CDROM-Guide forums  

PDA

View Full Version : Is windows registry important? [soltek amd athlon/xp; ; win98]


   
freakshow
May 08, 2002, 11:46 PM
My antivirus did an auto update today and after i restarted my computer it said it found a virus and quarantined it.And also an error box came up.The infected files were SP.REG and SP.DLL in the c/windows directory,The error is there everythime now i start my computer and it says it cant import sp.reg into windows registry?How can I fix this?The antivirus proggy says it cant clean them.

MasterMind
May 08, 2002, 11:51 PM
No need to FIX something. It's a virus code which is trying to enter itself into your registry so that it can execute everytime you boot Windows.

Since you AV has detected it as a infection, I don't think it's a regular .REG which helps us to simplify many tasks. Secondly .REG never gets infected by virus. It contains virus growth techniques.

Can you post the name of Virus in your system. So that ppl over here will look for more details on it's spreading techniques. Then you will get some more accurate info whether you can safely delete those files or not.

BTW, To get rid of the error on your machine, use the registry editor (regedit.exe) and goto

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run. There you will find a entry labeled "regedit -s sp.dll" delete that key. Also search your hard drive for a file named sp.dll and delete that just to be sure.

A virus scan may help and I would also try adaware or similar tool for spyware removal.

HTH !!

freakshow
May 09, 2002, 12:02 AM
Thanks bro...I am on my laptop at work right now but when i get home ill check the name of the virus and post it cuz its on my home system.

MasterMind
May 09, 2002, 02:33 PM
np... I will wait for your call ;) ;)

freakshow
May 09, 2002, 02:50 PM
Hi,

My antivirus didnt actually name a virus.It just had sp.reg and sp.dll quarantined.I looked around on the internet and from what i could tell it is some sort of webpage trojan or something.I read it can change your homepage to whatever it wants.
BTW your advice worked...i dont have that error anymore.But the actual file in the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Run folder was named sp.reg instead of dll, but there was a sp.dll quarantined too...im not sure of what folder that was in.I just delted it from the antivirus quarantine folder.In case anyone else has this problem.

Thanks again master

freak

MasterMind
May 09, 2002, 02:56 PM
no problem again. Thanks for posting back mate. :)

You can search for those files on your disk by clicking on Find files and folders. Then simply delete them from whatever location they are placed to. And yes... it's a spyware and not Virus.