Please help get rid of smitfraud remnants

[Millslord]

Regmon works. Placed it in C:/

[Mosaic1]

Having no dllcache folder can be a problem.

Please go to start >Run and type cmd.exe

Press enter

Copy and paste in this command( Right click in the command window and click paste on the context menu)

cd \ & dir /s /a /b themeui.dll > where.txt


When that finishes running, open C:\where.txt and post the contents please.

[Millslord]

C:\WINDOWS\$NtServicePackUninstall$\themeui.dll
C:\WINDOWS\ServicePackFiles\i386\themeui.dll
C:\WINDOWS\system32\themeui.dll

[Millslord]

none of my three PCs has dllcache.

[Mosaic1]

dllcache is where backups for system files are kept. IF one goes missing, file protection uses the copy in dllcache to replce the file. It's not foolproo

Let's try this.

Go to:
C:\WINDOWS\ServicePackFiles\i386\themeui.dll

Hold down the right mouse button on themeui.dll and drag it to the system32 folder. Release the mouse. A menu will appear. Click copy. It will ask if youwant to overwrite the current copy. Say yes.

Now see if you can register themeui.dll

Restart.Test your display properties.


Let me know how it all goes and if you get any errors.

[Mosaic1]

Also, please og back to this post:
http://forums.spybot.info/showpost.p...7&postcount=57

I had asked you to try some other things. Please do them as well if you still havce no luck after trying this latest. I am trying to pinpoint where the hangup is.

[Millslord]

I have done and e-mailed the results to you already

[Millslord]

I am unable to copy themeui.dll into system 32. I always get a message along the following lines:

Themeui.dll can't be copied. It is being used by another user or program. Close down all programs using this file and try again.

[Mosaic1]

Try it in Safe mode. The Theme service doesn't run there.

I don't see anything to help in your Event Viewer files.

Although replacing themeui.dll and then registering it again, seems like a simplistic approach, we should try it.

I'll have to do more diagnostics to check this out here. It's not really a huge issue, although it is annoying. If you're willing we can dig deeper into it.

We'll use Regmon to monitor an attempt at registering themeui if you still can't properly register themeui.dll after it has been replaced. It has to be the user interface.

[Mosaic1]

You had that theme program installed.
It might have replaced files or made changes. There's a lot more we can do before giving up.