What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Software

WinINet corruption

38 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
HI…

I'm hoping you can help me please. Having had my machine cleaned of malware in the forum on here, they have asked me to form a thread here to see if you are able to help some issues that still remain. The last post from the malware forum was:

Hi Mick,

Well this is interesting, corruption in the WinINet library seems to be common place and the WinINet.dll appears to be available for download,

The corruption was most likely cause by AVG ironically as it has been known to remove that file…sometimes malware writers embed atheir malicious code into it, so when it is removed it destabalizes the system as we have witnessed.

It would definitely be in your best interest to post a new topic in our WINDOWS forum and let our expert tech guru's guide you in the repair of this service…I could muddle you through it, but I'd be happier if they did it wink.gif

I don't think I can clean you up properly without the service being repaired as the tools cleaner didn't run properly.

so post the link back to this thread so the tech experts can see you are clean of Malware…once your system has been repaired - come back to this thread for the final clean up.


Call your topic "WinINet corruption" and I'll let them know to expect you.

Hopefully Catbyte has let you know and you can se the thread so far on that forum.

Regards,

Mick
Post #3
Hi mickhart, sorry it's taken so long to get to your post.

I read through your malware thread and it sounds like you are having problems with WinINET library. Please check to see if wininet.dll is present in the following locations. If yes, what are the size and date/time of the files. On my system they are:
Directory of C:\WINDOWS\system32

12/20/2008  07:15 PM		   826,368 wininet.dll
			   1 File(s)		826,368 bytes

 Directory of C:\WINDOWS\system32\dllcache

12/20/2008  07:15 PM		   826,368 wininet.dll
If the file is missing from C:\WINDOWS\system32 but is present in C:\WINDOWS\system32\dllcache then copy it from there back to system32. Then try the Avira update.
Post #4
Hi… Thanks for the reply..the wininet.dll file is present in the windows\system 32 folder as is showing as 890kb. I'm guessing the removal of the malware may of corrupted it?…. is there anyway of installing a new one maybe… I can't locate the system32/dllcache any where …not sure if that a good or a bad thing :unsure: Best Regards, Mick
Post #6 last edited
Hi mickhart

Ztruker may be stopping by later with the same or better information.

I'm replying in case you can use the information now, and quickly get back to your Malware Removal Thread to complete that work.

C:\Windows\System32 is a protected folder in which Windows keeps various registered executable files that activate or support your machines operating system and third-party applications.

As such, it is a favorite target for the bad-guys to alter the victims machine functioning.

C:\Windows\System32\dll cache is a protected and non-active "holding" folder in which original copies of executable .dll files that are either registered or have been accepted by the owner/user, can be stored.

Whenever an executable file in System32 becomes corrupted, either by ordinary foul-ups during use, or intentionally change via malware infection, Windows attempts to replace an original of the .dll from the dll cache.

Each time Windows boots up, it reads the dll cache file to compare the contents to registered dll files in System32\
Windows File Protection will automatically attempt to correct any corrupted or missing dll files by copying form dll cache.

It is "unusual" to say the least, that you are unable to find your C:\Windows\System32\dll cache\ folder.
It should be listed "alphabetically" under C:\Windows\System32\ in the list of Folders contained in that parent Folder.

I suppose it could have been damaged/removed by the malware infection, though I am unable to confirm or deny if that is the case in your situation.

Ztruker has reported that the wininet.dll file reported from his machine is 894KB
Yours is reported as 890KB

I looked wininet.dll up on a Desktop XP pro Dell machine and found it to be 807kb (created 12/20/2008)
I looked wininet.dll up on a Desktop XP home Compaq machine and found it to be 807kb (created 12/20/2008)
I looked wininet.dll up on a Desktop XP pro Dell Laptop machine and found it to be 894kb (created 03/08/2009)

Yours, listed as 890KB, is not necessarily corrupted, and may be that size due to your own machine brand/type and the date on which it was created….
But I wouldn't rely on it, simply because you have had associated problems reported via your work in Malware Removal.
___________________

So what to do?

As you previously stated, you can safely download wininet.dll from internet sources.
I'd suggest this free source (and I urge you to ignore all the handy for-fee utilities that they offer)
http://www.dll-files.com/dllindex/dll-files.shtml?wininet

wininet.dll is also available on your Windows XP Installation CD (and a couple of other places hidden on your machine that we can look for if necessary)
Do you have a legitimate Windows XP Installation CD?
____________________-

How-To:

If you download wininet.dll….
Save it to it's own temporary folder.
Double-click on the zipped file to allow Windows to expand it.
Select for it to expand and save it into the same temporary folder.

Next:
Rename the current wininet.dll (the one in your System32 folder) –> to wininet.old

Next:
Copy/paste the fresh wininet.dll into C:\Windows\System32\

For now:
Leave the "renamed" wininet.old where it is. It will cause no problem, and Windows will simply ignore it.

