Offline Registry Editor

[Frank Church]

I got infected with the Brontok virus, and having been able to run an
antivirus program to clear the main files, there are some changes to the
registry preventing me from changing the window explorer settings by
blocking registry editing.

I installed a smaller version of Windows to clear the infect disk, but
it looks like it couldn't make the necessary changes to the offline
registry.

Is there a registry editing utility that can edit a registry file on a
separate disk or folder?

Regedit doesn't look like it can load and edit a registry file besides
those in use.

Frank Church

 

[Malke]

I got infected with the Brontok virus, and having been able to run an
antivirus program to clear the main files, there are some changes to the
registry preventing me from changing the window explorer settings by
blocking registry editing.

I installed a smaller version of Windows to clear the infect disk, but
it looks like it couldn't make the necessary changes to the offline
registry.

Is there a registry editing utility that can edit a registry file on a
separate disk or folder?

Regedit doesn't look like it can load and edit a registry file besides
those in use.

From MVP Doug Knox - Registry - edit for other users (can do this from a
Bart's PE)

From an account with Administrator level access

1) Click Start, Run and enter REGEDIT
2) In Regedit, highlight the HKEY_USERS key and go to File, Load Hive.
3) Use the File Open dialog to go to the Documents and Settings\<username>
folder, where <username> is the account you wish to modify.
4) Highlight the NTUSER.DAT file in this folder (usually a hidden file) and
select Open.
5) You'll be prompted to enter a "Key name". You can use whatever you wish,
but I use the User's logon name.
6) You can now expand the Hive you just loaded and make any needed changes.
7) When finished, highlight this Hive again and go to File, Unload Hive.

NOTE: You MUST unload the Hive prior to logging on to the users account.
Otherwise XP may have trouble loading the user's profile.

There may be more information on Bart's PE user forums.

Malke

 

[Phillip]

Can you run regedit OR do you have administrative permittions to do
that ? If you are all set then you can edit registry settings .