hi,one of my computers (not this one that I am using for the post) has a virus Trojan.Ascesso as detected by Norton but it could not delete the the file rcsmtnmp.dll which I was later able to delete. The computer is still extremely slow, can not connect to internet, can not get email.


I then installed jv16 Power Tools 2008 and ran the Registry Cleaner. It found 941 errors so I clicked Fix. Now the PC Health is 99 and Registry Health is 94 but I am still having the same problems.


So I searched and found the following site http://www.precisesecurity.com/computer-virus/tascesso-aug0732.htm which has a fix. A portion is shown below


" Navigate to and delete the following entry:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\"PendingFileRenameOperations" = "%SystemRoot%smsys.dat %SystemRoot%System32\drivers\asc3550.sys"


Delete the following registry subkeys:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\asc3550

HKEY_LOCAL_MACHINE\Microsoft\Windows\CurrentVersion\WinSetup

HKEY_LOCAL_MACHINE\Microsoft\Windows\CurrentVersion\WinOpts "


Question: How can I delete these with jv16 Power Tools 2008 ?

thanks for all replies - Dave

It is likely that the permissions of these keys are set to prevent deletion. Find each key in Regedit, right-click the key, select Permissions, then click the Full Control Allow box. You should then be able to manually delete the key in Regedit (right-click the key and select Delete). Careful, though...you could easily disable your machine if you delete something you shouldn't.