macgyver
01-15-2005, 06:34 AM
Hi Guys,
I got this bugger of a trojan today and finally fixed it without any problems.
A lot of credit to Nightowl and ECA who look like they've been on the scene for a long time yet, with so many posts for this trojan, I thought I would simplify things.
The common factor in all of the IETLBAss.dll complaints is two entries in HiJackThis:
02 - .......... ietlbass.dll
04 - Global Startup ..... realaudio.exe
Delete both of these IN SAFE MODE and all should be solved.
In cases where things didnt work for other people that have posted. They either (a) didnt delete enough and so the problem recurred (b) didnt delete in safe mode and so it recurred (c) deleted too much and potential ly created additional problems that are unrelated to this trojan.
I dont confess to be an expert but it appears that ietlbass.dll is the trojan and realaudio.exe is the executable that installs the dll on startup. Without deleting the real audio entry, the dll keeps coming back with each startup.
Hope this helps and makes things easier. Nightowl and ECA, thanks for all of your invaluable previous posts. With your experience, I managed to fix it myself without bugging you guys.
Mac.
I got this bugger of a trojan today and finally fixed it without any problems.
A lot of credit to Nightowl and ECA who look like they've been on the scene for a long time yet, with so many posts for this trojan, I thought I would simplify things.
The common factor in all of the IETLBAss.dll complaints is two entries in HiJackThis:
02 - .......... ietlbass.dll
04 - Global Startup ..... realaudio.exe
Delete both of these IN SAFE MODE and all should be solved.
In cases where things didnt work for other people that have posted. They either (a) didnt delete enough and so the problem recurred (b) didnt delete in safe mode and so it recurred (c) deleted too much and potential ly created additional problems that are unrelated to this trojan.
I dont confess to be an expert but it appears that ietlbass.dll is the trojan and realaudio.exe is the executable that installs the dll on startup. Without deleting the real audio entry, the dll keeps coming back with each startup.
Hope this helps and makes things easier. Nightowl and ECA, thanks for all of your invaluable previous posts. With your experience, I managed to fix it myself without bugging you guys.
Mac.