Posted 28 February 2010 - 04:24 PM
I was recently hit by a variant of Trojan.FakeAlert. It did a whole lot of things: it disabled the Security Center, it installed a proxy that limited access to the web, it kept generating annoying popups. However, the most annoying thing it did was associate all .exe files with itself. This meant that I could not run the task manager to stop the process, nor could I run regedit to restore the correct associations. I also could not get to this site, or to any anti-virus web site. I could not even find a copy of rkill.com that I could download from the Internet. I got it fixed by renaming system files and restarting my computer several times, but it was a huge, time-consuming hassle.
What would be wonderful is if there were a way to create a bootable CD that had just the necessary files to run MalwareBytes and to edit the registry. I started to fool around with this, but MalwareBytes needs to be installed (it won't run standalone), and although I could get regedit to open, it was looking at the copy of the registry from the boot CD and not the registry that was actually on the hard drive. Is there a CD that will boot up (to either XP or Linux), allow me to scan a Windows partition for malware (with MalwareBytes or a program that is as useful as MalwareBytes), and edit the infected Windows registry? If not, would anyone be interested in working with me to create such a CD? I think it would save a lot of people a lot of time to have a clean boot option with useful tools pre-installed.