTools, WebSearch, Home Search Assistant, etc.


Posted Image Do not bump your topic. We try to resolve logs on a first come/first served basis. By bumping your log you will be pushed back in line due to the new date of your bump.
  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • This topic is locked

malware removal browser hijacker

#16 User is offline   john-mark-7 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 13
  • Joined: 01-June 11

Posted 16 June 2011 - 11:40 PM

When running DAF I get Error 127: C:\windows\system32\iesetup.dll is not registerable or the file is corrupted. Youe version of iesetup.dll is 8.00.6001.18702 please contact dial-a-fix@DjLizard.net so that an exception can be made for your version of this file. Then there is box to click ok.

Then I get the same error for c:\windows\system32\imgutil.dll

Ditto C:\windows\system32\inseng.dll

Ditto C:\windows\system32\mshtml.dll

Ditto C:\windows\system32\msrating.dll

Ditto C:\windows\system32\occache.dll

Ditto C:\windows\system32\pngfilt.dll

Ditto C:\windows\system32\webcheck.dll

#17 User is offline   john-mark-7 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 13
  • Joined: 01-June 11

Posted 17 June 2011 - 12:10 AM

After all the instructions were completed I am still without an ip address. I have been trying to avoid re installing xp since this is a netbook. I think I am going to try it with an external usb drive.

#18 User is online   m0le 

  • I know the drill!
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Instructor
  • Posts: 29,114
  • Joined: 24-July 08
  • Gender:Male
  • Location:London, UK

Posted 17 June 2011 - 01:08 PM

Go to Start > Control Panel > Administrative Tools > select Services > click the Standard tab (at bottom of screen) > double-click on Remote Procedure Call > Change the Startup Type to Automatic > Click Start under Service Status > click OK > confirm that the "Status" for Remote Procedure Call now displays Started.

Also verify that "DCOM Server Process Launcher" displays Automatic as its Startup Type in this list of Services. If not, double-click on "DCOM Server Process Launcher" and change the Startup Type to Automatic.
If I have helped you fix your PC then please donate. Thanks

Posted Image
m0le is a proud member of UNITE (Unified Network of Instructors and Trusted Eliminators)

#19 User is offline   john-mark-7 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 13
  • Joined: 01-June 11

Posted 17 June 2011 - 01:58 PM

I did check the RPC server and it was running inspite of what the error message said. I found that ALT+F10 keys put me into an Acer restore mode. I appreciate all your help but I am getting tired of all the endless trouble shooting. I am doing this work for someone who wants their netbook back. I was able to reinstall windows xp with from the Acer restore menu.

This post has been edited by john-mark-7: 17 June 2011 - 01:59 PM


#20 User is online   m0le 

  • I know the drill!
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Instructor
  • Posts: 29,114
  • Joined: 24-July 08
  • Gender:Male
  • Location:London, UK

Posted 17 June 2011 - 04:48 PM

Okay, thanks for letting me know. :thumbup2:

-------------------------------------------------------

This topic has been closed.

If you're the topic starter, and need this topic reopened, please contact me via pm with the address of the thread.

Everyone else please begin a New Topic.
If I have helped you fix your PC then please donate. Thanks

Posted Image
m0le is a proud member of UNITE (Unified Network of Instructors and Trusted Eliminators)

Share this topic:


  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • This topic is locked

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users