MalWare Removal Forum

I'm unable to access many applications (all browsers, skype, ccleaner, avast, itunes etc), but others I can (gimp, dropbox, etc). The error messages are always related to missing iertutil.dll file. I've tried to import it from another working computer (with a different operating system) and tried to download it from the internet on my other computer, but still no success. I've tried 3 system restore, again with no success.

The infected computer is a 64 bit Windows 7 PC.

Please help!

Thank you,

Gabe

Hi gabethegrape,



The DLL must be the correct version for the operating system.

Do you have Windows 7 Service Pack 1 installed?
_________________

Yes. I have Windows 7 Service Pack 1 installed. I just re-installed it again to make sure.

My antivirus software won't launch, Windows update won't launch, none of my internet browsers will launch, and they all give me an error related to iertutil.dll. When I check the System32 folder, the file is there. I tried everything recommended here http://www.it-supportsydney.com.au/iert ... d-to-start, and it still didn't work.
_________________

Hi gabethegrape,


SystemLook
Please download SystemLook_x64.exe... by jpshortstuff and save it to your Desktop.
Alternate download site.

1. Double-click SystemLook_x64.exe to run it.
   If you receive an "Open file - security warning"... asking "Do you want to run this file?"... press the Run button.
2. Highlight and copy the following entries: ... into SystemLook's main text entry window.
   
   Code:
   :filefind
   iertutil.dll
   :file
   C:\Windows\System32\iertutil.dll
   C:\Windows\SysWOW64\iertutil.dll
   
3. Press the Look button to start the scan.
   When finished, a Notepad window will open with the results of the scan.
   A file will be created (on your Desktop) with the results of the scan, named "SystemLook.txt"
4. Please post the contents of the SystemLook.txt file in your next reply.

Please also let me know what version of Internet Exporer you are using.

Please see attached file. I'm using IE 9 (64 bit).

On reboot, I get this message - AvastUI.exe - Entry Point Not Found - with the following comment:

"The procedure entry point FastMimeGetFileExtension could not be located in the dynamic link library iertutil.dll."

Here is the SystemLook.txt output:

SystemLook 30.07.11 by jpshortstuff
Log created at 08:09 on 14/08/2012 by gabe
Administrator - Elevation successful

Invalid Context: filefine

No Context: iertutil.dll

========== file ==========

C:\Windows\System32\iertutil.dll - File found and opened.
MD5: 1AB894FA897E26B23CA53BEED72F61F4
Created at 17:03 on 26/07/2012
Modified at 05:08 on 14/08/2012
Size: 2000384 bytes
Attributes: --a----
FileDescription: Run time utility for Internet Explorer
FileVersion: 8.00.6001.19165 (longhorn_ie8_gdr.111021-1715)
ProductVersion: 8.00.6001.19165
OriginalFilename: IeRtUtil.dll
InternalName: IeRtUtil.dll
ProductName: Windows® Internet Explorer
CompanyName: Microsoft Corporation
LegalCopyright: © Microsoft Corporation. All rights reserved.

C:\Windows\SysWOW64\iertutil.dll - Unable to find/read file.

-= EOF =-

You do not have the required permissions to view the files attached to this post.

Hi gabethegrape,

The first line of the SystemLook script should be



But the log shows the line that has been used as



Please run SystemLook again with the correct script and post the log.

SystemLook 30.07.11 by jpshortstuff
Log created at 09:11 on 14/08/2012 by gabe
Administrator - Elevation successful