Next:
Reboot your machine and carry on with your previous intended activities.
_____________________

Additional work to be done….

If you really do not find a dll cache Folder listed in your C:\Windows\System32\ folder…
It should be replaced.

Windows File Protection system has a feature known as SFC (System File Checker) which is a built in utility to check all of the Windows operating system files and folders. If a file or folder is missing or corrupted, Windows will search for a Windows XP Installation CD source from which to copy and replace the missing or corrupted file or folder.

SFC is performed as follows:

System File Checker - sfc /scannow can only be run in Normal mode.

Boot Normally
GoTo:
Start - Run - (type)sfc /scannow - Enter <— Notice the space between "c" and "/"

Have your XP installation CD handy since SFC will call for it to copy and replace missing or corrupt files.

SFC typically takes more than 2 minutes and less than 10 minutes.
If SFC opens and closes in less than 1 minute, then it did not perform.
Let us know.
_________________

There is a "work-around" in case you do not have a Windows XP installation CD
Let us know.

Best Regards,
Doug
Post #7
Hi.. Wow that's a reply!!..lol. The machine was a company one, which when I left the company, a University, they gave me as part of the severance package, so it has a fully legitimate MS OS on (XP Pro), but I have no disc for (it's on their licenses), but if you update under MS genuine advantage system its fine each time. Is there any 'easy' tool to download to check this file and rectify it if there is a problem, or is it up to me (and my limited computer competency :pullhair: :/ to repair it?… If you I need to do anything please post instruction that are step by step ..otherwise I will foull up :unsure: Best Regards…… Mick
Post #8
Just rename the old one and replace with new downloaded file.

As to scanning with SFC…
Bummer that you have no XP Pro CD, but good that it is legit as long as they continue their multi-user license.

For SFC you are in luck. "Any" XP Pro CD of the same service pack will work for replacement of missing or corrupt files.
So you can use any XP Pro CD from another machine you might own, or a borrowed one from a friend.

Now for the bad news… With service packs, your machine's SFC may tell you, you have inserted the wrong disk, if it is not precisely the same service pack SP2, SP3.

There is a work-around.
Read here: http://www.updatexp.com/scannow-sfc.html


Here's my version of the same instructions:

First, a brief description of why this happens.
By default, SFC looks for the Original files on the Installation CD.
Since XP gets updated via MS Updates, there are a lot of "newer" files that didn't get put on the Installation CD when you purchased it.
However, (and wonderfully) those "newer files" are "saved" on your C:\ drive in various places.
But…. SFC doesn't know to look for them on C:\, because it has been instructed to look on the Installation CD.

So we have to change that instruction.

Please carefully follow these entire instructions. Print them out before you begin so that you'll have a paper copy to reference while you are completing the procedures.
________________________________________
Open your Windows Explorer or My Computer - Tools - Folder Options - View(tab)
Put a Mark in "Show hidden files & Folders"
Remove the Mark from "Hide Protected operating system files"
Answer "Yes" to the Warning
Click on Apply
Click on OK or Close (to close the Tools Menu) But leave Windows Explorer or My Computer open

Next
Create a New Folder on C:\ drive (C:\New Folder), and Rename it C:\i386
Next
Insert your XP Installation CD (if it automatically starts its own Menu, close the Menu by clicking on the X in the upper right hand corner.
Next
Using your already open Windows Explorer or My Computer Click on the D:\ Drive where you've inserted the XP Installation CD, such that Windows Explorer displays the Contents of that CD.
Look for the Folder D:\i386 (where (D) is the drive letter for your CD ROM where you've inserted the XP CD)
Double-Click on D:\i386 to open the Folder.
It is a relatively large folder (has alot of files in it)
These are actually the resource files from which XP was originally installed, and which are the "replacement" files that SFC uses to repair any missing or corrupt Operating System files.
Next
Click on the Edit button and Press - Select All (this will highlight all of the files in (x):\i386
Next
In the Edit drop down menu, Click Copy
Next
Navigate to your newly created C:\i386 folder and open it. (it will still be empty)
Next
In the Edit drop down menu, Click - Paste

So now you've Copied and Pasted the entire XP backup resource to your C:\i386 (it will be about 475mb total)

Next
We need to tell SFC where to find the resources of C:\i386
To do this, we will use Regedit.exe
(To Learn More about Using the Registry Editor, you can go here:
http://support.microsoft.com/kb/322756
(Or simply folow my instructions below)

Next
GoTo - Start - Run - (type)Regedit.exe
This opens your Registry Editor

Next
Navigate to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup

Next
You will see various entries on the right-hand side. The one we want is called: SourcePath
SourcePath probably has an entry pointing to your CD-ROM drive. (We will be changing this entry)

