I have the TIBS41 dialer, and can no longer access the internet (error connecting to TIBS41 message is all I can get). I have no idea how to proceed, and would appreciate any help.

I have McAfee Internet Security Site installed (after the fact) and have run CWShredder several times; no success with either of them.

Using another computer to access this site...

Thanks for any help!

To show hidden files do the following:
Click Start > My Computer
On the Tools menu, click Folder Options.
Click the View tab.
Uncheck Hide file extensions for known file types.
Uncheck Hide protected operating system files.
Under the Hidden files folder, locate and check Show hidden files and folders.
If you see a warning message, click Yes.
Click Apply > OK.

navigate to and delete this file if found:

C:\Windows\System32\msvcrta.dll

Then do a search and delete all other files with msvcrta in the name. Be sure to check the boxes in "more advanced options" when doing the search.

Restart the computer.

Thank you for your help. I tried the above, and found no files (msvcrta.dll) on my system.

Download the Registry Search Tool from the following link to a cd or floppy and run it on the infected machine:

http://www.billsway.com/vbspage/vbsfiles/RegSrch.zip

Unzip to your Desktop and double click on regsrch.vbs
(if you have script protection, please allow this to run)

In the dialog that opens enter the following:
msvcrta

Press 'OK'

The search will run for a while then alert you when it is finished.

Press 'OK' and copy the contents of the WordPad window and post in this thread.

Please post the results of this scan .

Here's the result of the scan:

REGEDIT4
; RegSrch.vbs © Bill James

; Registry search results for string "msvcrta" 1/2/2008 10:00:05 PM

; NOTE: This file will be deleted when you close WordPad.
; You must manually save this file to a new location if you want to refer to it again later.
; (If you save the file with a .reg extension, you can use it to restore any Registry changes you make to these values.)

[HKEY_USERS\S-1-5-21-1215723707-2008082714-514286106-1003\Software\Microsoft\Search Assistant\ACMru\5603]
"000"="msvcrta.dll"

[HKEY_USERS\S-1-5-21-1215723707-2008082714-514286106-1003\Software\Microsoft\Search Assistant\ACMru\5604]
"000"="msvcrta.dll"

Only thing I see is a MRU (most recently used) file which is your search.

I would reset the winsocks and tcp/ip settings and see if that will get you back on the internet.

These instructions come from Microsoft at this link:
http://support.microsoft.com/kb/811259

Note: Most likely you will not need to proceed past step 6. If you do not need to go beyond step 6. restart the computer at that point then try to access the internet.

1. Click Start, and then click Run.
2. In the Open box, type regedit, and then click OK.
3. In Registry Editor, locate the following keys, right-click each key, and then click Delete:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Winsock
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Winsock2
4. When you are prompted to confirm the deletion, click Yes.
Note Restart the computer after you delete the Winsock keys. Doing so causes the Windows XP operating system to create new shell entries for those two keys. If you do not restart the computer after you delete the Winsock keys, the next step does not work correctly.
Step 2: Install TCP/IP
1. Right-click the network connection, and then click Properties.
2. Click Install.
3. Click Protocol, and then click Add.
4. Click Have Disk.
5. Type C:\Windows\inf, and then click OK.
6. On the list of available protocols, click Internet Protocol (TCP/IP), and then click OK.

If Internet Protocol (TCP/IP) does not appear, follow these steps:a. Click Start, and then click Search.
b. In the Search Companion pane, click More advanced options.
c. Click to select the following three check boxes:• Search system folders
• Search hidden files and folders
• Search subfolders

d. In the All or part of the file name box, type nettcpip.inf, and then click Search.
e. In the results pane, right-click Nettcpip.inf, and then click Install.

7. Restart the computer.

Let us know if you we able to get onto the internet.

Sorry for the delay; I was away for a few days.

That seems to have done the trick, though. Thanks very much for your kindness with your time and expertise!

Joe

Glad we could help.