Infected and deleted .dll

Hi,
I manually deleted an .dll which was infected (according to my anti virus
software), the file was somewhere in AppData/Local, and its tag was
"byXPGWpn.dll". Now every time I log on to Windows Vista a warning dialog
appears informing that the file wasn't found. I restore the system to a
previous point, but nothing happened.
What does this file do? Should I replace it? If so: Ho do I get it?
Best regards,

Hi Sebastian,

That's not a legitimate file, it was malware to begin with. Your antivirus
product did its job and deleted the file, it just didn't remove the
reference in the registry that loaded it. Run regedit from the start/search
line, and check for a string that refers to it under these keys:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run

Delete the string from the right pane when found.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Windows help - www.rickrogers.org
My thoughts http://rick-mvp.blogspot.com

"Sebastian" <> wrote in message
newsA65BA9E-857F-4B5B-BB18-...
> Hi,
> I manually deleted an .dll which was infected (according to my anti virus
> software), the file was somewhere in AppData/Local, and its tag was
> "byXPGWpn.dll". Now every time I log on to Windows Vista a warning dialog
> appears informing that the file wasn't found. I restore the system to a
> previous point, but nothing happened.
> What does this file do? Should I replace it? If so: Ho do I get it?
> Best regards,
>

Hi Rick,
Thanks a lot, that solved the issue.
Best regards


"Rick Rogers" wrote:

> Hi Sebastian,
>
> That's not a legitimate file, it was malware to begin with. Your antivirus
> product did its job and deleted the file, it just didn't remove the
> reference in the registry that loaded it. Run regedit from the start/search
> line, and check for a string that refers to it under these keys:
>
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run
> HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run
>
> Delete the string from the right pane when found.
>
> --
> Best of Luck,
>
> Rick Rogers, aka "Nutcase" - Microsoft MVP
> http://mvp.support.microsoft.com/
> Windows help - www.rickrogers.org
> My thoughts http://rick-mvp.blogspot.com
>
> "Sebastian" <> wrote in message
> newsA65BA9E-857F-4B5B-BB18-...
> > Hi,
> > I manually deleted an .dll which was infected (according to my anti virus
> > software), the file was somewhere in AppData/Local, and its tag was
> > "byXPGWpn.dll". Now every time I log on to Windows Vista a warning dialog
> > appears informing that the file wasn't found. I restore the system to a
> > previous point, but nothing happened.
> > What does this file do? Should I replace it? If so: Ho do I get it?
> > Best regards,
> >
>
>

Why are some messages seperate from the original conversation?

Please try to stop this problem.

It saves time and confusion.

Thanks,
Access Services
San Jose Public Libraries


"Sebastian" <> wrote in message
news:AC3B4D0B-FEFC-444E-82FC-...
> Hi Rick,
> Thanks a lot, that solved the issue.
> Best regards
>
>
> "Rick Rogers" wrote:
>
>> Hi Sebastian,
>>
>> That's not a legitimate file, it was malware to begin with. Your
>> antivirus
>> product did its job and deleted the file, it just didn't remove the
>> reference in the registry that loaded it. Run regedit from the
>> start/search
>> line, and check for a string that refers to it under these keys:
>>
>> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run
>> HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run
>>
>> Delete the string from the right pane when found.
>>
>> --
>> Best of Luck,
>>
>> Rick Rogers, aka "Nutcase" - Microsoft MVP
>> http://mvp.support.microsoft.com/
>> Windows help - www.rickrogers.org
>> My thoughts http://rick-mvp.blogspot.com
>>
>> "Sebastian" <> wrote in message
>> newsA65BA9E-857F-4B5B-BB18-...
>> > Hi,
>> > I manually deleted an .dll which was infected (according to my anti
>> > virus
>> > software), the file was somewhere in AppData/Local, and its tag was
>> > "byXPGWpn.dll". Now every time I log on to Windows Vista a warning
>> > dialog
>> > appears informing that the file wasn't found. I restore the system to a
>> > previous point, but nothing happened.
>> > What does this file do? Should I replace it? If so: Ho do I get it?
>> > Best regards,
>> >
>>
>>

You need to download more headers and message bodies. In the case of this
thread, the response today was to messages posted 11 days ago.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Windows help - www.rickrogers.org
My thoughts http://rick-mvp.blogspot.com

"Access Services" <> wrote in message
news:...
> Why are some messages seperate from the original conversation?
>
> Please try to stop this problem.
>
> It saves time and confusion.
>
> Thanks,
> Access Services
> San Jose Public Libraries
>
>
> "Sebastian" <> wrote in message
> news:AC3B4D0B-FEFC-444E-82FC-...
>> Hi Rick,
>> Thanks a lot, that solved the issue.
>> Best regards
>>
>>
>> "Rick Rogers" wrote:
>>
>>> Hi Sebastian,
>>>
>>> That's not a legitimate file, it was malware to begin with. Your
>>> antivirus
>>> product did its job and deleted the file, it just didn't remove the
>>> reference in the registry that loaded it. Run regedit from the
>>> start/search
>>> line, and check for a string that refers to it under these keys:
>>>
>>> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run
>>> HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run
>>>
>>> Delete the string from the right pane when found.
>>>
>>> --
>>> Best of Luck,
>>>
>>> Rick Rogers, aka "Nutcase" - Microsoft MVP
>>> http://mvp.support.microsoft.com/
>>> Windows help - www.rickrogers.org
>>> My thoughts http://rick-mvp.blogspot.com
>>>
>>> "Sebastian" <> wrote in message
>>> newsA65BA9E-857F-4B5B-BB18-...
>>> > Hi,
>>> > I manually deleted an .dll which was infected (according to my anti
>>> > virus
>>> > software), the file was somewhere in AppData/Local, and its tag was
>>> > "byXPGWpn.dll". Now every time I log on to Windows Vista a warning
>>> > dialog
>>> > appears informing that the file wasn't found. I restore the system to
>>> > a
>>> > previous point, but nothing happened.
>>> > What does this file do? Should I replace it? If so: Ho do I get it?
>>> > Best regards,
>>> >
>>>
>>>
>
>