========== filefind ==========

Searching for "iertutil.dll"
C:\Windows\system\iertutil.dll --a---- 1985536 bytes [16:49 26/07/2012] [17:04 19/01/2012] 135007DA38A018FDA20785B2A68FEDE5
C:\Windows\System32\iertutil.dll --a---- 2350592 bytes [17:03 26/07/2012] [02:14 15/05/2012] 0447863E1DB18711653F863AB71E87A3
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.16385_none_be52e3381d372f67\iertutil.dll --a---- 2440704 bytes [23:59 13/07/2009] [01:41 14/07/2009] 39570395292A4702FDE94C345DF0C39E
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.16671_none_be59b7ae1d32a58f\iertutil.dll --a---- 2441216 bytes [13:59 12/11/2010] [05:34 08/09/2010] E8DB77BB2324D91B173A9C9F9ED12F98
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.16700_none_bea468be1cfac5c8\iertutil.dll --a---- 2447872 bytes [17:37 15/12/2010] [06:31 04/11/2010] E6E7739663F5ADCFADDB7ECD59C5396C
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.16722_none_be90c97a1d093058\iertutil.dll --a---- 2447872 bytes [00:12 09/02/2011] [06:11 18/12/2010] 38ABE826E5934C35D2D33EBAEC042358
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.20795_none_bed1b5c9365ce297\iertutil.dll --a---- 2442752 bytes [13:59 12/11/2010] [05:25 08/09/2010] 09ABA376F07AEAF203C19943888167DA
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.20831_none_bf0e960f362fd2bc\iertutil.dll --a---- 2447360 bytes [17:37 15/12/2010] [06:37 04/11/2010] 8BAE0A181B5463A56E0C95EDADEE1B86
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.20861_none_beee264b3648268f\iertutil.dll --a---- 2447360 bytes [00:12 09/02/2011] [06:06 18/12/2010] 531939DCD16652D80CD7383E24E06B30
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7601.17514_none_c083f7001a25b301\iertutil.dll --a---- 2444288 bytes [06:57 25/02/2011] [13:26 20/11/2010] 5180380D353277D395D3B36D790AA93E
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.16421_none_bc41e89b5f27f2ee\iertutil.dll --a---- 2136064 bytes [06:04 03/04/2011] [06:04 03/04/2011] 25896318C76F216FE878024603A21CDF
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.16430_none_bc3618655f30f588\iertutil.dll --a---- 2136064 bytes [05:46 16/06/2011] [01:19 23/04/2011] 1D98538193C4206C2800DD0986A0976D
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.16434_none_bc3a198d5f2d5ae4\iertutil.dll --a---- 2143232 bytes [10:02 20/08/2011] [05:33 22/07/2011] FBD511357A9EEA1DAAFD3687E714CD95
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.16437_none_bc3d1a6b5f2aa6e9\iertutil.dll --a---- 2143744 bytes [10:01 13/10/2011] [05:12 01/09/2011] 51F1A71EF8185B959A6E06D98E489287
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.16440_none_bc2b48795f391179\iertutil.dll --a---- 2144256 bytes [05:48 14/12/2011] [01:36 04/11/2011] 6CFF67BBACE1DE0AD9BF94C2BCE688C7
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.16441_none_bc2c48c35f382ad0\iertutil.dll --a---- 2144256 bytes [11:01 16/02/2012] [06:59 14/12/2011] E57A6E4941EAA298433623B20F649C8B
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.16443_none_bc2e49575f365d7e\iertutil.dll --a---- 2144256 bytes [02:14 11/04/2012] [06:43 28/02/2012] DDDF8F6E16BEA898C07F9B2C8E7F59D2
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.16446_none_bc314a355f33a983\iertutil.dll --a---- 2144768 bytes [10:03 14/06/2012] [01:54 18/05/2012] B02D84F0923132869E1ABFE08E0D2314
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.20530_none_bcbfb530784e9552\iertutil.dll --a---- 2136064 bytes [05:46 16/06/2011] [00:16 23/04/2011] B2E3E02110471A971F5C7330778DC727
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.20534_none_bcc3b658784afaae\iertutil.dll --a---- 2143232 bytes [10:02 20/08/2011] [05:10 22/07/2011] 3B6924745CE57362253E43008E741C3B
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.20537_none_bcc6b736784846b3\iertutil.dll --a---- 2143744 bytes [10:01 13/10/2011] [04:34 01/09/2011] 20AE13E8248943F9192CBBB9DD08C648
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.20544_none_bcb8e66c7853169f\iertutil.dll --a---- 2144256 bytes [05:48 14/12/2011] [02:12 04/11/2011] BD834E55DA379318BF425E50B336A2DA
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.20546_none_bcbae7007851494d\iertutil.dll --a---- 2144256 bytes [11:01 16/02/2012] [06:03 14/12/2011] C791A78ACAF337DADBFCC7E1D44DFA77
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.20548_none_bcbce794784f7bfb\iertutil.dll --a---- 2144256 bytes [02:14 11/04/2012] [03:01 28/02/2012] 318F557D3D7773AC201AA04400DC1A32
