applying personal settings error

[madmega]

Ok i have win2k pro, one 18 ghz amd computer with 256+mb memory.
2 harddrive's split into 8 drives with each 5 gb on it.

Everything was working fine this morning, i was browsing on some site
and suddenly i got all this spyware.
I pulled the network plug and deleted the spyware en ran ad-aware an
spybot to remove all traces.
Ad-aware said it couldn't remove the file msg117.dll and if i reboote
it could be removed, so i rebooted, nothing happened, the file is stil
there and cannot be removed.
I checked the registry to find out that that file is linked t
winlogon.exe.

And now everytime when i boot and i am pass the logon screen, than i
says APPLYING PERSONAL SETTINGS, it takes like 30-40 seconds, and tha
it continues.

I read about it might being a DNS problem but i do not see why.

It is a stand alone computer, hooked up to a hub and than to ADSL.

The only DNS entries that i have are of my ISP.

So can anyone help me remove this file or remove this lag problem

madmeg

 

[Tim]

hey,

funny ive just solved this problem and searched the net if anybody had
the same one

ive tried adaware and spybot with noluck, the only solution(win2k) was
to boot
via cd and use recovery->console to delete the msg117.dll, then rerun
adaware which can now delete the registry entries

this somehow messed my taskbar showing "invisible" toolbar, so i had
to delete
registry entries
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\Desktop\Taskbar
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\Desktop\Toolbars

(kill explorer.exe before deleting)

damn spyware

cheers,

 

[madmega]

i solved it by booting the machine with a w98 bootdisk and renaming the
file to *.old
It booted right away, and my taskbar was also screwed, my quickbar was
doubled...and everytime when i deleted it was there again when i
rebooted, what i did, was login at another name than log in again with
my normal name and all was normal...very strange...i still have the
file and i opened it up with notepad...it shows a url, where i believe,
data is sent too.
greetz & thanks
Mark


madmega

 

[Guest]

Im having the same problem and i too had spyware! what do i do again?