Registry issue after virus removal

TooTired · 02-12-2007, 01:17 PM

Hi there, I removed some viruses and spyware with the help of TSF. I know I removed a file "dtmziyyy" but now when we restart the computer, we get a warning screen that "windows cannot find C:\windows\system32\dtmziyyy\winlogon.exe" and then "windows could not load or run ........ as specified in the registry". This only happens on one profile. I just don't know enough about the registry to start "playing", can someone guide me on what to delete? Thanks so much!

tetonbob · 02-12-2007, 03:30 PM

Hi TooTired -

Windows is complaining because the file associated with the startup is missing.

In looking at your recent thread in HJT, this file or it's startup do not appear in the course of the thread.

Rather than have you trip around in the registry, why not post again in the HijackThis Log Help forum?

Be sure to post a log from the user account which has the error message.

TooTired · 02-12-2007, 03:39 PM

Thanks, I just wasn't sure as it isn't really a virus. This is the link to my original post where I deleted the file.

http://www.techsupportforum.com/secu...5656-help.html

Will this help or should I move on to HJT? Thanks so much!

tetonbob · 02-12-2007, 03:45 PM

Ahh, I somehow overlooked that.

Should be a simple fix, if that's the only issue. I think it's best if you post a new thread in the HJT forum, with a HJT log from the affected user account, so we can have a peek.

tetonbob · 02-12-2007, 03:47 PM

Post the link to your new thread here, so I can find it quickly, as I'm subscribed to this thread.

TooTired · 02-12-2007, 05:22 PM

Here is the link to the new post, I think I see what I need to delete........the two F3 entries........could I be learning?!

http://www.techsupportforum.com/secu...s-removal.html

tetonbob · 02-12-2007, 05:47 PM

Fix posted...those plus another.

02-12-2007, 01:17 PM	#1 (permalink)
TooTired Registered User Join Date: Jan 2007 Posts: 35 OS: WinXP	Registry issue after virus removal Hi there, I removed some viruses and spyware with the help of TSF. I know I removed a file "dtmziyyy" but now when we restart the computer, we get a warning screen that "windows cannot find C:\windows\system32\dtmziyyy\winlogon.exe" and then "windows could not load or run ........ as specified in the registry". This only happens on one profile. I just don't know enough about the registry to start "playing", can someone guide me on what to delete? Thanks so much!

02-12-2007, 03:30 PM	#2 (permalink)
tetonbob Manager, Security Center, TSF Academy; Analyst, Security Team Join Date: Jan 2005 Location: Transylvania County, North Carolina, USA Posts: 35,631 OS: 2000 Pro; XP Pro; XP Home	Hi TooTired - Windows is complaining because the file associated with the startup is missing. In looking at your recent thread in HJT, this file or it's startup do not appear in the course of the thread. Rather than have you trip around in the registry, why not post again in the HijackThis Log Help forum? Be sure to post a log from the user account which has the error message. __________________ Practice Safe Surfing PC Safety and Security--What Do I Need? Because what you don't know, CAN hurt you. Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Microsoft MVP - Consumer Security 2009

02-12-2007, 03:45 PM	#4 (permalink)
tetonbob Manager, Security Center, TSF Academy; Analyst, Security Team Join Date: Jan 2005 Location: Transylvania County, North Carolina, USA Posts: 35,631 OS: 2000 Pro; XP Pro; XP Home	Ahh, I somehow overlooked that. Should be a simple fix, if that's the only issue. I think it's best if you post a new thread in the HJT forum, with a HJT log from the affected user account, so we can have a peek. __________________ Practice Safe Surfing PC Safety and Security--What Do I Need? Because what you don't know, CAN hurt you. Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Microsoft MVP - Consumer Security 2009

02-12-2007, 03:47 PM	#5 (permalink)
tetonbob Manager, Security Center, TSF Academy; Analyst, Security Team Join Date: Jan 2005 Location: Transylvania County, North Carolina, USA Posts: 35,631 OS: 2000 Pro; XP Pro; XP Home	Post the link to your new thread here, so I can find it quickly, as I'm subscribed to this thread. __________________ Practice Safe Surfing PC Safety and Security--What Do I Need? Because what you don't know, CAN hurt you. Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Microsoft MVP - Consumer Security 2009

02-12-2007, 05:22 PM	#6 (permalink)
TooTired Registered User Join Date: Jan 2007 Posts: 35 OS: WinXP	Here is the link to the new post, I think I see what I need to delete........the two F3 entries........could I be learning?! http://www.techsupportforum.com/secu...s-removal.html Last edited by TooTired; 02-12-2007 at 05:30 PM.

02-12-2007, 03:39 PM	#3 (permalink)
TooTired Registered User Join Date: Jan 2007 Posts: 35 OS: WinXP	Thanks, I just wasn't sure as it isn't really a virus. This is the link to my original post where I deleted the file. http://www.techsupportforum.com/secu...5656-help.html Will this help or should I move on to HJT? Thanks so much!

02-12-2007, 05:47 PM	#7 (permalink)
tetonbob Manager, Security Center, TSF Academy; Analyst, Security Team Join Date: Jan 2005 Location: Transylvania County, North Carolina, USA Posts: 35,631 OS: 2000 Pro; XP Pro; XP Home	Fix posted...those plus another. __________________ Practice Safe Surfing PC Safety and Security--What Do I Need? Because what you don't know, CAN hurt you. Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Microsoft MVP - Consumer Security 2009