Registry Edit

[Guest]

I'm trying to delete the unchecked entries from my startup and when I go to
run - regedit, I get an error messege that says:

16 bit MS-DOS Subsystem
c:\WINDOWS\system32\regedit.com.
The NTVDM CPU has encountered an illegal instruction.
CS:0572 IP: **** OP:** ** ** ** ** Choose Close to terminate.

Any clues? How do I get to my registry?

Thank You

 

[Frank Saunders, MS-MVP OE]

I'm trying to delete the unchecked entries from my startup and when I go
to
run - regedit, I get an error messege that says:

16 bit MS-DOS Subsystem
c:\WINDOWS\system32\regedit.com.
The NTVDM CPU has encountered an illegal instruction.
CS:0572 IP: **** OP:** ** ** ** ** Choose Close to terminate.

Any clues? How do I get to my registry?

Thank You

Regedit.com was installed by some malware to keep you from opening
regedit.exe. Delete it.

So How Did I Get Infected Anyway?
http://www.wilderssecurity.com/showthread.php?t=27971

Help with Hijackware
All MS - MVP Sites.
http://aumha.org/a/parasite.htm
(http://aumha.org/a/quickfix.htm)
http://www.elephantboycomputers.com/page2.html#Removing_Malware
(http://mvps.org/winhelp2002/unwanted.htm)
(http://inetexplorer.mvps.org/darnit.html)
(http://www.mvps.org/sramesh2k/Malware_Defence.htm)

Unexplained computer behavior may be caused by deceptive software.
http://support.microsoft.com/kb/827315

--
Frank Saunders, MS-MVP OE/WM
Reply in newsgroup
http://www.fjsmjs.com
"They who would give up an essential liberty for temporary security, deserve
neither liberty or security"

 

[Pop`]

Regedit.com was installed by some malware to keep you from opening
regedit.exe. Delete it.

....

Please correct me if I'm wrong:

Your advice works because:
-- A .com program is run before an .exe program in the reading heriarchy.
-- Thus, regedit.exe probably still exists and
-- regedit will then run fine since it won't find the .com version.
-- But if regedit now gets a file not found error, it has to be replaced.
How would I resurrect the correct regedit.exe? I don't see it in the i386
folder, so I assume it must have to come from CD? Or is there a better way?

Yes, I have my nephew's machine and when I deleted regedit.com yesterday,
regedit just stopped being available. I was sorely tempted to replace it
with the deleted .com version, but could find no web reference to a .com
other than as malware, so assumed the original .exe was deleted.
Unable to find any malware on his machine, but still running various
scans looking for some.

Now I'd like to get regedit back and working?

TIA
Pop`

 

[Bob I]

You try regedit.exe yet?

...

Please correct me if I'm wrong:

Your advice works because:
-- A .com program is run before an .exe program in the reading heriarchy.
-- Thus, regedit.exe probably still exists and
-- regedit will then run fine since it won't find the .com version.
-- But if regedit now gets a file not found error, it has to be replaced.
How would I resurrect the correct regedit.exe? I don't see it in the i386
folder, so I assume it must have to come from CD? Or is there a better way?

Yes, I have my nephew's machine and when I deleted regedit.com yesterday,
regedit just stopped being available. I was sorely tempted to replace it
with the deleted .com version, but could find no web reference to a .com
other than as malware, so assumed the original .exe was deleted.
Unable to find any malware on his machine, but still running various
scans looking for some.

Now I'd like to get regedit back and working?

TIA
Pop`

 

[Frank Saunders, MS-MVP OE]

...

Please correct me if I'm wrong:

Your advice works because:
-- A .com program is run before an .exe program in the reading heriarchy.
-- Thus, regedit.exe probably still exists and
-- regedit will then run fine since it won't find the .com version.
-- But if regedit now gets a file not found error, it has to be replaced.
How would I resurrect the correct regedit.exe? I don't see it in the i386
folder, so I assume it must have to come from CD? Or is there a better
way?

Yes, I have my nephew's machine and when I deleted regedit.com yesterday,
regedit just stopped being available. I was sorely tempted to replace it
with the deleted .com version, but could find no web reference to a .com
other than as malware, so assumed the original .exe was deleted.
Unable to find any malware on his machine, but still running various
scans looking for some.

Now I'd like to get regedit back and working?

TIA
Pop`

Yes, you have the precedence order of commands correct.

I find regedit.exe in the I386 directory. If you have a real WinXP (rather
than a recovery CD) you should be able to find it in the I386 folder on the
CD. Otherwise you'll have to get it from another WinXP machine.

--
Frank Saunders, MS-MVP OE/WM
Reply in newsgroup
http://www.fjsmjs.com
"They who would give up an essential liberty for temporary security, deserve
neither liberty or security"