TPM said:I get the following RUNDLL error message about every 10 seconds when
my computor in on and a user is logged on.
"Error Loading C:\PROGRA~1\INTEN~2\inetkw.dll" How can I get rid if
this
annoying message? Much Thanks in advance.
Malke said:You have malware on your computer. After deleting Temporary and
Temporary Internet Files, go through the following malware removal
steps. Do everything with updated tools in Safe Mode.
1) Scan in Safe Mode with current version (not earlier than 2004)
antivirus using updated definitions.
Before you remove malware, get LSPFix (or WinSockFix for XP which you
can get from MajorGeeks) - see links below.
2) Remove spyware with Spybot Search & Destroy and Ad-aware. These
programs are free, so use them both since they complement each other.
There is a new version of CWShredder from Intermute. I would not
install the other Intermute programs, however. Alternately, there are
CoolWebSearch malware removal steps at SilentRunners.
Be sure to update these programs before running, and it is a good idea
to do virus/spyware scans in Safe Mode. Make sure you are able to see
all hidden files and extensions (View tab in Folder Options).
If the malware remains even after you used Ad-aware and Spybot, you can
scan with HijackThis. HijackThis is an excellent tool to discover and
disable hijackers, but it requires expert skill. See below for
HijackThis links, including sites where you can post your HJT logs. A
combination of HijackThis and About:Buster works well in removing the
About:Blank homepage hijacker. Again, this is an expert tool and
novices should get help with it.
3) If you are running Windows ME or XP, you should disable/enable System
Restore after the system is clean because malware will be in the
Restore Points. With ME, you must disable System Restore completely.
With XP, you can delete all but the most recent (presumably clean)
System Restore point from the More Options section of Disk Cleanup
(Run>cleanmgr).
4) Make sure you've visited Windows Update and applied all security
patches. Do not install driver updates from Windows Update.
5) Run a firewall.
Links to help with malware:
Software/Methods:
http://www.safer-networking.org - Spybot Search & Destroy
http://www.lavasoftusa.com - Ad-aware
http://www.majorgeeks.com - good download site
http://www.intermute.com/spysubtract/cwshredder_download.html
http://www.silentrunners.org/sr_cwsremoval.html. - SilentRunners
http://www.cexx.org/lspfix.htm - Repair Winsock 2 settings after
removing spyware
http://www.spychecker.com/program/winsockxpfix.html - WinsockXPFix.exe
HijackThis:
http://www.aumha.org/a/hjttutor.htm - HijackThis tutorial by Jim
Eshelman
http://aumha.net - forums
http://spywarewarrior.com/viewforum.php?f=5 - Spyware Warrior HijackThis
forum
http://www.wilderssecurity.com/
http://forums.tomcoyote.org/
General:
http://aumha.net - look under "Security" for various forums
http://rgharper.mvps.org/cleanit.htm
http://mvps.org/winhelp2002/unwanted.htm
http://www.aumha.org/a/parasite.htm - The Parasite Fight
http://www.spywarewarrior.com/rogue_anti-spyware.htm
Malke
--
MS-MVP Windows User/Shell
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic"
TPM said:Thank You for the reply. It was very helpful. I updated and ran Spy
Bot, A2
scanner and Ad aware in safe mode. These programs seemed to clean up
a lot of things but I am still getting the RUNDLL error message as
described
earlier. I had allready had these programs installed on my computor.
I use ANTIVIR as my anti virus. When I go to update the program the
computor will not allow me to upgrade. It will not establish a
connection
and the operation times out. I went to the major geeks web site and
am installing the whole program from there now as I type this reply.
I run sygate personal firewall.
I am leary of running Hijack this. As I am no expert. Is there
anthing else I can do?
TPM said:Thanks again Malke, I did manage to get the latest update to my
AntiVir
antivirus software downloaded and installed. When I ran it, it was
able to
remove 8 infected files. However there were two infected files in the
Archives it was not able to remove. They were bunSetup [1] .cab
and
Sentry.cab. Is there a more direct aproach you can coach me through
to
remove infected file in archives?
I have not had a chance to download HJT as of yet but hopefully will
get that done today.
Malke said:TPM said:Thanks again Malke, I did manage to get the latest update to my
AntiVir
antivirus software downloaded and installed. When I ran it, it was
able to
remove 8 infected files. However there were two infected files in the
Archives it was not able to remove. They were bunSetup [1] .cab
and
Sentry.cab. Is there a more direct aproach you can coach me through
to
remove infected file in archives?
I have not had a chance to download HJT as of yet but hopefully will
get that done today.
The archives are your System Restore points. Go to
Start>Programs>Accessories>System Tools>System Restore. Make a new
System Restore point called something useful like "clean". After that's
done, exit out of the System Restore applet. Now run Disk Cleanup with
Start>Run cleanmgr [enter]
Choose the More Options tab and delete all but the last System Restore
point. That should do it for you.
Malke
--
MS MVP - Windows Shell/User
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
TPM said:Thanks for the the latest suggestion. I did as you suggested and
Spybot
still finds one or two problems it can not fix. The program suggests
I run
it at the next start up and I do but with the same results. There are
infected files in the archives it can not remove. ---- Thanks
Want to reply to this thread or ask your own question?
You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.