booting system after shut down

[Jimmie Seelbinder]

I recently have been experiencing something in the
registry that I do not understand. Every morning now
when I bring system up I receive two messages "Could not
run c:\Windows\dllreg.exe specified in registry. and the
other is vxdmgr32.exe. I found the files on the system
but there are numbers to the right with a .pf What can I
do? I looked on my backup and found the samething. My
back up has been compromised. I do know how to access
the registry? can you give me some direction?

 

[purplehaz]

Looks like you may the W32/Dumaru.a@MM virus/worm:
http://vil.nai.com/vil/content/Print100560.htm

 

[Jimmie]

Any ideas how I can repair the problem?

-----Original Message-----
Looks like you may the W32/Dumaru.a@MM virus/worm:
http://vil.nai.com/vil/content/Print100560.htm




.

 

[purplehaz]

There are removal instructions on the website I posted.

 

[jimme]

Thank you Purple Haz.

-----Original Message-----
There are removal instructions on the website I posted.




.

 

[purplehaz]

You're welcome.

Thank you Purple Haz.

 

[Alex Nichol]

I recently have been experiencing something in the
registry that I do not understand. Every morning now
when I bring system up I receive two messages "Could not
run c:\Windows\dllreg.exe specified in registry. and the
other is vxdmgr32.exe. I found the files on the system
but there are numbers to the right with a .pf What can I
do? I looked on my backup and found the samething.

Those are two files from Win98 (or thereabouts). That system used a
compacted library of VXD drivers (which XP does not) and IIRC vxdmgr
was a program available for network administrators to carry out updates
of this at boot of machines on their net. DLLreg may have been a
component of it, for doing what in XP is done by regsvr32. (XP does
have a dxdllreg, to do with registering DirectX). So I think the
entries got on your XP machine by mistake, Clearly the programs got run
on one occasion, to put a record about their load patterns as .pf files
in windows\prefetch.

Start - Run - MSconfig.exe, look in the Startup page for any lines with
these in the Command column, and uncheck. After OK, don't bother to
restart, but next time you do there will be a message about
'troubleshooting' - check the 'don't show again, and OK.