registry question ?

[Robin]

Can anyone tell me what this actually means and is it
important ?... Robin
Verifying REGEDIT.EXE integrity:

- Regedit.exe found in C:\WINDOWS
- .reg open command is NOT normal! (Regedit %1 %*)
- Company name OK: 'Microsoft Corporation'
- Original filename OK: 'REGEDIT.EXE'
- File description: 'Registry Editor'

Registry check failed!

---------------

 

[David Candy]

It's normally just %1, %1 %* is normal for exe programs.

 

[Robin]

Is it a bad thing ? and is it something I should be
worried about ?..Robin

 

[David Candy]

Is there any history to this. It doesn't matter that the command line has
changed. It resolves to the same thing. Have you repaired anything.

 

[Robin]

Been looking for changes becusae of a virus ( one of
those that came in by way of " Microsft" ) ,scans say I'm
clean , but I was still revieving bounce back email, as
well as continouse virus attempts , changed email address
to see if it would stop , but same things is still
happening !although not as bad ,( suggestions about
someone else using the address or an affected person!but
within 24 hrs it started in the new one !)at one point my
sytem came up and asked me to restore to last known good
start-up,( not really sure how that happened at all )but
microsft outlookexpress still say's I'm sending email
that is not in my outbox or sent folder ! the started
scan that I ran and copy /past in here said a lot , I
just dont understand any of it !...Robin

 

[David Candy]

It seems you have been infected, but this is only a guess. The evidence is
the tail of the regedit command you cite. This is not conclusive.

The bounced email is probably not you. If you were sending it, as I suspect,
someone else would be coping the blame. The messages you see is of people
who are infected pretending to be you.

Howerer there is questions regarding exactly what has haoppened. Exactness
in symptoms leads to exactness in diagnosis. Your previous symptoms may not
be able to be described exactly.

 

[Robin]

Would it help to see the rest of the startup list that I
ran ? it gives paths I guess ,and stubpaths ( I dont even
know what those are !!! ) says things can not be found
ect... But I dont understand it because I dont know what
to look for !

 

[David Candy]

Start at the beginning. You're asking us about things that occured after
whatever happened, happened.

Your regedit.exe seems ok. Something seems to have affected it, but was then
99% repaired (and 100% .repaired from nasties).

So what is wrong NOW? Have you run a virus check (sometimes virus checkers
cause problems when they attemp to solve)..

 

[Robin]

I'm just trying to make sure my sytem is o.k. , (I dont
want to pass a virus on to others) ,It seemed that if the
bounce backs were not me it would have stopped as soon as
I changed my email address,my concerns came back up that
it was still in my system when the same thing happened
after changing the email!I know there would be changes in
my registry if the virus was still here,but I dont know
enough to know what is normal /what should or shouldnt be
there! ! ...Robin

 

[David Candy]

Go to www.grisoft.com and download the free Version 6 Virus checker. Run
this and see.

I suspect you have been infected but something repaired it.

If your AV and this AV both show you are clean you probably are.