C:\Windows\winsxs\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.20551_none_bcab15a2785de68b\iertutil.dll --a---- 2144768 bytes [10:03 14/06/2012] [00:40 18/05/2012] D310AFEF54A3815EB14A386DF70F361B
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.16385_none_623447b464d9be31\iertutil.dll --a---- 2058240 bytes [23:44 13/07/2009] [01:15 14/07/2009] 13D1F490AF6C7649F51BA29F9CCBB778
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.16671_none_623b1c2a64d53459\iertutil.dll --a---- 2058752 bytes [13:59 12/11/2010] [04:28 08/09/2010] DE03C0797D592582317A0AA6CDA3A0C4
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.16700_none_6285cd3a649d5492\iertutil.dll --a---- 2063360 bytes [17:37 15/12/2010] [05:48 04/11/2010] 24A06A51EE1DFD976E6EC01F8EC0B6AF
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.16722_none_62722df664abbf22\iertutil.dll --a---- 2063360 bytes [00:12 09/02/2011] [05:29 18/12/2010] F2B289B2DBB4F6C24370D90761061D01
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.20795_none_62b31a457dff7161\iertutil.dll --a---- 2058752 bytes [13:59 12/11/2010] [04:30 08/09/2010] 50DCB7E007B68ABFB06DB91EFAAA00F6
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.20831_none_62effa8b7dd26186\iertutil.dll --a---- 2063872 bytes [17:37 15/12/2010] [05:51 04/11/2010] 251282C40ED85E8F924A8497131DAF25
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7600.20861_none_62cf8ac77deab559\iertutil.dll --a---- 2063872 bytes [00:12 09/02/2011] [05:27 18/12/2010] 4F1C954B2815E8D88DD9431385050072
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.7601.17514_none_64655b7c61c841cb\iertutil.dll --a---- 2064384 bytes [06:57 25/02/2011] [12:19 20/11/2010] 683E0C9DA9E1EB9E4691DFAE0EC83E36
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.16421_none_60234d17a6ca81b8\iertutil.dll --a---- 1785344 bytes [06:04 03/04/2011] [06:04 03/04/2011] D3F60BC53FF510B88B9ACBC3F64FE922
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.16430_none_60177ce1a6d38452\iertutil.dll --a---- 1785344 bytes [05:46 16/06/2011] [23:26 22/04/2011] 733C7F11B06892F9DC283D4BB34ABD25
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.16434_none_601b7e09a6cfe9ae\iertutil.dll --a---- 1791488 bytes [10:02 20/08/2011] [02:44 22/07/2011] AB0E44C70C5C732C1E312EAEABECC1D5
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.16437_none_601e7ee7a6cd35b3\iertutil.dll --a---- 1791488 bytes [10:01 13/10/2011] [02:23 01/09/2011] 217557259182C86A6D3ADE11BC42B74A
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.16440_none_600cacf5a6dba043\iertutil.dll --a---- 1792000 bytes [05:48 14/12/2011] [22:32 03/11/2011] 1416AB557BE700FA117323B6B8F32882
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.16441_none_600dad3fa6dab99a\iertutil.dll --a---- 1792000 bytes [11:01 16/02/2012] [02:52 14/12/2011] CDF5B6AEC538E02D5579E2E791042A1A
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.16443_none_600fadd3a6d8ec48\iertutil.dll --a---- 1792000 bytes [02:14 11/04/2012] [01:04 28/02/2012] 1341915D4705A3BA68BC49E83024ADE0
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.16446_none_6012aeb1a6d6384d\iertutil.dll --a---- 1793024 bytes [10:03 14/06/2012] [22:27 17/05/2012] E0C68CE8A3C548B101ABC01DB3DDB7CA
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.20530_none_60a119acbff1241c\iertutil.dll --a---- 1785344 bytes [05:46 16/06/2011] [22:49 22/04/2011] 573BA22A55FA2BB6059EAE72C9EC8F34
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.20534_none_60a51ad4bfed8978\iertutil.dll --a---- 1791488 bytes [10:02 20/08/2011] [01:44 22/07/2011] 066598ABE67062039F5B336059065096
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.20537_none_60a81bb2bfead57d\iertutil.dll --a---- 1791488 bytes [10:01 13/10/2011] [01:51 01/09/2011] A8CF11C575D22934378C78983B3D4755
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.20544_none_609a4ae8bff5a569\iertutil.dll --a---- 1792000 bytes [05:48 14/12/2011] [23:01 03/11/2011] 65F7B4AE72F3D2983F2DFF7E98E83419
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.20546_none_609c4b7cbff3d817\iertutil.dll --a---- 1792000 bytes [11:01 16/02/2012] [02:23 14/12/2011] B93C966BC42CF9D0DD00752DD85C06F6
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.20548_none_609e4c10bff20ac5\iertutil.dll --a---- 1792000 bytes [02:14 11/04/2012] [00:53 28/02/2012] 9BC2189BB54C7416D32E91BA692508F4
C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.20551_none_608c7a1ec0007555\iertutil.dll --a---- 1793024 bytes [10:03 14/06/2012] [22:12 17/05/2012] A598B6A45346A21960D661C6A1E7552E

