Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

I Need Help With Spy Falcon Tools Of This Forum


  • Please log in to reply
12 replies to this topic

#1 saunga2nd

saunga2nd

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:12:18 AM

Posted 18 February 2006 - 09:38 PM

I have trouble adding FixSF to the registry. I double click on the file and it asks me "Are you sure you want to add the information in C:\docume~ ..... blah, blah, blah.... Click yes but then it tells me "Cannot import C:\doume~ ... The specified file is not a registry script. You can only import bynary registry files from within the registry editor"

Could somebody tell me how to do this?

I'd appreciate any help!

BC AdBot (Login to Remove)

 


#2 -David-

-David-

  • Members
  • 10,603 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London
  • Local time:06:18 AM

Posted 19 February 2006 - 05:45 AM

When you save the FixSF.reg file to your computer does it look like this:

Posted Image

Let me know.....
David

#3 saunga2nd

saunga2nd
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:12:18 AM

Posted 19 February 2006 - 10:41 AM

When you save the FixSF.reg file to your computer does it look like this:

Posted Image

Let me know.....
David



David,

Yep, it does.

Actually I tried going to Reg editor and try to import it like that. I go under file and then import. Try to open the file. Then it tells me "The key will be restored on top of key: HKEy_Current_User. All values entries and subkeys of this key will be deleted. Do you want to continue the operation?"

I'm not sure if I should've proceeded but I did as I have a backup of my system. Also I'm not sure about which hkey this file should go under.

Moving forward, I click on yes in the message. I get "Cannot import c:\domuments and settings\me\desktop\FixSF.reg: The specified file is not a registry file. You can import only registry files."

Thanks for the help.

#4 saunga2nd

saunga2nd
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:12:18 AM

Posted 20 February 2006 - 10:31 AM

David,

I tried the file on a different computer not infected and it does work. Most likely the infection has nothing to do with it. What could be causing this though?

Any ideas?

Greatly appreciated.

#5 -David-

-David-

  • Members
  • 10,603 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London
  • Local time:06:18 AM

Posted 20 February 2006 - 12:44 PM

Hmmm....I've been thinking long and hard over this and found a regedit that restores certain functions with the registry, but i think i will ask the creator of the tutorial and the fixsf.reg to come and take a look. Before doing that i would like you to try and install the reg file again - make sure that you are merging the file and not importing the file. If you import it won't work. Just double click on the file and click yes. Let me just clarify that importing will not work. Let me know how it goes and we can move on from there. Good luck.

David

#6 saunga2nd

saunga2nd
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:12:18 AM

Posted 21 February 2006 - 10:32 AM

Hmmm....I've been thinking long and hard over this and found a regedit that restores certain functions with the registry, but i think i will ask the creator of the tutorial and the fixsf.reg to come and take a look. Before doing that i would like you to try and install the reg file again - make sure that you are merging the file and not importing the file. If you import it won't work. Just double click on the file and click yes. Let me just clarify that importing will not work. Let me know how it goes and we can move on from there. Good luck.

David



David,

Right, I double clicked (and triple clicked :thumbsup: ) the file but it wont be added to the registry. Same messages.

#7 -David-

-David-

  • Members
  • 10,603 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London
  • Local time:06:18 AM

Posted 21 February 2006 - 01:01 PM

Hey saunga2nd

I've PM'd the creator and he should reply in a day or so.

David

#8 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,504 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:01:18 AM

Posted 21 February 2006 - 01:10 PM

Can you post the contents of your downloaded reg file?

You can open it with notepad.

#9 saunga2nd

saunga2nd
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:12:18 AM

Posted 22 February 2006 - 10:35 AM

Hey saunga2nd

I've PM'd the creator and he should reply in a day or so.

David


Thanks

#10 saunga2nd

saunga2nd
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:12:18 AM

Posted 22 February 2006 - 10:39 AM

Can you post the contents of your downloaded reg file?

You can open it with notepad.



Yep, this is it, if you open it with notepad. If you double click though it will try to add it to the registry.



ndows\CurrentVersion\Explorer\SharedTaskScheduler]
"{D1A2E7CD-F5C1-21A8-CA2C-13D0AC72D19D}"=-

[-HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{D1A2E7CD-F5C1-21A8-CA2C-13D0AC72D19D}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpyFalcon"=-

#11 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,504 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:01:18 AM

Posted 22 February 2006 - 10:44 AM

Is that exactly as you see it? As there is definitely portions missing.


It should look like this:

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{D1A2E7CD-F5C1-21A8-CA2C-13D0AC72D19D}"=-

[-HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{D1A2E7CD-F5C1-21A8-CA2C-13D0AC72D19D}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpyFalcon"=-


#12 saunga2nd

saunga2nd
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:12:18 AM

Posted 22 February 2006 - 11:22 AM

Is that exactly as you see it? As there is definitely portions missing.


It should look like this:

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{D1A2E7CD-F5C1-21A8-CA2C-13D0AC72D19D}"=-

[-HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{D1A2E7CD-F5C1-21A8-CA2C-13D0AC72D19D}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpyFalcon"=-





Excellent! Now it works! I should've known better. That code did look kinda weird. I haven't done anything to the file though.

Thank you Grinler! And thank you David. I will post again if I need more help.

#13 -David-

-David-

  • Members
  • 10,603 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London
  • Local time:06:18 AM

Posted 22 February 2006 - 02:41 PM

Whew, the G-man came to the rescue! :thumbsup:
Glad you got it sorted out saunga.
David




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users