IE6 Reinstall

Hi...
I followed your instructions and RAV still reports a virus....

One thing, after right licking and choosing iexplore.exe for deletion and then rebooting... iexplore.exe did NOT appeqar in the recycle bin and was still in the c:\program files\internet explorer folder....

 

Hi Guys.

WIN32: Trojan-gen.{UPX!} is sort of a generic term for quits a few troji

Dave possibly a pv log will help ? and maybe even cwsredder

PS I asked for a submit of the file, several folks have expressed interest in it. Please do send it.

 

Also keep an eye on this post please,
http://forum.avast.com/index.php?board=2;action=display;threadid=5163

 

Hi...

I was on myway over to that forum to post about the problem...

I responded to the reply to your post that I had already tried to REPAIR and that was unsuccessful...

 

Boot to safe mode, verify the process is not running and try to delete it. No joy? Try to select it for deletion and reboot, back to safe mode. Search the drive for more instances of the file and select all found. Empty Temp folders and clear temp. internet files. Try again.

 

let us know how you make out ?

If you would list for us every exe in the internet explorer folder to, spelling is important,Im feeling a little foolish I didnt see the extra R

 

I too missed the spelling of the reported filename infected.. and I too feel a little foolish...

After taking a fresh look this morning here is what I find...

The infected filename is : c:\program files\internet explorer\iexploreR.exe
When I display the c:\program files\internet explorer directory I DO NOT see a file named iexploreR.exe, just iexplore.exe !

Here is a folder list:

Directory of C:\PROGRA~1\INTERN~1

11/23/2001 10:22a <DIR> .
11/23/2001 10:22a <DIR> ..
11/23/2001 10:22a <DIR> Connection Wizard
05/08/2001 07:00a 14,608 HMMAPI.DLL
11/23/2001 10:22a <DIR> SIGNUP
11/23/2001 10:23a <DIR> PLUGINS
06/07/2002 07:27p 839,730 dnstk10.dll
06/07/2002 07:27p 397,379 web_ie.dll
06/07/2002 07:27p 1,896,498 dd10midl.dll
06/07/2002 07:27p 983,079 dmfc6.dll
12/31/2002 09:12a <DIR> 1033
12/31/2002 09:12a <DIR> IE Uninstall
12/31/2002 09:12a <DIR> W2K
08/29/2002 05:56p 490,608 ie6setup.exe
08/29/2002 10:50a 6,843 Q813489.cat
08/29/2002 10:50a 6,843 Q330994.cat
08/29/2002 11:50a 6,843 Q818529.cat
08/29/2002 11:50a 6,843 Q822925.cat
08/29/2002 11:50a 6,843 Q828750.cat
08/29/2002 11:50a 6,843 Q824145.cat
03/09/2004 11:02p <DIR> MUI
08/29/2002 10:50a 6,843 Q837009.cat
08/29/2002 10:50a 6,843 Q831167.cat
08/29/2002 07:14a 34,384 fixie.inf
08/29/2002 07:14a 155,648 DW15.EXE
08/29/2002 07:14a 91,136 IEXPLORE.EXE
08/29/2002 07:14a 41,224 readme.txt
08/29/2002 07:14a 21,809 support.txt
08/29/2002 07:34a 38,062 iesetup.cif
08/29/2002 07:14a 14,336 iedetect.dll
08/29/2002 10:50a 6,843 Q832894.cat
06/13/2004 07:27a 0 dirlist
23 File(s) 5,080,088 bytes
9 Dir(s) 20,373,340,160 bytes free

 

May be worth a try to see if RegSeeker can find it. Click find in registry, then check the Search files box and include hidden and system boxes.

BTW, no emails recieved.

 

FOLKS.....

I have located AND deleted the iexploreR.exe file and that HAS eliminated the virus infection using my virus checker....

MANY, MANY THANKS to all of you that have participated in this thread.... I am very VERY greatful for all your efforts!!!!!

Regards,

Al

 

Great!! How did you locate it?

 

I am embarrased to say that I had the hidden files and folders unviewable...

 

Live and learn, AL. It's sometimes easy to overlook the obvious. Glad you got it gone. That's what matters! Now, before you forget, since the IE6 uninstaller was run, be off to Windows Update.

 

"Live and learn "... a motto I have lived by for more years than I care to admit

As for Windows Update... that was done immediately after IE6 repair...

I take updates seriously and that is why I am still dumbfounded as to how that iexploreR.exe got in...

Well, once again... thank you for your help...

Al

 

You're welcome. Happy to help.