regedit

May 20, 2008

mpwxpg readers,

I greatly appreciate any help with the following problem. I have

checked the ms knowlege base and followed the directions given but

have not been able to resolve the problem.

The Problem:

My computer was infected by spyware trojans that disabled the Taskmgr

and Regedit utilities on the "computer administrator" desktop

(start>run>regedit or taskmgr). In both instances, when trying to run

the utilities I got the "regedit/taskmgr disabled by your

administrator" error message. Both utilities were still visible on

the guest desktop and in safe mode "administrator" but not in

"computer administrator". The trojans were contained in the antispy

spider and Wild Tangent links. I was able to remove all the malware

by using legitimate programs like McAfee and SuperAntiSpyware and a

lot of searching for unusual files and registry keys in safe mode. I

then went to the knowledge base and followed the directions for

removing the "register editing and TaskMgr disabled by your

administrator" error message. It worked ok for the task manager but

regedit is still disabled. I am able to modify the registry in safe

mode using the "administrator" desktop (start>run>regedit) but cannot

use it from the "computer administrator" desktop (start>run>regedit)

I have checked the permissions and they all seem to be consistant with

my other computer that was not infected. I also tried to install

service pack 3 that stalled on a "access denied" error during the

install process. I think this may be somehow related to the regedit

problem. I would greatly appreciate any help someone can give me to

resolve this problem.

May 20, 2008

Re: regedit

infections usually corrupt

system files or replace

the genuine system files

with modified ones.

so even though the

antivirals may have

zapped the infected

files, the genuine

system files were not

replaced, thus you

are finding irregularities

with your system.

further, what you may

have discovered to be

dysfunctional in windows

may not be all and only

time will tell what else

you will be discovering.

therefore, i suggest to

simply do a "repair

installation" with your

windows setup cd.

the process is automated,

validating thousands of

systems files and replacing

the missing or corrupted ones

with the genuine ones from

the cd.

further, the "repair installation"

will delete all the old system

restore points and create a

brand new one.

this is beneficial because your

system may have long been

infected and old system restore

points will likely contain

the infection.

here is a link with more

info:

http://www.microsoft.com/windowsxp/using/helpandsupport/learnmore/tips/doug92.mspx

--

db·´¯`·...¸><)))º>

"elmarsa dice" <thewalrussaid@lycos.com> wrote in message

news:3ke6341nget68dqqsfljtkppelvccg242q@4ax.com...

> mpwxpg readers,

>

> I greatly appreciate any help with the following problem. I have

> checked the ms knowlege base and followed the directions given but

> have not been able to resolve the problem.

> The Problem:

> My computer was infected by spyware trojans that disabled the Taskmgr

> and Regedit utilities on the "computer administrator" desktop

> (start>run>regedit or taskmgr). In both instances, when trying to run

> the utilities I got the "regedit/taskmgr disabled by your

> administrator" error message. Both utilities were still visible on

> the guest desktop and in safe mode "administrator" but not in

> "computer administrator". The trojans were contained in the antispy

> spider and Wild Tangent links. I was able to remove all the malware

> by using legitimate programs like McAfee and SuperAntiSpyware and a

> lot of searching for unusual files and registry keys in safe mode. I

> then went to the knowledge base and followed the directions for

> removing the "register editing and TaskMgr disabled by your

> administrator" error message. It worked ok for the task manager but

> regedit is still disabled. I am able to modify the registry in safe

> mode using the "administrator" desktop (start>run>regedit) but cannot

> use it from the "computer administrator" desktop (start>run>regedit)

> I have checked the permissions and they all seem to be consistant with

> my other computer that was not infected. I also tried to install

> service pack 3 that stalled on a "access denied" error during the

> install process. I think this may be somehow related to the regedit

> problem. I would greatly appreciate any help someone can give me to

> resolve this problem.

May 21, 2008

Re: regedit

elmarsa dice wrote: