Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Generic User Avatar

SCANS I DID HOPE THESE ARE RIGHT


  • This topic is locked This topic is locked
54 replies to this topic

#46 m0le

m0le

    Can U Dig It?


  •  Avatar image
  • Malware Response Team
  • 34,528 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:10:00 PM

Posted 16 March 2011 - 05:53 PM

This is the one you need: c:\windows\system32\mshtmld.dll

You have at least two copies of the other one. Below is the log from SystemLook

Searching for "iertutil.dll"
C:\Windows\System32\iertutil.dll ------- 2063360 bytes [14:38 10/02/2011] [05:29 18/12/2010] F2B289B2DBB4F6C24370D90761061D01
C:\Windows\SysWOW64\iertutil.dll ------- 2063360 bytes [14:38 10/02/2011] [05:29 18/12/2010] F2B289B2DBB4F6C24370D90761061D01


Posted Image
m0le is a proud member of UNITE

BC AdBot (Login to Remove)

 


#47 kcsummer

kcsummer
  • Topic Starter

  •  Avatar image
  • Banned
  • Member rank image
  • 434 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:00 PM

Posted 16 March 2011 - 09:31 PM

thanks, Mole...someone called me from microsoft today, he was going to do a remote on my computer but it wouldn't work so he told me some stuff to do but kept getting errors so he is sending me a disk to try to repair and if that won't work will have to do the whole reinstall.

I told him about the error code but I did not mentioned that other file you just mentioned but I think I sent him a copy of the system look.

he did/i did a system scan today i guess the same concept except not really either that i think coz it gave minimal info, just the error nothing else. couple days till i get the disk .... like i said i didn't mention the c:\windows\system32\mshtmld.dll but i guess it shouldn't matter. I will tell him about that when he calls me. He did have me delete and reinstall from microsoft website the software for my mouse and since doing so it seems like there is less trouble with the message popping up but haven't been on much so will see.

Thanks Mole I'll note when have something else. Thanks for tip to microsoft as otherwise i wouldn't be gettin anywhere. :lmao:


#48 m0le

m0le

    Can U Dig It?


  •  Avatar image
  • Malware Response Team
  • 34,528 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:10:00 PM

Posted 17 March 2011 - 04:40 PM

:thumbup2:
Posted Image
m0le is a proud member of UNITE

#49 kcsummer

kcsummer
  • Topic Starter

  •  Avatar image
  • Banned
  • Member rank image
  • 434 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:00 PM

Posted 18 March 2011 - 02:15 AM

That was fast. I got the disk by fed-ex today. So I am going to send him an email that it arrived and hopefully he will call me tomorrow and we can get this worked out.

Funny thing is though that after we did the reinstall of the software for my mouse I quit getting that annoying pop-up thing about iertutil.dll.

So what exactly does this other file do because I haven't gotten any errors about it? It would be cool if this could finally be done with.

Let you know, Mole.

#50 m0le

m0le

    Can U Dig It?


  •  Avatar image
  • Malware Response Team
  • 34,528 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:10:00 PM

Posted 18 March 2011 - 06:10 PM

So what exactly does this other file do because I haven't gotten any errors about it?


No, you probably haven't. mshtmled.dll is a file that handles HTML editing within a webpage. If you don't edit webpages then you don't need it.

Looks like we're done here. Let's clean up...

You're clean. Good stuff! :thumbup2:

Let's do some clearing up

Uninstall ComboFix

Remove Combofix now that we're done with it.
  • Please press the Windows Key and R on your keyboard. This will bring up the Run... command.
    (For Vista/Windows 7 please click Start -> All Programs -> Accessories -> Run)
  • Now type in Combofix /Uninstall in the runbox and click OK. (Notice the space between "Combofix" and "/")
  • Please follow the prompts to uninstall Combofix.
  • You will then receive a message saying Combofix was uninstalled successfully once it's done uninstalling itself.
This will uninstall Combofix and anything associated with it.


We Need to Clean Up our Mess
Download and Run OTC

We will now remove the tools we used during this fix using OTC.

  • Download OTC by OldTimer and save it to your desktop.
  • Double click Posted Image icon to start the program. If you are using Vista, please right-click and choose run as administrator
  • Then Click the big Posted Image button.
  • You will get a prompt saying "Being Cleanup Process". Please select Yes.
  • Restart your computer when prompted.
If you still have any tools or logs leftover on your computer you can go ahead and delete those off of your computer now.
------------------------------------------------------------------------------------------------------------------------

Here's some advice on how you can keep your PC clean


Use and update your AntiVirus Software

You must have a good antivirus. There are plenty to choose from but I personally recommend the free options of Avast and Avira Antivir. If you want to purchase a security program then I recommend any of the following: AVG, Norton, McAfee, Kaspersky and ESET Nod32.

It is imperative that you update your Antivirus software at least once a week (Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out. If you use a commercial antivirus program you must make sure you keep renewing your subscription. Otherwise, once your subscription runs out, you may not be able to update the programs virus definitions.


Make sure your applications have all of their updates

Use this next program to check for updates for programs already on your system. Download Security Check by screen317 from here or here.

  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically, make sure that updates on any that are flagged are carried out as soon as possible

It is also possible for other programs on your computer to have security vulnerability that can allow malware to infect you. Therefore, it is also a good idea to check for the latest versions of commonly installed applications that are regularly patched to fix vulnerabilities. You can check these by visiting Secunia Software Inspector and Calendar of Updates.


Install an AntiSpyware Program

A highly recommended AntiSpyware program is SuperAntiSpyware. You can download the free Home Version. or the Pro version for a 15 day trial period.

Installing this or another recommended program will provide spyware & hijacker protection on your computer alongside your virus protection. You should scan your computer with an AntiSpyware program on a regular basis just as you would an antivirus software.


Finally, here's a treasure trove of antivirus, antimalware and antispyware resources


That's it kcsummer, happy surfing!

Cheers.

m0le
Posted Image
m0le is a proud member of UNITE

#51 kcsummer

kcsummer
  • Topic Starter

  •  Avatar image
  • Banned
  • Member rank image
  • 434 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:00 PM

Posted 18 March 2011 - 10:10 PM

I do not get this:

Remove Combofix now that we're done with it.
  • Please press the Windows Key and R on your keyboard. This will bring up the Run... command.
    (For Vista/Windows 7 please click Start -> All Programs -> Accessories -> Run)
  • Now type in Combofix /Uninstall in the runbox and click OK. (Notice the space between "Combofix" and "/")
  • Please follow the prompts to uninstall Combofix.
  • You will then receive a message saying Combofix was uninstalled successfully once it's done uninstalling itself.
This will uninstall Combofix and anything associated with it.

I could not find anyway like you said here for the Run command? so I could not follow the prompts?

But i did the OTC.exe okay?

So will it be an issue if I cannot do the run thing? Is it just "junk" to get rid of that won't hurt anything other than clutter?

Also, I cannot seem to do a disk defrag. I get a message that it was set up using another system and asks if it can discard the previous setup and I say okay but then when I try to do it the same thing and I can never do the defrag?

I don't know if it has anything to do with it because its been a while and so many issues but I have had trouble downloading installing the microsoft updates. I do not know how much of the problems I had before had to do with whatever so it will take a while to see.

The whole thing started out though and I still cannot figure out (why does microsoft make it so hard) to run stuff as an administrator. I have an administrator account but its always telling me sorry you don't have access you need to be administrator. People have suggested a couple of ways to do it but I can not seem to follow directions right or something because I can't and its very frustrating to own a computer and then to be told you don't have access?

I still don't understand exactly what all went on. The microsoft contact sent me the Windows 7 disk and I got it and left a message that I got it but he never contacted me again so maybe he will monday. there must be something else he wishes to do or he would not have gone to the expense/trouble of sending the windows 7 replacement disk. I don't understand why the big issue with the iertutil.dll thing and everyone saying I would have to do a system reinstall and then really all most of what I did with the microsoft contact that worked was reinstalling the mouse software which is microsoft mouse and so maybe that was what the iertutil.dll was all about.

