Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Generic User Avatar

SCANS I DID HOPE THESE ARE RIGHT


  • This topic is locked This topic is locked
54 replies to this topic

#31 kcsummer

kcsummer
  • Topic Starter

  •  Avatar image
  • Banned
  • Member rank image
  • 434 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:04 PM

Posted 08 March 2011 - 10:30 PM

I did do the scan you requested last night and it came up negative on anything harmful or different. When I tried to save the log it seems my computer was locked up (I feel asleep so it was hours later) and I couldn't save it but it was okay.

Since I cannot get anywhere with this iertutil.dll missing internet explorer file it appears I will have to reinstall everything/wipe out what I have. If I do that and there is something wrong/virus/trojan, etc. will it be reinstalled.

I have been using a backup service and I'm not sure about that either, would it pick up a bug if there was one so it would be reinstalled?

I will run any other test you say. Thanks Mole

BC AdBot (Login to Remove)

 


#32 m0le

m0le

    Can U Dig It?


  •  Avatar image
  • Malware Response Team
  • 34,528 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:10:04 PM

Posted 09 March 2011 - 11:40 AM

If you reinstall and reformat then there would only be one possible rootkit that can avoid that - I don't think you own that.

We can take a look for backup copies of the missing files now though.

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

  • Double-click SystemLook.exe to run it.
  • Copy the content of the following codebox into the main textfield:
    :filefind
    iertutil.dll
    mshtmld.dll 
    
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt
Posted Image
m0le is a proud member of UNITE

#33 kcsummer

kcsummer
  • Topic Starter

  •  Avatar image
  • Banned
  • Member rank image
  • 434 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:04 PM

Posted 10 March 2011 - 10:23 AM

Here is the info that came up after the scan you requested Mole.

SystemLook 04.09.10 by jpshortstuff
Log created at 09:16 on 10/03/2011 by Anne
Administrator - Elevation successful
WARNING: SystemLook running under WOW64. Use SystemLook_x64 for accurate results.

========== filefind ==========

Searching for "iertutil.dll"
C:\Windows\System32\iertutil.dll ------- 2063360 bytes [14:38 10/02/2011] [05:29 18/12/2010] F2B289B2DBB4F6C24370D90761061D01
C:\Windows\SysWOW64\iertutil.dll ------- 2063360 bytes [14:38 10/02/2011] [05:29 18/12/2010] F2B289B2DBB4F6C24370D90761061D01
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.16385_none_be52e3381d372f67\iertutil.dll --a---- 2440704 bytes [23:59 13/07/2009] [01:41 14/07/2009] 39570395292A4702FDE94C345DF0C39E
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.16666_none_be69890c1d260851\iertutil.dll --a---- 2441216 bytes [08:00 16/09/2010] [05:19 31/08/2010] 1593472CCC843022ABA6AE011A5B87F9
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.16671_none_be59b7ae1d32a58f\iertutil.dll --a---- 2441216 bytes [03:55 17/10/2010] [05:34 08/09/2010] E8DB77BB2324D91B173A9C9F9ED12F98
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.16722_none_be90c97a1d093058\iertutil.dll --a---- 2447872 bytes [14:38 10/02/2011] [06:11 18/12/2010] 38ABE826E5934C35D2D33EBAEC042358
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.20791_none_becdb4a136607d3b\iertutil.dll --a---- 2442752 bytes [08:00 16/09/2010] [05:09 31/08/2010] A9838598440B776363D12C83028338D0
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.20795_none_bed1b5c9365ce297\iertutil.dll --a---- 2442752 bytes [03:55 17/10/2010] [05:25 08/09/2010] 09ABA376F07AEAF203C19943888167DA
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.20861_none_beee264b3648268f\iertutil.dll --a---- 2447360 bytes [14:38 10/02/2011] [06:06 18/12/2010] 531939DCD16652D80CD7383E24E06B30
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7601.17514_none_c083f7001a25b301\iertutil.dll --a---- 2444288 bytes [21:23 25/02/2011] [13:26 20/11/2010] 5180380D353277D395D3B36D790AA93E
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.2.7930.16406_none_97ec366972f646d0\iertutil.dll --a---- 2431488 bytes [05:20 02/12/2010] [06:41 01/09/2010] 42668E57396A79F4EDCB09C2D20981DA
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.16385_none_623447b464d9be31\iertutil.dll --a---- 2058240 bytes [23:44 13/07/2009] [01:15 14/07/2009] 13D1F490AF6C7649F51BA29F9CCBB778
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.16666_none_624aed8864c8971b\iertutil.dll --a---- 2058752 bytes [08:00 16/09/2010] [04:32 31/08/2010] FF2263D9B4AD39E93F5954DECA758A25
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.16671_none_623b1c2a64d53459\iertutil.dll --a---- 2058752 bytes [03:55 17/10/2010] [04:28 08/09/2010] DE03C0797D592582317A0AA6CDA3A0C4
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.16722_none_62722df664abbf22\iertutil.dll ------- 2063360 bytes [14:38 10/02/2011] [05:29 18/12/2010] F2B289B2DBB4F6C24370D90761061D01
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.20791_none_62af191d7e030c05\iertutil.dll --a---- 2058752 bytes [08:00 16/09/2010] [04:25 31/08/2010] 78D4169AD29E03500DA6EA1D4E9FC3B8
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.20795_none_62b31a457dff7161\iertutil.dll --a---- 2058752 bytes [03:55 17/10/2010] [04:30 08/09/2010] 50DCB7E007B68ABFB06DB91EFAAA00F6
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.20861_none_62cf8ac77deab559\iertutil.dll --a---- 2063872 bytes [14:38 10/02/2011] [05:27 18/12/2010] 4F1C954B2815E8D88DD9431385050072
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7601.17514_none_64655b7c61c841cb\iertutil.dll --a---- 2064384 bytes [21:23 25/02/2011] [12:19 20/11/2010] 683E0C9DA9E1EB9E4691DFAE0EC83E36
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.2.7930.16406_none_3bcd9ae5ba98d59a\iertutil.dll --a---- 2056192 bytes [05:20 02/12/2010] [06:42 01/09/2010] 2E943B9A5377A18B8AA7AF840B475DA0

