Guest Ekka Posted July 20, 2007 Posted July 20, 2007 If I wanted to use a registry script to delete the following files, How would I go about it? C:\WINDOWS\SYSTEM32\mswinf32.dll C:\WINDOWS\SYSTEM32\mswinf32.exe -- Ekka@DeeWhy
Guest Detlev Dreyer Posted July 20, 2007 Posted July 20, 2007 Re: How to make a registry script? "Ekka" <Ekka@discussions.microsoft.com> wrote: > If I wanted to use a registry script to delete the following files, How > would I go about it? First, you can't delete any files physically (hard disk) via the registry and second, removing some virulent files (trojans) from the disk or from the registry (entries) does not clean your system! > C:\WINDOWS\SYSTEM32\mswinf32.dll > C:\WINDOWS\SYSTEM32\mswinf32.exe "Trojan.RealSearch" http://www.symantec.com/security_response/writeup.jsp?docid=2006-050815-5558-99&tabid=2 -- d-d
Guest John John Posted July 20, 2007 Posted July 20, 2007 Re: How to make a registry script? Ekka wrote: > If I wanted to use a registry script to delete the following files, How > would I go about it? > > C:\WINDOWS\SYSTEM32\mswinf32.dll > C:\WINDOWS\SYSTEM32\mswinf32.exe What do you mean "a registry script"? You don't delete files in the registry, you delete them on the hard drive. Do you mean that you want to delete references to those files in the registry? The files in question seem to be installed with a trojan. Use your AV software to remove it: http://www.symantec.com/security_response/writeup.jsp?docid=2006-050815-5558-99&tabid=2 John
Guest nass Posted July 20, 2007 Posted July 20, 2007 RE: How to make a registry script? "Ekka" wrote: > > If I wanted to use a registry script to delete the following files, How > would I go about it? > > C:\WINDOWS\SYSTEM32\mswinf32.dll > C:\WINDOWS\SYSTEM32\mswinf32.exe > -- > Ekka@DeeWhy You could do, but it is best if you clear all not just only these entries. Download these tools, handy in deleting on reboot: "AutoRuns for Windows v8.61 By Mark Russinovich and Bryce Cogswell" http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/Autoruns.mspx http://www.ccleaner.com
Guest Ekka Posted July 20, 2007 Posted July 20, 2007 RE: How to make a registry script? -- Ekka@DeeWhy "nass" wrote: > > > "Ekka" wrote: > > > > > If I wanted to use a registry script to delete the following files, How > > would I go about it? > > > > C:\WINDOWS\SYSTEM32\mswinf32.dll > > C:\WINDOWS\SYSTEM32\mswinf32.exe > > -- > > Ekka@DeeWhy > > You could do, but it is best if you clear all not just only these entries. > Download these tools, handy in deleting on reboot: > "AutoRuns for Windows v8.61 By Mark Russinovich and Bryce Cogswell" > http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/Autoruns.mspx > > http://www.ccleaner.com > Hi, I should have made myself a bit clearer. I know what the files are, they were on a computer I helped fix. I am just trying to understand scripts and the registry a bit better.
Guest Gary S. Terhune Posted July 20, 2007 Posted July 20, 2007 Re: How to make a registry script? You can edit the Registry using VBScript, if that's what you're asking. You can manipulate files and folders using VBScript. But your initial question makes no sense. There is no such thing as a "Registry script". -- Gary S. Terhune MS-MVP Shell/User http://www.grystmill.com "Ekka" <Ekka@discussions.microsoft.com> wrote in message news:D61CE7A4-6F13-4302-8440-4AD778ED5E3A@microsoft.com... > > -- > Ekka@DeeWhy > > > "nass" wrote: > >> >> >> "Ekka" wrote: >> >> > >> > If I wanted to use a registry script to delete the following files, How >> > would I go about it? >> > >> > C:\WINDOWS\SYSTEM32\mswinf32.dll >> > C:\WINDOWS\SYSTEM32\mswinf32.exe >> > -- >> > Ekka@DeeWhy >> >> You could do, but it is best if you clear all not just only these >> entries. >> Download these tools, handy in deleting on reboot: >> "AutoRuns for Windows v8.61 By Mark Russinovich and Bryce Cogswell" >> http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/Autoruns.mspx >> >> http://www.ccleaner.com >> > Hi, > I should have made myself a bit clearer. I know what the files are, they > were on a computer I helped fix. I am just trying to understand scripts > and > the registry a bit better.
Guest +Bob+ Posted July 20, 2007 Posted July 20, 2007 Re: How to make a registry script? On Fri, 20 Jul 2007 11:10:03 -0700, Ekka <Ekka@discussions.microsoft.com> wrote: >Hi, >I should have made myself a bit clearer. I know what the files are, they >were on a computer I helped fix. I am just trying to understand scripts and >the registry a bit better. Ekka: Are you trying to get a script to run at startup time that automatically deletes some files or does similar work ? There are some registry keys that hold the names of programs that get loaded at various points... is that what you are looking for?
Guest Ekka Posted July 21, 2007 Posted July 21, 2007 Re: How to make a registry script? I guess I need to make a batch file to delete the files and then use regedit to delete the run entries. I am doing an exercise where I have been asked to fix certain findings. some are files and some are registry entries but I can't use normal delete methods ar manually go into the registry -- Ekka@DeeWhy "+Bob+" wrote: > On Fri, 20 Jul 2007 11:10:03 -0700, Ekka > <Ekka@discussions.microsoft.com> wrote: > > >Hi, > >I should have made myself a bit clearer. I know what the files are, they > >were on a computer I helped fix. I am just trying to understand scripts and > >the registry a bit better. > > Ekka: > > Are you trying to get a script to run at startup time that > automatically deletes some files or does similar work ? > > There are some registry keys that hold the names of programs that get > loaded at various points... is that what you are looking for? > > >
Guest Gary S. Terhune Posted July 21, 2007 Posted July 21, 2007 Re: How to make a registry script? Yeah, use a batch file. For REGEDIT command line procedures, see: http://support.microsoft.com/kb/82821 For info on how to write the REG file to delete Keys or Values, see: http://support.microsoft.com/kb/310516/en-us I assume you already know how to delete files using a batch file. -- Gary S. Terhune MS-MVP Shell/User http://www.grystmill.com "Ekka" <Ekka@discussions.microsoft.com> wrote in message news:ADB2C107-D0E3-44E9-89A6-58D5138AB118@microsoft.com... >I guess I need to make a batch file to delete the files and then use >regedit > to delete the run entries. > I am doing an exercise where I have been asked to fix certain findings. > some > are files and some are registry entries but I can't use normal delete > methods > ar manually go into the registry > -- > Ekka@DeeWhy > > > "+Bob+" wrote: > >> On Fri, 20 Jul 2007 11:10:03 -0700, Ekka >> <Ekka@discussions.microsoft.com> wrote: >> >> >Hi, >> >I should have made myself a bit clearer. I know what the files are, they >> >were on a computer I helped fix. I am just trying to understand scripts >> >and >> >the registry a bit better. >> >> Ekka: >> >> Are you trying to get a script to run at startup time that >> automatically deletes some files or does similar work ? >> >> There are some registry keys that hold the names of programs that get >> loaded at various points... is that what you are looking for? >> >> >>
Guest Curt Christianson Posted July 22, 2007 Posted July 22, 2007 Re: How to make a registry script? Thanks Gary, Two good articles for me too. -- HTH, Curt Windows Support Center http://www.aumha.org Practically Nerded,... http://dundats.mvps.org/Index.htm "Gary S. Terhune" <none> wrote in message news:%23T9Ktt8yHHA.1776@TK2MSFTNGP03.phx.gbl... | Yeah, use a batch file. For REGEDIT command line procedures, see: | http://support.microsoft.com/kb/82821 | For info on how to write the REG file to delete Keys or Values, see: | http://support.microsoft.com/kb/310516/en-us | | I assume you already know how to delete files using a batch file. | | -- | Gary S. Terhune | MS-MVP Shell/User | http://www.grystmill.com | | "Ekka" <Ekka@discussions.microsoft.com> wrote in message | news:ADB2C107-D0E3-44E9-89A6-58D5138AB118@microsoft.com... | >I guess I need to make a batch file to delete the files and then use | >regedit | > to delete the run entries. | > I am doing an exercise where I have been asked to fix certain findings. | > some | > are files and some are registry entries but I can't use normal delete | > methods | > ar manually go into the registry | > -- | > Ekka@DeeWhy | > | > | > "+Bob+" wrote: | > | >> On Fri, 20 Jul 2007 11:10:03 -0700, Ekka | >> <Ekka@discussions.microsoft.com> wrote: | >> | >> >Hi, | >> >I should have made myself a bit clearer. I know what the files are, they | >> >were on a computer I helped fix. I am just trying to understand scripts | >> >and | >> >the registry a bit better. | >> | >> Ekka: | >> | >> Are you trying to get a script to run at startup time that | >> automatically deletes some files or does similar work ? | >> | >> There are some registry keys that hold the names of programs that get | >> loaded at various points... is that what you are looking for? | >> | >> | >> | |
Recommended Posts