Desktop Hijacked by I believe ej.exe

[kevinC]

Thank you so much. I have me laptop back =).
I could not reinstall windows because I did not have disk. What I ended up doing was copying my wininet.dll file from c:/window/i386 and copy/paste to system32 folder. All works great now. Have ran multiple virus and spybot scans and it all comes back clean.

THANK YOU SO MUCH CALAMITY you ROCK!

[CalamityJane]

What I ended up doing was copying my wininet.dll file from c:/window/i386 and copy/paste to system32 folder.

Hmmmmmm. I thought that this SmitfraudFix tool was supposed to look in other locations for a clean copy and replace it. Your post and these logs tell me it didn't!

Thanks for the feedback - I'm going to have to check that out with the tool's author. If I had known that it didn't look for a clean copy elsewhere, I would have suggested just what you did!

Anyway, I'm glad to hear we have finally got this resolved

Now that your PC is clean, make sure all programs are running properly and then you'll need to reset your restore point in Windows XP.......why?

One of the best features of Windows ME or XP is the System Restore option, however if a malware infects a computer with this operating system it can be backed up in the System Restore folder. Therefore, clearing the restore points is necessary after malware removal.

To reset your restore points, please note that you will need to log into your computer with an account which has full administrator access. You will know if the account has administrator access because you will be able to see the System Restore tab. If the tab is missing, you are logged in under a limited account.

(winXP)

1. Turn off System Restore.
Go to Start > Run, click on *My Computer*.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.

2. Reboot.

3. Turn ON System Restore.
Go to Start > Run, click on *My Computer*.
Click Properties.
Click the System Restore tab.
UN-Check *Turn off System Restore*.
Click Apply, and then click OK.

How to Turn On and Turn Off System Restore in Windows XP
http://support.microsoft.com/default...b;en-us;310405

Next, I highly recommend you get some extra protection to prevent future infections. Here are some things you can do and some free programs to help .

"So, how did I get infected in the first place?" (by Tony Klein)
http://forums.spybot.info/showthread.php?t=279

I'm happy to see you have SP2 installed. That will address numerous security issues in your Operating System and IE
Make sure that you keep your Operating System and IE updated with the latest Critical Security Updates from Microsoft...they usually come out once a month, on the 2nd Tuesday of each month. This is the first step in malware prevention, as many nasties now take advantage of new exploits and if not patched, you are vulnerable!
Windows Update
http://update.microsoft.com/microsoftupdate/

And see this link for instructions on how to configure the enhanced security features in SP2:
http://www.microsoft.com/technet/sec...p/iesecxp.mspx

I also highly recommend to get the free tool, Microsoft Baseline Security Analyzer (MBSA) from Microsoft to analyze your PC security for prevention purposes.

MBSA Version 2.0 will scan for common system misconfigurations on Windows 2000, Windows XP, and Windows Server 2003 systems. This program will identify the system security weaknesses in your browser and operating system and provides easy instructions to correct them. This includes any missing critical Windows security updates, system vulnerabilities and your IE Browser security settings. Get the download here:
Microsoft Baseline Security Analyzer
http://www.microsoft.com/technet/sec.../mbsahome.mspx
Choose MBSAsetup-EN.msi = (English Version) or the language appropriate for you.

[CalamityJane]

Since your issues seem to be resolved, I'll go ahead and close & archive this thread now. If you should need it reopened for any reason, please send a PM ot either me or one of the Forum Leaders