Repair Notes
NOTE: These notes are primarily for my reference. If you have these listed problems, and decide to try these repairs on your own, I claim NO responsibility.
Page goes to safetydefender.com. Claims to have the worm W32.Sinnaka.A@mm
Download SmitRem-
Turn off System Restore. (Right-click My Computer>Properties>System Restore)
-
Boot into Safe Mode
-
Run a spyware scanner and remove all that it finds.
-
Unzip and run SmitRem. (RunThis.bat)
-
Should find and delete bad files.
-
Reboot normally. IE should work correctly.
-
Turn on System Restore
- Log on with an administrative account
- Right click on the folder you want to be able to open
- Select Properties
- Click on the Security tab
- Click on the Advanced button
- Click on the Owner tab
- In the list of names, click on your user name
- To take ownership, click on Replace Owner on Subcontainers and Objects
- Click OK and then click Yes
Click Start>Run, bring up a command prompt by typing in "CMD" and type " fsutil dirty query x: " (x: is the affected drive letter). This queries the drive, and more than likely it will tell you that it is dirty. Next, type "CHKNTFS /X x:". The X tells Windows to NOT check that particular drive on the next reboot. At this time, manually reboot your computer, it should not do a Chkdsk and take you directly to Windows.
Once Windows has fully loaded, bring up another CMD prompt. Do a Chkdsk manually by typing "Chkdsk /f /r x:". This should take you through 5 stages of the scan and will unset that dirty bit. Finally, type "fsutil dirty query x:" and Windows will confirm that the dirty bit is not set on that drive.
2. On the General tab, in the Temporary Internet Files section, click on
Delete Files. Check the box to 'Delete all Offline Content' and click OK.
3. Close the Internet Options window.
Next, we need to clear out the Windows Update folder.
1. Click on Start, then My Computer. (Or on Windows 2000 machines, just open
the desktop icon)
2. Click on the Tools menu and select Folder Options from the menu
3. Click on the View tab, and select the option to Show Hidden file and
folders
4. Click Apply, then click OK
5. Open the C drive
6. Open the Program Files folder
7. Open the WindowsUpdate folder and delete everything in this folder except
the V4 folder
8. Open the V4 folder and delete everything you find in this folder except
for the iuhist.xml file
9. Close this window
Next, we need to check the WUTemp folder.
1. Click on Start, then My Computer
2. Open the C drive
3. Delete the WUTemp folder and all of its contents.
And lastly, we need to remove the current control files on your machine.
1. Click on Start, then Run.
2. Type in 'regsvr32 iuctl.dll /u' (without the quotes) and click OK. You
should get a successful message; click OK on that as well.
3. Open Windows Explorer and navigate to the folder
C:\Windows\System32\dllcache. If you don't see the \dllcache folder then it
is set to hidden.
To show hidden files/folders:
a. Open Windows Explorer.
b. On the menu, click on Tools and select Folder Options. The Folder
Options window will open.
c. Select the View tab.
d. Under the Hidden Files and Folders section, select the option "Show
hidden files and folders".
e. Remove the check mark in the box next to the option "Hide protected
operating system files (recommended)".
f. Click the Apply button, then click the OK button.
4. Find the files IUCTL.DLL and IUENGINE.DLL and delete them.
5. Now navigate to the folder C:\Windows\System32 and find the files
IUCTL.DLL and IUENGINE.DLL. Delete them as well.
6. Click on Start, then Search, then choose All Files and Folders.
7. Click on Advanced Options, and check the first three boxes listed there.
8. Type in the file name IUCTL.DLL and click Search Now. Delete every copy
of this file that you find.
9. Run the search again for the file IUENGINE.DLL. Again, delete every copy
of this file you find.
Once all of this has been completed, try the Windows Update Site again.
If the site still doesn't work, check the C:\Windows\Windows Update.log file
and see if there are any error messages. The most current entries will be
at the "bottom" of the text file."
1. Start > Run > type ‘regedit’
2. Locate the following path: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook
3. Now right click on the key Outlook and select option: Export and save .reg files to your desired location.
4. To restore, double-click the .reg file to place the data into the registry.