Searching for "mshtmld.dll "
No files found.

-= EOF =-

#34 m0le

m0le

    Can U Dig It?


  •  Avatar image
  • Malware Response Team
  • 34,528 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:10:04 PM

Posted 10 March 2011 - 05:41 PM

Apparently some missing dll files:

iertutil.dll missing

and

c:\windows\system32\mshtmld.dll


Where did you get the idea that they were both missing? The first one definitely exists. The second one, however, does appear to have disappeared and is necessary for the system.

I have read your other thread and it looks like replacing this is not as straightforward as running your repair disk so...

I can only offer the Microsoft link to request a download for this missing file. Link here. I am unable to recommend any other possible download site as being 100% safe to use.

They say it's a one business day reply and it's free so I say give it a go. Let me know how that progresses.

Edited by m0le, 10 March 2011 - 05:42 PM.

Posted Image
m0le is a proud member of UNITE

#35 kcsummer

kcsummer
  • Topic Starter

  •  Avatar image
  • Banned
  • Member rank image
  • 434 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:04 PM

Posted 11 March 2011 - 02:52 AM

I'm not sure what you mean about where did I get the idea they were both missing.

the iertutil.dll I was getting a message that it was missing.

Is there one of these these two files that showed up on my search that I can use? It must be the iertutil.dll that you say is corrupt or whatever as that is the overall problem.

I think someone else wrote the note about c:\windows\system32\mshtmld.dll as I don't recall mentioning it.

Thanks I will use that link you sent me but could you tell me if I need to which file I need to request as I don't think you mentioned which one of the two is bad and if its only one how do I get the one back that is not bad?:crazy:

I'm not sure what you mean about the advisibility of running repair.

Is repair different from reinstalling everything? I have a backup of my computer but would that include any virus/trojan. My guess is it would unless I have a backup I'm sure was after I quit getting the virus reports etc.

I'm not sure why they don't have more on the microsoft website about the iertutil.dll problem because I've seen many other people who have had it too.

I'm obviously not very knowledgeable about computers but I know like when a driver is missing you download it and problem solved. Why is this one not as straightforward.

Also, what about contacting my computer manufacturer - MSI? Or are they likely to say its not their problem?

Thanks Mole I'll let you know whatever comes of it.

Edited by kcsummer, 11 March 2011 - 03:00 AM.


#36 m0le

m0le

    Can U Dig It?


  •  Avatar image
  • Malware Response Team
  • 34,528 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:10:04 PM

Posted 11 March 2011 - 02:16 PM

This is the file, mshtmld.dll. Driver files can be a bit more tricky to install but they can be done.

Is repair different from reinstalling everything?


Yes, repair means that the system files get repaired but your folders and files get left alone. Reinstalling would mean backing up these folders and files and then overwriting the entire operating system's files, etc.

