Please help/Invalid registry entry

[kk]

My start up shows the follwing entry Msexp32.exe.It is listed in the
registry under the label
Hkeylocal machine/software/microsoft/windows/current version./run/
Hkey current user/softwware/micirosoft/windows/current/version/run
I am not able to use the ctrl,alt,del and also when I type msconfig in RUN
it does not appear.
I have downloaded the doug knox emergency utils and accessed the regedit and
startup from there.It shows the msexp32.exe in the c:/windows/system32
folder.I deleted it from the folder disabled the startup entries and removed
the keys from the registry.After restarting the system by turning the system
restore off I was shocked to see all the entries have come back
agaain.Please help.

 

[Rick \Nutcase\ Rogers]

Hi,

Try restarting in Safe mode, then remove the registry entries and the
infecting file (Msexp32.exe) from there. Then restart normally. The problem
you are having is that the virus is still active while you are trying to
clean it out. You need to do this while it is deactivated (killing it with
taks manager in normal mode is often insufficient).

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone