General discussion

Locked

Location of Registry

By kirkthompson ·
I have the PrettyPark worm on my computer. I have found the information on how ot remove it manually by editing the registry.

However, I am unable to use Regedit to do this. Can anyone tell me where the registry is stored?

Thanks in advance!

This conversation is currently closed to new comments.

15 total posts (Page 1 of 2)   01 | 02   Next
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Location of Registry

by fox In reply to Location of Registry

It's stored in %WindowsRoot% Directory, Ussualy it's c:\windows, in two files system.dat and user.dat and also it's backups with another expetions, such as .da1, .nu3

Collapse -

Location of Registry

by kirkthompson In reply to Location of Registry

The question was auto-closed by TechRepublic

Collapse -

Location of Registry

by wired_777 In reply to Location of Registry

A good way to get access to the registry in DOS is to extract it to a txt file.
from the c:\windows directory type "regedit /e reg.txt" which extracts it to the txt file reg.txt. Open the text file make whatever changes you need.
Then from the c:\windows directory type "regedit /c reg.txt" which will insert the information back into the registry.
Easier than most binary file editors!

Good Luck

Collapse -

Location of Registry

by kirkthompson In reply to Location of Registry

The question was auto-closed by TechRepublic

Collapse -

Location of Registry

by bdivine In reply to Location of Registry

Since you can't run regedit here is the command you need to build a reg hack to modify your registry. It is case sensitive.

start notepad
type in:

REGEDIT4

[HKEY_LOCAL_MACHINE\Software\CLASSES\exefile\shell\open\command]
@="\"%1\" %*"
Make sure and hit enter after the last line of the file.

Save the file as fix.reg

Close notepad. using windows explorer go to where you saved the file and double click on it it should say entry has been entered into the registry. click OK. The registry should have been modified with the corrected information.

Best of Luck.

Collapse -

Location of Registry

by kirkthompson In reply to Location of Registry

The question was auto-closed by TechRepublic

Collapse -

Location of Registry

by pkoenigsberg In reply to Location of Registry

Hi the best thing although is to get The Ckeaner, its an anti Trojan softwear and it eliminates your Trojan, the only thing that it dose is mail itself directly upon clicking it to all of the people that you have in your browser address book, so it might be that you will soon get it back.
But The Cleaner eliminates it, and you can download the Trial Version From www.thecleaner.com

bye and good luck paul

Collapse -

Location of Registry

by kirkthompson In reply to Location of Registry

The question was auto-closed by TechRepublic

Collapse -

Location of Registry

by Benny Angelo In reply to Location of Registry

Kirk, the answer from Fox@kaf-i.kg is correct. However, since they're system files they are hidden. In Windows Explorer click 'view' 'option' and select 'show all files' & deselect 'hide MS-DOS extentions' and you will be able to see them. However to edit them I think you'll have to run the attrib command: attrib -r -h -s user.* then press enter and then run it again but for system.* Once you have edited them run the attrib command again only replace the minus sign (-) with a plus sign each time.
I hope this helps.
BV
From: fox@kaf-i.kg Date: Mar 1 2000 12:56PM
It's stored in %WindowsRoot% Directory, Ussualy it's c:\windows, in two files system.dat and user.dat and also it's backups with another expetions, such as .da1, .nu3

Collapse -

Location of Registry

by kirkthompson In reply to Location of Registry

The question was auto-closed by TechRepublic

Back to Windows Forum
15 total posts (Page 1 of 2)   01 | 02   Next

Operating Systems Forums