Regedit

[Guest]

Here's one for you. I'm trying to do a regedit so I can fix some things in the registry that the blaser worm damaged. However whenever I go into te regedit it closes before I get very far. I've tried to boot in the safe mode, but I can't even get into the safe mode

 

[Steven L Umbach]

That is evidence that your operating system has been severley compromised.
If it was my computer, I would back up any important data files on the
partition where the operating system resides including my user profile under
documents and settings [delete temporary internet files/cookies first], then
record any important configuration such as tcp/ip configuration and that for
my mail and news accounts, export my address book and favorites, decrypt any
files if using EFS, and then reformat and reinstall the operating system.
You could try an upgrade install, but if you do and it works be sure to
reinstall service pack first and then other critical updates after you
enable your built in firewall before connecting to the internet. Be sure to
scan all your backed up data for infection before copying back onto your new
install if you go that route.--- Steve

http://www.microsoft.com/security/protect/
http://freepctech.com/pc/002/WindowsXP_upgradeinstalation.shtml

Here's one for you. I'm trying to do a regedit so I can fix some things in

the registry that the blaser worm damaged. However whenever I go into te
regedit it closes before I get very far. I've tried to boot in the safe
mode, but I can't even get into the safe mode.

 

[Guest]

Thanks for the advice, that's pretty much what I thought I was going to have to do, so I already started the process.

 

[Doug Knox MS-MVP]

There is usually no reason for a reinstallation of the OS in these cases. You have a virus. Likely one of the following:

W32.Klez
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Yaha
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Spybot.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html

For additional help see www.dougknox.com, Win XP Utilities, Create Emergency Copies of Critical XP System Utilities. This small VB Program will create backup, usable copies of Task Manger, Regedit and MSConfig (named Taskmgr1.exe, Regedit.com and MSConfig1.exe) in a new folder C:\EmergencyUtil. Many virus programs will intercept these programs, based on their original file name. The modified file names, allow them to be run. Open Windows Explorer to C:\EmergencyUtil and double click the application you need. The next revision will allow you to browse for the folder you want to place the backups in.

Additionally, see the Win XP Utilities section for Startup Programs Tracker. This small utility scans your system for startup programs and running processes. It also allows you to create a log file that can be copied and pasted into a newsgroup post. The contents of the program window are also copied to the Windows Clipboard, automatically. For replies to newsgroup posts, do NOT include the Running Services, unless its absolutely necessary.

Additionally, ensure that your antivirus software is updated and rescan your system in Safe Mode.