Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Need Help With Removal Of 'byvst.exe'/byvst.dll

  • Please log in to reply
2 replies to this topic

#1 phlyplaya


  • Members
  • 1 posts
  • Local time:09:42 AM

Posted 31 December 2007 - 02:07 PM

i just recently got this virus, at least that i think it is. i believe that its similar to the one that you helped lawnmowerman? with. when i restart my computer, 2 dialog boxes come up, the first one saying: Windows cannot find ‘C:\WINDOWS\system32\byvst.exe’. Make sure you typed the name correctly, and then try again. To search for a file, click the start button, and then click search.

the second one says: Could not load or run ‘C:\WINDOWS\system32\byvst.exe’ specified in the registry. Make sure the file exists on your computer or remove the reference to it in the registry.

i tried to go through the folders to find this 'byvst.exe' but could not find it. all i could find was 'byvst.dll'. i tried to delete it but it won't delete. i have a few icons on my desktop ie: aim, spy sweeper, msn messenger...and they all do not work. another dialog box comes up and says:

windows cannot open this file:
file: TMP2AC.tmp

to open this file, windows needs to know what program created it. windows can go online to look it up automatically, or you cna manually select from a list of programs on your computer.

what do you want to do?

- use the web service to find the appropriate program
- select the program from a list

ok cancel

i've tried both, but neither work.

is there anyway you can help me?

BC AdBot (Login to Remove)


#2 Tomo2


  • Members
  • 402 posts
  • Gender:Male
  • Location:Wanganui, Aotearoa NZ
  • Local time:02:42 AM

Posted 01 January 2008 - 12:16 AM

It looks like you have Virtumonde(, Adware.Vundo, Trojan.Vundo.b or various other names it comes under).
You can look Here for information on How to Remove WinFixer / Virtumonde / Msevents / Trojan.vundo.

Hope that helps!

L&P, World Famous in New Zealand since ages ago!
Posted Image
Avast! Antivirus : Spybot S&D : Trend Micro Housecall : Hosts file : HiJack This
Don't be too open minded - your brains will fall out

#3 quietman7


    Bleepin' Janitor

  • Global Moderator
  • 52,072 posts
  • Gender:Male
  • Location:Virginia, USA
  • Local time:09:42 AM

Posted 01 January 2008 - 10:09 AM

From what you describe in regards to the error message, the file is probably an orphaned entry related to a program (or malware) that was set to run at startup. Windows is trying to load this file but cannot locate it since the file may have been removed during an anti-virus or anti-malware scan, the uninstall of a program or use of a specialized fix tool. However, an associated registry entry remains and is telling Windows to load the file when you boot up.

When Windows loads, it looks for any files associated with registry entries for programs that are set to run at startup. If the file was removed but not the registry entry, Windows will display an error message indicating that the file was not found. You need to remove this registry entry so Windows stops searching for the file when it loads.

To resolve this, download Autoruns, search for the related entry and then delete it.
  • Create a new folder on your hard drive called AutoRuns (C:\AutoRuns) and extract (unzip) the file there. (click here if your not sure how to do this.)
  • Open the folder and double-click on autoruns.exe to launch it.
  • Please be patient as it scans and populates the entries.
  • When done scanning, it will say Ready at the bottom.
  • Scroll through the list and look for a startup entry related to the file in the error message.
  • Right-click on the entry and choose delete.
  • Reboot your computer and see if the startup error returns.

all i could find was 'byvst.dll'. i tried to delete it but it won't delete

What is the location (full file path) where you are finding this file?

Go to jotti's virusscan or virustotal.com. In the "File to upload & scan" box, browse to the location of byvst.dll and submit (upload) it for scanning/analysis.
Post back with the results of the file analysis.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users