Deleted file

[David]

Our computer was diagnosed with the sasser worm. We had
to delete 108 corrupt files to remove it completely. Now
when ever I turn on the computer I get a message that
says "C:\WINDOWS\dllreg.exe" is an invalid path and it
asks me to remove it from the registry. Can I obtain this
sole file? Is this the reason my wife can not get into
her chat rooms? Help!!!

 

[Rick \Nutcase\ Rogers]

Hi,

You don't want the file back, it was part of the virus. What the error means
is that the reference in the system registry has not been removed. Start/run
regedit, look for a string that refers to it under these keys (strings are
in the right pane). Remove (delete) it when found:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Windows
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone

 

[Alex Nichol]

Our computer was diagnosed with the sasser worm. We had
to delete 108 corrupt files to remove it completely. Now
when ever I turn on the computer I get a message that
says "C:\WINDOWS\dllreg.exe" is an invalid path and it
asks me to remove it from the registry. Can I obtain this
sole file?

dllreg.exe is no part of windows. It was part of the infection, and the
clearing up has left the reference that was trying to run it. Start -
Run - MSconfig.exe and look on the Startup page for the line that has
this in the Command column. Uncheck it, Exit - do not bother to reboot,
but next time you do there will be a message about 'System
Configuration'. Check the 'Do not show again' box and exit