Windows Vista Forums
Vista Forums Home Join Vista Forums Tech Publications Windows 7 Forum Vista Tutorials Webcasts Tags

Welcome to Vista Forums we are your forum for Windows Vista help and discussion. Whether you need help or just want to post an idea you have on Vista, this is the forum for you.
Register at Vista forums...the world biggest Windows Vista resource Join Vista Forums Now

Go Back   Vista Forums > Vista Newsgroups > Vista General

Infected and deleted .dll

Update your Vista Drivers
Reply
 
Thread Tools Display Modes
Old 06-02-2008   #1 (permalink)
Sebastian
Guest


 

Infected and deleted .dll

Hi,
I manually deleted an .dll which was infected (according to my anti virus
software), the file was somewhere in AppData/Local, and its tag was
"byXPGWpn.dll". Now every time I log on to Windows Vista a warning dialog
appears informing that the file wasn't found. I restore the system to a
previous point, but nothing happened.
What does this file do? Should I replace it? If so: Ho do I get it?
Best regards,


My System SpecsSystem Spec
Old 06-02-2008   #2 (permalink)
Rick Rogers
Guest


 

Re: Infected and deleted .dll

Hi Sebastian,

That's not a legitimate file, it was malware to begin with. Your antivirus
product did its job and deleted the file, it just didn't remove the
reference in the registry that loaded it. Run regedit from the start/search
line, and check for a string that refers to it under these keys:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

Delete the string from the right pane when found.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Windows help - www.rickrogers.org
My thoughts http://rick-mvp.blogspot.com

"Sebastian" <Sebastian@xxxxxx> wrote in message
newsA65BA9E-857F-4B5B-BB18-CEBA5DF81F4B@xxxxxx
Quote:

> Hi,
> I manually deleted an .dll which was infected (according to my anti virus
> software), the file was somewhere in AppData/Local, and its tag was
> "byXPGWpn.dll". Now every time I log on to Windows Vista a warning dialog
> appears informing that the file wasn't found. I restore the system to a
> previous point, but nothing happened.
> What does this file do? Should I replace it? If so: Ho do I get it?
> Best regards,
>
My System SpecsSystem Spec
Old 06-13-2008   #3 (permalink)
Sebastian
Guest


 

Re: Infected and deleted .dll

Hi Rick,
Thanks a lot, that solved the issue.
Best regards


"Rick Rogers" wrote:
Quote:

> Hi Sebastian,
>
> That's not a legitimate file, it was malware to begin with. Your antivirus
> product did its job and deleted the file, it just didn't remove the
> reference in the registry that loaded it. Run regedit from the start/search
> line, and check for a string that refers to it under these keys:
>
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
> HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
>
> Delete the string from the right pane when found.
>
> --
> Best of Luck,
>
> Rick Rogers, aka "Nutcase" - Microsoft MVP
> http://mvp.support.microsoft.com/
> Windows help - www.rickrogers.org
> My thoughts http://rick-mvp.blogspot.com
>
> "Sebastian" <Sebastian@xxxxxx> wrote in message
> newsA65BA9E-857F-4B5B-BB18-CEBA5DF81F4B@xxxxxx
Quote:

> > Hi,
> > I manually deleted an .dll which was infected (according to my anti virus
> > software), the file was somewhere in AppData/Local, and its tag was
> > "byXPGWpn.dll". Now every time I log on to Windows Vista a warning dialog
> > appears informing that the file wasn't found. I restore the system to a
> > previous point, but nothing happened.
> > What does this file do? Should I replace it? If so: Ho do I get it?
> > Best regards,
> >
>
>
My System SpecsSystem Spec
Old 06-13-2008   #4 (permalink)
Access Services
Guest


 

Re: Infected and deleted .dll

Why are some messages seperate from the original conversation?

Please try to stop this problem.

It saves time and confusion.

Thanks,
Access Services
San Jose Public Libraries
circ.sjpl@xxxxxx

"Sebastian" <Sebastian@xxxxxx> wrote in message
news:AC3B4D0B-FEFC-444E-82FC-364B0D140A11@xxxxxx
Quote:

> Hi Rick,
> Thanks a lot, that solved the issue.
> Best regards
>
>
> "Rick Rogers" wrote:
>
Quote:

