On Sat, 11 Mar 2000 12:32:56 -0700, you wrote:

>At 11:35 AM 03/11/2000 , chuck finnigan wrote:
>>i lost this file from \windows\system folder on windows 95 950C computer
>>after NOrton found a virus in it and couldn't clean it.  the file has
>>something to do wiht applications opening.  i can't find it on any other of
>>my workstations or on the windows cd in the cab files.  does anyone now
>>where i could find the file and version i need?  microsoft site?
>
>
>You are going about this in the wrong way.  Windows does not need
>that file.  It was created when you were infected with the WORM PRETTY
>PARK virus.   There is now a reference to it in your registry and that needs
>to be removed.  There is more about  this nasty bug that just appeared
>recently, see McAfee's web site:
>    http://vil.mcafee.com/vil/wm98500.asp
>
>You just need to complete the virus removal procedure.  I know, since
>I am removing it from a clients machine at this moment.

One small note to add to this, the entry it adds to the registry
doesn't allow the running of any .exe files unless this file is
present. This doesn't let you access the regedit to modify the key.
Your best bet would be scanreg /restore from before you were infected,
or finding a way to add or modify keys to the registry without running
any programs. I know how to create an INF file to delete keys out of
the registry, but not one to modify them, it may work on the same
principle, though. Other than either of these two, I had to deltree
and reinstall Windows on the system I was working with. Hopefully this
is not the case with you.

Ernie Goens

         The NOSPIN Group Promotions is now offering the NOSPIN
        File Download CD... All the files from our File Download
         area and much more...  over 165 files, all on one CD!!
                      http://nospin.com/promotions