IE won't load after trojan removal

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

removed trojan MSVCRL.DLL
IE will not start. Cannot use regsvr32 /u command even when file is restored.
what can i do to restore IE?
XP Home SP2
P4 1GB RAM
 
No MSVCTVRL.DLL file on the drive.
Currently AVG 7.5 + Adware SE - installed on this system after my friend's
daughter took it surfing. AVG removed the MSVCRL.DLL file to the vault.
The error message says:
Unable to locate component. The application failed to start because
msvcrl.dll was not found. Re-installing the application may fix this problem.

Thank you.
 
Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert
analysis, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
 
Thank you for the advice. After HijackThis, which I never have used, several
more nasties were removed. Also corrupt were the TCP/IP and winsock registry
data. The network controls (and cmd functions) were useless in resolving this
issue, so through the knowledge db at MS I found out how to reinstall TCP/IP
in XP/SP1 - but it also works for SP2 (kb817571). Then I used the winsock2
repair utility from CEXX.org. LSPFIX is for improperly-removed Layered
Service Provider (LSP) software. Then I had to reinstall the Intel Pro VE
drivers numerous times, and follow the rest of kb892889 to at least get the
network CPL to show a connection (status was still zero packets). Throughout
this ordeal I used a neat little tool called WhatsRunning2 to provide me with
accurate process and module info. Many required services were in disarray and
would not cooperate through the management console or by editing their
registry entries in HKLM...Services. Every step seemed to corrupt the TCP/IP
entries again, and with or without DHCP, no data moved (a little progress
seemed to be occuring, or a reformat would have been the solution). Finally,
after all the services were up, the proper modules loaded and the TCP/IP data
again vanished, I exported the regs from another client's laptop (containing
a fresh reload), changed the CLSID to match, and imported it and rebooted.
The router was flashing and I knew this week was going to be better than the
last. My client, however, will probably take my fee from her children's
allowance for some time, as they were surfing while Mom was at work.
Again, my thanks.
 
Back
Top