Did you get any disks with the PC?
Posted Image
m0le is a proud member of UNITE

#37 kcsummer

kcsummer
  • Topic Starter

  •  Avatar image
  • Banned
  • Member rank image
  • 434 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:04 PM

Posted 11 March 2011 - 11:30 PM

I did get a disk with my laptop i think it has windows 7 on it but I'll have to have a closer look.

Meantime, the contact that you gave me hasn't been much help as they just gave me some other links to try, the self-help forum which I told them when I wrote them has not been able to help. They gave me 3 other "resources" which I will have to look into but the self-help was no help.

It amazes me that they give 24 hour response time which is really silly because they cold respond in 10 or 20 minutes to just give me the "try somewhere else" speech.

I'll let you know what else I found out.

Thanks mole.:wink:

#38 m0le

m0le

    Can U Dig It?


  •  Avatar image
  • Malware Response Team
  • 34,528 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:10:04 PM

Posted 12 March 2011 - 04:40 PM

I'll wait til you've checked out the disk :)
Posted Image
m0le is a proud member of UNITE

#39 kcsummer

kcsummer
  • Topic Starter

  •  Avatar image
  • Banned
  • Member rank image
  • 434 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:04 PM

Posted 12 March 2011 - 10:49 PM

:dance: Okay, Mole, it is not a disk at all, I thought it was because sealed inside felt hard like a disk but when I opened the book shich says Welcome to your PC, simpliefied - is just a piece of cardboard and no disk!

April Fools in March :lmao:

but on the bright side B) the book has a bar code on it which really looks nice anyway.

Maybe I should call the company who put together my laptop?

Edited by kcsummer, 12 March 2011 - 10:51 PM.


#40 kcsummer

kcsummer
  • Topic Starter

  •  Avatar image
  • Banned
  • Member rank image
  • 434 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:04 PM

Posted 12 March 2011 - 11:06 PM

This just in -

As a Customer Service Representative, I am here to assist you in finding the right place to get help with your questions and provide resources to resolve your concern.

For this kind of issue, what may I suggest is to contact our Consumer Support Team by calling 1-800-936-5700. They are open Monday-Friday 5:00am-9:00pm PST and Saturday-Sunday 6:00am-3:00pm PST.

They will determine your support options regarding this issue.

If you have further questions, please do not hesitate to reply to this e-mail.


Would I be judged paranoid or overly suspicious if I anticipate they will tell me that for $x.00 per minute we will be glad to help you with your problem?

Edited by kcsummer, 12 March 2011 - 11:08 PM.


#41 m0le

m0le

    Can U Dig It?


  •  Avatar image
  • Malware Response Team
  • 34,528 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:10:04 PM

Posted 13 March 2011 - 01:39 PM

I agree, every manufacturer has specific installation and repair options. Let me know what they say.
Posted Image
m0le is a proud member of UNITE

#42 kcsummer

kcsummer
  • Topic Starter

  •  Avatar image
  • Banned
  • Member rank image
  • 434 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:04 PM

Posted 14 March 2011 - 12:32 AM

I agree, every manufacturer has specific installation and repair options. Let me know what they say.

I will contact MSI, I take it you were not referring to Microsoft? I have the number for MSI. I bought a laptop from them before and it came with a disk I am surprised this one did not.

Am I needing both files? I'm still not clear as you said only one was bad?

Thanks Mole I will let you know. :mellow:

Edited by kcsummer, 14 March 2011 - 12:33 AM.


#43 kcsummer

kcsummer
  • Topic Starter

  •  Avatar image
  • Banned
  • Member rank image
  • 434 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:04 PM

Posted 14 March 2011 - 09:13 PM

Mole :busy:, I just got an email form someone at Microsoft who says that someone will either call and/or email me within two days. So if/when they contact me then I will advise you of the outcome.

#44 m0le

m0le

    Can U Dig It?


  •  Avatar image
  • Malware Response Team
  • 34,528 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:10:04 PM

Posted 15 March 2011 - 03:57 PM

I'm confused, is it MSI or Microsoft you've contacted?
Posted Image
m0le is a proud member of UNITE

#45 kcsummer

kcsummer
  • Topic Starter

  •  Avatar image
  • Banned
  • Member rank image
  • 434 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:04 PM

Posted 15 March 2011 - 08:45 PM

Actually I contacted both. Someone from Microsoft tried to call but had the wrong number, I emailed him the right one!

I only remember seeing iertutil.dll as the bad file

never got a message about the other one you mentioned

Do I need them both - if he calls I want to be sure I have the right info?

Thanks Mole :dance:




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users