>> Hi Sebastian,
>>
>> That's not a legitimate file, it was malware to begin with. Your
>> antivirus
>> product did its job and deleted the file, it just didn't remove the
>> reference in the registry that loaded it. Run regedit from the
>> start/search
>> line, and check for a string that refers to it under these keys:
>>
>> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
>> HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
>>
>> Delete the string from the right pane when found.
>>
>> --
>> Best of Luck,
>>
>> Rick Rogers, aka "Nutcase" - Microsoft MVP
>> http://mvp.support.microsoft.com/
>> Windows help - www.rickrogers.org
>> My thoughts http://rick-mvp.blogspot.com
>>
>> "Sebastian" <Sebastian@xxxxxx> wrote in message
>> newsA65BA9E-857F-4B5B-BB18-CEBA5DF81F4B@xxxxxx
Quote:

>> > Hi,
>> > I manually deleted an .dll which was infected (according to my anti
>> > virus
>> > software), the file was somewhere in AppData/Local, and its tag was
>> > "byXPGWpn.dll". Now every time I log on to Windows Vista a warning
>> > dialog
>> > appears informing that the file wasn't found. I restore the system to a
>> > previous point, but nothing happened.
>> > What does this file do? Should I replace it? If so: Ho do I get it?
>> > Best regards,
>> >
>>
>>

My System SpecsSystem Spec
Old 06-13-2008   #5 (permalink)
Rick Rogers
Guest


 

Re: Infected and deleted .dll

You need to download more headers and message bodies. In the case of this
thread, the response today was to messages posted 11 days ago.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Windows help - www.rickrogers.org
My thoughts http://rick-mvp.blogspot.com

"Access Services" <circ.sjpl@xxxxxx> wrote in message
news:eicJdTYzIHA.4676@xxxxxx
Quote:

> Why are some messages seperate from the original conversation?
>
> Please try to stop this problem.
>
> It saves time and confusion.
>
> Thanks,
> Access Services
> San Jose Public Libraries
> circ.sjpl@xxxxxx
>
> "Sebastian" <Sebastian@xxxxxx> wrote in message
> news:AC3B4D0B-FEFC-444E-82FC-364B0D140A11@xxxxxx
Quote:

>> Hi Rick,
>> Thanks a lot, that solved the issue.
>> Best regards
>>
>>
>> "Rick Rogers" wrote:
>>
Quote:

>>> Hi Sebastian,
>>>
>>> That's not a legitimate file, it was malware to begin with. Your
>>> antivirus
>>> product did its job and deleted the file, it just didn't remove the
>>> reference in the registry that loaded it. Run regedit from the
>>> start/search
>>> line, and check for a string that refers to it under these keys:
>>>
>>> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
>>> HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
>>>
>>> Delete the string from the right pane when found.
>>>
>>> --
>>> Best of Luck,
>>>
>>> Rick Rogers, aka "Nutcase" - Microsoft MVP
>>> http://mvp.support.microsoft.com/
>>> Windows help - www.rickrogers.org
>>> My thoughts http://rick-mvp.blogspot.com
>>>
>>> "Sebastian" <Sebastian@xxxxxx> wrote in message
>>> newsA65BA9E-857F-4B5B-BB18-CEBA5DF81F4B@xxxxxx
>>> > Hi,
>>> > I manually deleted an .dll which was infected (according to my anti
>>> > virus
>>> > software), the file was somewhere in AppData/Local, and its tag was
>>> > "byXPGWpn.dll". Now every time I log on to Windows Vista a warning
>>> > dialog
>>> > appears informing that the file wasn't found. I restore the system to
>>> > a
>>> > previous point, but nothing happened.
>>> > What does this file do? Should I replace it? If so: Ho do I get it?
>>> > Best regards,
>>> >
>>>
>>>
>
>
My System SpecsSystem Spec
Reply
Update your Vista Drivers

Thread Tools
Display Modes



Similar Threads
Thread Thread Starter Forum Replies Last Post
backed up pictures infected? newbie Vista General 6 05-27-2008 08:50 AM
"YOUR COMPUTER WAS INFECTED BY UNKNOWN TROJAN IT'S DANGE..." Tristan Vista General 6 02-03-2008 04:37 PM
infected by a trojan DM Vista General 8 12-23-2007 03:38 PM
Infected with Sohanad-O virus phani kumar Vista General 11 11-27-2007 09:24 PM
Help I may be infected! Philip Vista security 2 06-15-2007 03:05 AM


Complimentary Industry Resources

Vista Forums has joined forces with TradePub.com to offer you a new, exciting, and entirely free professional resource. Visit http://vistax64.tradepub.com today to browse our selection of complimentary Industry magazines, white papers, webinars, podcasts, and more across 34 industry sectors. No credit cards, coupons, or promo codes required. Try it today!




Vista Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media 2005-2008

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51