cannot open regedit

[kyle]

i type regedit in the run command but it says "cannot find
the file 'regedit'." i've heard you can change regedit.exe
to regedit.com, but when i double click on regedit.com i
get another error saying "cannot find the
file 'ynyh.exe'." i am trying to access my registry to
possible remove a virus that is affecting all of my
executable files (.exe). every time i try to run a
program, it gives me an error saying it cannot find
the .exe file to run it. any help would be appreciated.
thanks.

 

[Mark V]

i type regedit in the run command but it says "cannot find
the file 'regedit'." i've heard you can change regedit.exe
to regedit.com, but when i double click on regedit.com i
get another error saying "cannot find the
file 'ynyh.exe'." i am trying to access my registry to
possible remove a virus that is affecting all of my
executable files (.exe). every time i try to run a
program, it gives me an error saying it cannot find
the .exe file to run it. any help would be appreciated.
thanks.

Remove the (un-named) virus first.
However you may need to wipe and re-install the OS if "all of my
executable files" are infected.

Another group may be of more help with identifying and removing the
virus.

 

[Mark V]

i type regedit in the run command but it says "cannot find
the file 'regedit'." i've heard you can change regedit.exe
to regedit.com, but when i double click on regedit.com i
get another error saying "cannot find the
file 'ynyh.exe'." i am trying to access my registry to
possible remove a virus that is affecting all of my
executable files (.exe). every time i try to run a
program, it gives me an error saying it cannot find
the .exe file to run it. any help would be appreciated.
thanks.

Remove the (un-named) virus first.
However you may need to wipe and re-install the OS if "all of my
executable files" are infected.

Another group may be of more help with identifying and removing the
virus.

 

[Gino]

After you copy Regedit.exe to Regedit.com don't double click on it. Instead
Click start, and in the run box type COMMAND , which opens command.com. At
the prompt type the full path to the renamed regedit REGEDIT.COM
Expand HKEY_CLASSES_ROOTS to .exe the default value should be exefile. Then
goto exefile, shell, open, command. The value should be
"%1"%*
Some viruses change this value and you will not be able to open any programs
that end in exe including cmd.exe, thats why when you double clicked on
Regedit.com it would not open.

 

[Gino]

After you copy Regedit.exe to Regedit.com don't double click on it. Instead
Click start, and in the run box type COMMAND , which opens command.com. At
the prompt type the full path to the renamed regedit REGEDIT.COM
Expand HKEY_CLASSES_ROOTS to .exe the default value should be exefile. Then
goto exefile, shell, open, command. The value should be
"%1"%*
Some viruses change this value and you will not be able to open any programs
that end in exe including cmd.exe, thats why when you double clicked on
Regedit.com it would not open.

 

[Dan]

I've seen this recently. The virus disables all tools such as regedit in
which you can remove the references to the virus. Then it executes the
virus by running the ynyh.exe (your virus) in the background everytime
something like Explorer or Word is opened. For example... every program
that you start to open which now gives you that error message. So it's
running in the background unknowingly then one day you discover you have a
virus so you clean it off but the damage doesn't get cleaned... only the
virus. So now, everytime you try to execute those programs... it errors out
and you can't continue.

Basically, you try to run regedit from safemode or dos or a bootdisk but the
virus probably won't allow you to do this.
Next, you can try removing the file from quarantine temporarily but it still
won't allow you to run regedit.
Then you can try copying a file to the same path and filename that the
original ynyh.exe was such as notepad.exe so that's useless if you can't run
regedit to strip the registry of this damage.
If it hasn't worked by now, you back your data up and run fdisk then
reinstall Windows and your software which is your best bet. You're probably
looking at 2-4hrs to do so and it would take you at least this long to find
out that you missed something along the way and have to format anyways.

Most importantly... when you get it back up, purchase a copy of Norton
Antivirus 2004 and set it up to update virus definitions daily and scan at
least weekly.

Dan

 

[Dan]

I've seen this recently. The virus disables all tools such as regedit in
which you can remove the references to the virus. Then it executes the
virus by running the ynyh.exe (your virus) in the background everytime
something like Explorer or Word is opened. For example... every program
that you start to open which now gives you that error message. So it's
running in the background unknowingly then one day you discover you have a
virus so you clean it off but the damage doesn't get cleaned... only the
virus. So now, everytime you try to execute those programs... it errors out
and you can't continue.

Basically, you try to run regedit from safemode or dos or a bootdisk but the
virus probably won't allow you to do this.
Next, you can try removing the file from quarantine temporarily but it still
won't allow you to run regedit.
Then you can try copying a file to the same path and filename that the
original ynyh.exe was such as notepad.exe so that's useless if you can't run
regedit to strip the registry of this damage.
If it hasn't worked by now, you back your data up and run fdisk then
reinstall Windows and your software which is your best bet. You're probably
looking at 2-4hrs to do so and it would take you at least this long to find
out that you missed something along the way and have to format anyways.

Most importantly... when you get it back up, purchase a copy of Norton
Antivirus 2004 and set it up to update virus definitions daily and scan at
least weekly.

Dan