aelupsvc32.dll, iexpl0re.exe, and wsfit32.sys

Discussion in 'Malware Help (A Specialist Will Reply)' started by fizzix, Nov 25, 2006.

  1. fizzix

    fizzix Private E-2

    Hi. My laptop computer is infected with the files mentioned in the subject. Nothing is removing them. I have Norton 2005 and Spy Sweeper installed, and also ran scans with AVG Free and AVG Anti-spyware. I also tried to run everything in the "Read and Run Me First" post, but I cannot connect to the internet, so could not run Bitdefender or Panda Activescan (I am currently posting through my desktop). Counterspy did not find any malware. LPSfix could not delete aelupsvc32.dll. iexpl0re.exe does not show up as a file in Windows Explorer. Only Norton is detecting wsfit32.sys. What should I do next?
     

    Attached Files:

  2. Major Attitude

    Major Attitude Co-Owner MajorGeeks.Com Staff Member

    Quaick check before the guys get here, did you attempt to access the internet from safe mode with networking enabled?
     
  3. fizzix

    fizzix Private E-2

    actually...the internet works on and off. it seems to be working now, but i'm trying to reboot in safe mode with networking enabled to see if it'll work like that.

    by the way, explorer.exe won't end by itself. is that a problem as well?

    thanks for the help!
     
  4. fizzix

    fizzix Private E-2

    nope. the internet isn't working. i'm using bellsouth DSL wireless with a pc card, and the card isn't picking up a signal in safe mode.
     
  5. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Download LSP-Fix

    After download is complete, Run LSP-Fix

    Check the Box labeled "I know what I'm doing" and then click on the aelupsvc32.dll file (in the “Keep” section) to select it.

    Then, Select the >> button to move aelupsvc32.dll into the Remove section.

    Now, click the Finish Button. When the Repair Summary box appears, click OK.

    (Note: If the file aelupsvc32.dll is already in the remove section, then just click FINISH.)

    After you complete the above, reboot and attach a fresh HJT log.
     
  6. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Wireless internet won't work in Safe Mode, you will have to run the scans in normal mode once internet has been restored.
     
  7. fizzix

    fizzix Private E-2

    hmm...the internet only works when Norton is disabled, which happens automatically after ok'ing all the pop-ups that say a virus is found but access to the file is denied. should i still run the scans?

    here's the HJT log:
     

    Attached Files:

  8. fizzix

    fizzix Private E-2

    jkjk ...here's the actual log after the reboot :eek::
     

    Attached Files:

  9. fizzix

    fizzix Private E-2

    here's some more logs :)
     

    Attached Files:

  10. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Did you run post #5? What were the results?



    We must get rid of these entries below, follow the below.

    Reboot into Safe Mode, Run LSP-Fix

    Check the Box labeled "I know what I'm doing" and then click on the aelupsvc32.dll file (in the “Keep” section) to select it.

    Then, Select the >> button to move aelupsvc32.dll into the Remove section.

    Now, click the Finish Button. When the Repair Summary box appears, click OK.

    (Note: If the file aelupsvc32.dll is already in the remove section, then just click FINISH.)
     
  11. fizzix

    fizzix Private E-2

    here are the results to another LSP-fix scan:
     

    Attached Files:

  12. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Are you running LSP-Fix in Safe Mode?

    The "O10" entries in HJT are not being removed like they should be if this is ran properly.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds