Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Regedit


  • Please log in to reply
5 replies to this topic

#1 saruro

saruro

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:10:07 PM

Posted 29 September 2008 - 06:46 AM

Hi,
Last night, i used Dr.WebCureit and got rid of all the baddies my pc had. But, i wanted to see the registry and couldn´t execute this application.I ran a highjackthis and found this:

O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1

How can i enable regedit again?.

Thanks,

Saruro. :thumbsup:

BC AdBot (Login to Remove)

 


#2 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:04:07 PM

Posted 29 September 2008 - 07:07 AM

http://www.bleepingcomputer.com/forums/ind...mp;#entry944365

Before changing anything with HJT would you run MBAM, cureit may have missed a few more
Chewy

No. Try not. Do... or do not. There is no try.

#3 saruro

saruro
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:10:07 PM

Posted 03 October 2008 - 12:19 PM

:trumpet: Sorry for the delay but you were right. MBAM got rid of other baddies Dr.Web did not and here is my report:

Malwarebytes' Anti-Malware 1.28
Versión de la Base de Datos: 1225
Windows 5.1.2600 Service Pack 2

03/10/2008 11:00:14
mbam-log-2008-10-03 (11-00-14).txt

Tipo de examen : Examen Rápido
Objetos examinados: 41242
Tiempo transcurrido: 3 minute(s), 24 second(s)

Procesos en Memoria Infectados: 0
Módulos en Memoria Infectados: 0
Claves del Registro Infectadas: 1
Valores del Registro Infectados: 0
Elementos de Datos del Registro Infectados: 2
Carpetas Infectadas: 0
Ficheros Infectados: 0

Procesos en Memoria Infectados:
(No se han detectado elementos maliciosos)

Módulos en Memoria Infectados:
(No se han detectado elementos maliciosos)

Claves del Registro Infectadas:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} (Adware.Agent) -> Quarantined and deleted successfully.

Valores del Registro Infectados:
(No se han detectado elementos maliciosos)

Elementos de Datos del Registro Infectados:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowHelp (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions (Hijack.FolderOptions) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Carpetas Infectadas:
(No se han detectado elementos maliciosos)

Ficheros Infectados:
(No se han detectado elementos maliciosos)

I scanned it again and no malware found. This report is in spanish which i apologize for it. It turns out that i live in Spain and should have selected english during setup. Finally, i executed regedit ok. Thank you for the good tips :thumbsup:

After MBAM, i scanned S&D and found "statcounter" and killed it. But then, i S&D again and it was there. Is there something else i can use to kill it?.

Thanks a lot.

Saruro. :flowers:

#4 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:04:07 PM

Posted 03 October 2008 - 12:27 PM

cookies like statcounter are used by many harmless web pages

You learn to ignore them with time, I clean all my cookies from time to time, but then fuss when I have to reenter my logins at forums

If there are no more problems or signs of infection

http://www.bleepingcomputer.com/forums/ind...mp;#entry943994
Chewy

No. Try not. Do... or do not. There is no try.

#5 saruro

saruro
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:10:07 PM

Posted 04 October 2008 - 09:00 AM

Good thing you remind me about restoring the system from a safe point. That link is a very good guide to keep your system clean. Thanks a lot for your guidance, Chewy and i´ll come back to help or be helped.

Hasta la vista amigos,

Saruro. :thumbsup:

#6 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:04:07 PM

Posted 04 October 2008 - 09:32 AM

de nada amigo

de parte de Bleepin comunidad
Chewy

No. Try not. Do... or do not. There is no try.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users