Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

hijack this startup list shows registry check failed


  • This topic is locked This topic is locked
2 replies to this topic

#1 the other one

the other one

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:07:27 PM

Posted 27 March 2015 - 05:53 PM

Hijack this startup list shows:

Detected Windows 7 SP1 (WinNT  6. 00. 3505)

Detected Internet Explorer  v11.0 (11.00.9600.17689)

 

 

 

 

Verifying REGEDIT.EXE integrity:

-Regedit.exe found in C:\windows

-.reg open command is normal  (regedit.exe %1)

-Company name OK: 'Microsoft Corporation'

-original filename NOT OK : 'REGEDIT.EXE.MUI'

-File description : 'Registry Editor'

 

Registry check failed!

 

I could not download the frst as Norton would delete it saying it was unsafe. (I have been able to download other programs from bleeping computer site such as Auto runs today so I am unsure what the problem is)

 

I have just had my hard drive reformatted as I was having problems and I know that this registry check failed before as well.

 

I am new to these types of postings so hopefully I have done it correctly.

Thank you

the other one



BC AdBot (Login to Remove)

 


m

#2 nasdaq

nasdaq

  • Malware Response Team
  • 38,238 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:09:27 PM

Posted 28 March 2015 - 09:36 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

I could not download the frst as Norton would delete it saying it was unsafe


If you have downloaded the tool from one of these sites it's safe.
Farbar Recovery Scan Tool (64 bit)
Farbar Recovery Scan Tool (32 bit)

Norton will block the download but you can recover the file that is placed in the quarantine folder.

Instructions will be found here.
http://its.yale.edu/how-to/computer-and-device-support/virus-and-anti-malware-protection/article-restore-or-delete-files-quarantine-symantec-endpoint-protection-windows

Run the tool and post the logs for my review.

#3 nasdaq

nasdaq

  • Malware Response Team
  • 38,238 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:09:27 PM

Posted 03 April 2015 - 07:36 AM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.

Please include a link to your topic in the Private Message. Thank you.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users