========== file ==========

C:\Windows\System32\iertutil.dll - File found and opened.
MD5: 0447863E1DB18711653F863AB71E87A3
Created at 17:03 on 26/07/2012
Modified at 02:14 on 15/05/2012
Size: 2350592 bytes
Attributes: --a----
FileDescription: Run time utility for Internet Explorer
FileVersion: 8.00.6001.19272 (longhorn_ie8_gdr.120514-1250)
ProductVersion: 8.00.6001.19272
OriginalFilename: IeRtUtil.dll
InternalName: IeRtUtil.dll
ProductName: Windows® Internet Explorer
CompanyName: Microsoft Corporation
LegalCopyright: © Microsoft Corporation. All rights reserved.

C:\Windows\SysWOW64\iertutil.dll - Unable to find/read file.

-= EOF =-

Unfortunately the required versions are not showing as available anywhere on your system. The next step is to download IE9 from
http://windows.microsoft.com/en-GB/inte ... s/ie/home/

And reinstall, please do so and then run the SystemLook scan again and post the log.

I've tried to reinstall IE9 unsuccessfully. It does not appear in 'Programs and Features' to uninstall and my attempt to uninstall via command line as per instructions here (http://support.microsoft.com/kb/2509039) caused an error. For some reason, I cannot download the version I need from the link you provided either. I was unable to find it anywhere else. Could attach the latest version so I can try again?

What is the exact error message you see when trying to download?

Do you have access to another computer that you could use to download?

Yes, I'm using my other computer (running a Vista) and then downloading and transferring files via USB. The error message I got when trying to download IE9 for Windows 7 64bit was "cannot connect to the Internet..." I got the same error message on my friend's computer when I tried the same thing. So, if you can get a copy of the latest IE9 and attach it, I may be able to try what you suggested earlier. Otherwise, please let me know what I should do.

The download is too big to attach to a forum post.

I just tried again and the link works fine for me.

I am confident that the reinstall of IE9 will install the correct versions of the DLL. Please try to download again from that link as there may have been a temporary glitch with the site.

Can you download other files from Microsoft download?

Nope. Tried about 10 times and I get the same error message. I even tried different versions in different languages. Maybe if you attach a link to a large file download site??

And are ALL files on the Microsoft downloads site blocked?

Have you tried from the PC with the problem using another browser (e.g. Firefox)?