I guess I don't need to know, I just need it fixed and to work, thanks for your help.

I have problems with intricate things and get confused and frustrated which is probably why I can't seem to be administrator or to do the run thing you said above?

Very frustrating because I'm not stupid but certain things is like my mind does not do more than one thing at a time.

Anyway thanks for your help Mole and everyone who puts up with my difficulty communicating and my brain disconnect thing, thats what I call it but is dyslexia problem moreso.

Blah blah I ramble too much.

Thank you mole. I would certainly make a donation as you have been very nice to help me however (don't you hate those however things) since the economy tanked I am scraping the bottom of the reserve bucket yannow? One step ahead (barely) of the revenuers dang me.

I will do the maintenance stuff you suggest hopefully all the right way.

And thank you for the "treasure trove". When I become famous author and my ship comes in I will send you a generous reward for your help. But the famous author thing is still an "iffy" thing so whatever lol.

Edited by kcsummer, 18 March 2011 - 10:33 PM.


#52 kcsummer

kcsummer
  • Topic Starter

  •  Avatar image
  • Banned
  • Member rank image
  • 434 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:00 PM

Posted 18 March 2011 - 10:35 PM

GILDA RADNER said it right.

Its always something.

stupid yahoo froze my account for 24 hours so I'm not a spammer

I am not a spammer i send lotsa mail its true but not anything out of ordinary now all of a sudden acct frozen even if you do the stupid friggin captcha crap.

Lol happy day mole. :wink:

Edited by kcsummer, 18 March 2011 - 10:55 PM.


#53 m0le

m0le

    Can U Dig It?


  •  Avatar image
  • Malware Response Team
  • 34,528 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:10:00 PM

Posted 19 March 2011 - 05:41 PM

Combofix can be removed by just deleting the file on the desktop.

I don't think you have that many problems with your machine. The two files you were missing are not critical, the first was one that can be removed and the second helps Internet Explorer work but the error message has stopped. They have taken your word for the fact that it is missing (probably because they did find it hard going reinstalling by remotes) so the disk will reinstall the file. No problem with doing that.
Posted Image
m0le is a proud member of UNITE

#54 kcsummer

kcsummer
  • Topic Starter

  •  Avatar image
  • Banned
  • Member rank image
  • 434 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:00 PM

Posted 21 March 2011 - 07:22 AM

Combofix can be removed by just deleting the file on the desktop.

I don't think you have that many problems with your machine. The two files you were missing are not critical, the first was one that can be removed and the second helps Internet Explorer work but the error message has stopped. They have taken your word for the fact that it is missing (probably because they did find it hard going reinstalling by remotes) so the disk will reinstall the file. No problem with doing that.

thank you, yes it is much better, I actually think it was a file with my microsoft mouse as that seems to be when it quit going off all the time but I could be wrong.

He is going to call me tomorrow although probably doesn't need to but since it is so hard to reach someone there I would as soon go ahead and maybe he can tell me, what I been trying to do for months, the administrator thing.

Anyway if anything else comes up I will make a note so you might use the info if someone else has a similar problem.

Thank you very much happy first day of spring.

#55 m0le

m0le

    Can U Dig It?


  •  Avatar image
  • Malware Response Team
  • 34,528 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:10:00 PM

Posted 21 March 2011 - 04:47 PM

Thanks for the update, kcsummer. I am closing this thread now but please PM me when you hear, I will edit the topic if it's relevant. :thumbup2:

------------------------------------------

Since this issue appears to be resolved ... this topic has been closed. Glad we could help. :)

If you're the topic starter, and need this topic reopened, please contact me via pm with the address of the thread.

Everyone else please begin a New Topic.
Posted Image
m0le is a proud member of UNITE




1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users