Registry Fix from DOS

[Ray Lake]

I have a laptop with WinXP Pro on it that has been infected with the
SasserWorm virus which has affected the registry. Is there a way to edit
the registry from DOS so I can remove the reference to this since it will
not boot under Windows despite an attempt to load Win2K on it also?

I need to remove the reference to avserve.exe in this registry value:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Run "avserve.exe" = C:\WINDOWS\avserve.exe

 

[David Candy]

Boot into safe mode.

 

[Kelly]

In addition to David's advice:

You could opt to slave the drive then:

Editing the Registry for "other" Users
http://www.dougknox.com/xp/tips/xp_adv_reg_editing.htm

More info:

W32.Sasser Removal Tool (Line 321) Right hand side)
http://www.kellys-korner-xp.com/xp_tweaks.htm