Browser problem related to missing iertutil.dll

Hi gabethegrape,

As yet I don't see any reason for the issue with downloading from the Microsoft Download site.

Just to confirm, the router you are using is a standard home router?

Do you have access to any other computers other than the ones you have already tried that you could use to download the IE9 setup file?

I'll try with a friend's cOmputer and let you know if it worked.

And the router? what model is it?

Lynksys wireless-G 2.4 GHz Broadband Router.
I was also able to get the latest version of IE9 and my Windows 7 PC gave me the following error:

"Setup can't continue because a more recent version of Internet Explorer is installed on your computer."

Hi gabethegrape,

Setup can't continue because a more recent version of Internet Explorer is installed on your computer

So we need to obtain the dll files from the latest update of IE9, the following looks long winded but will provide the correct files.

The files should be

C:\Windows\System32\iertutil.dll --a---- 2144768 bytes
C:\Windows\SysWOW64\iertutil.dll --a---- 1793024 bytes

So, firstly delete (or move to a safe location)

C:\Windows\system\iertutil.dll

Next

Download IE9-Windows6.1-KB2719177-x64.msu from here.

Now create a temp folder c:\temp and move the downloaded file to that folder.

We now need to extract the contents of that file, open a command prompt and navigate to c:\temp

Type (you may find it easier to highlight the command, right click and copy, then right click on the title bar of the command prompt and edit-paste)

IE9-Windows6.1-KB2719177-x64.msu /extract:c:\temp

then press return

This will extract the contents into c:\temp, one of the files is a CAB file that contains the required DLLs

Now we need to expand the CAB file, so at the same command prompt type (or copy and paste)

expand IE9-Windows6.1-KB2719177-x64.cab c:\temp -F:*

then press return

This will create a whole load of subfolders, the copies if the DLL we require are in the folders


amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.16447_none_bc324a7f5f32c2da
x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.16447_none_6013aefba6d551a4

So copy iertutil.dll from

amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.16447_none_bc324a7f5f32c2da

to

C:\Windows\System32

And from

x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_9.4.8112.16447_none_6013aefba6d551a4

to

C:\Windows\SysWOW64

Now reboot and run a new scan with SystemLook using the same script as before and post the log in your next reply.

Perfect! The Windows 7 computer works again!

Please see the attached SystemLook.txt file.

Thank you so much for your help. Is there more to explore with the Vista computer? Do you think that one is infected?

Hi gabethegrape,

Perfect! The Windows 7 computer works again!

Great stuff! Glad it fixed it.

Is there more to explore with the Vista computer?

There are no signs of infection on the Vista computer but we do need to remove the tools that we installed.

Uninstall ComboFix

• Click START then RUN
  
• Now type Combofix /Uninstall in the runbox and click OK

Remove all used tools

Please download OTC and save it to desktop.

• Double-click OTC.exe..
• Click the CleanUp! button.
• Select Yes when the "Begin cleanup Process?" prompt appears.
• If you are prompted to Reboot during the cleanup, select Yes.
• The tool will delete itself once it finishes, if not delete it by yourself.

Note: If you receive a warning from your firewall or other security programs regarding OTC attempting to contact the internet, please allow it to do so.

You can also remove the folder c:\temp from the Windows 7 computer.

Happy surfing and stay clean!

Hi gabethegrape,

As your problems appear to have been resolved, this topic is now closed.
We are pleased we could help you resolve your computer's issues.

If you are satisfied with our assistance and wish to donate to help with the costs of this volunteer site,
please read: Donations For Malware Removal