Next we will "backup" this Registry Item prior to making any changes
Single-Click on SourcePath (from the list in the right-hand display) (This Highlights SourcePath)
Next
Click on the File menu - click Export
A "Save-in" box will appear.
- Select a location where you want to save the Registration Entries (.reg) file, (I suggest "DeskTop")
- Type a file name in the File name box (I suggest "SetupSourcePath.reg)
- then click Save
(You now have a backup of this item in case you want to return to the prior setting for some reason in the future)

Next
In Registry Editor, "Double-Click" on "SourcePath"
(doing so opens a "Edit String" box)
(The Value Name will show: SourcePath)
(The Value Data will already be Highlighted and will probably refer to your CD-ROM)
(Even though we have already "backed-up" this Value Data, please write down the Value Data information on a piece of paper so you can include the information in your next Reply in this Forum Thread)

Next
(type) C:\ then Press OK (in the Value Data line) (This will cause the previous Value Data information to disappear and leave only your new Value Data - C:\)

Next
Reboot your computer

Next
When your Computer is booted into Windows try your sfc /scannow again
Start - Run - (type)sfc /scannow - Enter

The SFC should take about 20 minutes.
If you sit in front of your Monitor watching the WFP ProgressBar, you will probably notice that SFC stops periodically to correctly access your new C:\i386 to replace missing or corrupt files.


Best Regards
Post #9
Hi… I've downloaded the wininet.dll file, renamed the previous one wininet.old and pasted the new one in. After rebooting the AV still won't update, but the log file doesn't now indicate that wininet is at fault, please see below Avira AntiVir Personal - Free Antivirus Updater Creation time: Sat Apr 04 08:26:50 2009 Operating system: Windows XP (Service Pack 3) [5.1.2600] Product information: Product version: 9.0.0.386 Updater: C:\Program Files\Avira\AntiVir Desktop\update.exe 09.00.00.42 Plugin: C:\Program Files\Avira\AntiVir Desktop\updext.dll 09.00.00.06 Temp Directory: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\ Backup folder: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\BACKUP\ Installation Directory: C:\Program Files\Avira\AntiVir Desktop\ Updater folder: C:\Program Files\Avira\AntiVir Desktop\ AppData folder: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\ [UPD] [INFO] Checking whether newer files are available. [UPD] [INFO] Select update server 'http://62.146.66.183/update'. [UPD] [INFO] Downloading of 'http://62.146.66.183/update/idx/master.idx' to 'C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. [UPDLIB] [ERROR] IDX- integrity check failed. [UPD] [INFO] Select update server 'http://62.146.66.183/update'. [UPD] [INFO] Downloading of 'http://62.146.66.183/update/idx/master.idx' to 'C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. [UPDLIB] [ERROR] IDX- integrity check failed. [UPD] [ERROR] Generation of update structure failed. UpdateLib delivers error 19. Summary: ******** 0 Files downloaded 0 Files installed Seems the fault is now IDX integrity ..whatever that maybe!!!. I'm hoping the wininet file is ok now its been replaced? Best Regards, Mick
Post #11
Hi… Thanks for that ..I tried the update, and the download ended up with about 15 files, none of which the AV programme wanted to open!!. I have uninstalled it, as you suggested, and tried loading back on from scratch AVG, which is all fine but …still refuses to connect and update..just like the AV I uninstalled. Another thing, that may help pin down what is wrong, is if I click on the windows update it goes to MS site, scans and says its unable to update! Not being very computer 'literate' like you guys I am getting a little scared with the process above in the thread to reinstall files from another XP disc I must admit :wacko: : One again thanks for you continued help. Regards, Mick
Post #12 last edited
Let's have a look at the services and how they are currently set.
Download and run the following:

CodeStuff-Starters
http://www.snapfiles.com/get/Starter.html

Download and install, agreeing to the licensing terms and allow to install with all of the default settings as preselected in the installation wizard.

When you finally allow CodeStuff-Starters to run
It will preselect StartUps Tab - – (Change the tab selection to Services)
  • Click on File
  • Select - save as html (name the report file - Services April04.html)

In your next reply, post the file as an attached file (use browse and upload buttons – at the bottom-right corner of your topic posting window where you are typing your next reply)

Please do not make any changes with Code-Stuff Starters, until after you post the requested information above and receive recommendations from a helper here.

Best Regards
Post #13
Hi… Its running now, but its a little difficult to tell if its running as it should. Looking at the small progress bars on the left bottom corner I'm guessing it may take 5-6hrs to complete…is that the sort of time it would normally take, or am I doing something wrong? Regards, Mick
Post #15
Hi mickhart. CodeStuff Starters is a small utility that yields results "almost instantaneously". In my own experience, I've never seen a progress bar, just the results. here's a screenshot of CodeStuff Starters with the Services(tab) selected. 📎CodeStuff_Starters_Services.jpg When you see this on your screen, go to File - Save as HTML. Then name and upload the file as I have previously described. Doug

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI