Re: Registry Editor

From: G. Samuel Hays (sam.hays_at_patioenc.com)
Date: 12/01/04


Date: Wed, 1 Dec 2004 08:10:21 -0500

Andrew,

Is it spyware? I've had (spyware) situations like that where i'd log in to
the recovery console, delete the exe and then remove the registry entry once
I was back in the gui. You can install the recovery console from the i386
folder on the Winxp cd by running Winnt32 /cmdcons.

Best Regards,
G. Samuel Hays

"acira" <acira@discussions.microsoft.com> wrote in message
news:EAE9903D-7E0E-4148-B81C-D9D85E1B81CA@microsoft.com...
> I'm unable to delete a registry value:
> HKLM\software\microsoft\windows\currentversion\registration\*playmc
>
> This runs the following command:
> c:\winnt\registration\playmc.exe rerun
>
> Can't delete this file because of sharing violation. If I terminate the
> service in system manager, it respawns. I want to kill this service and
> delete the program. Any suggestions would help.
>
> Thanks, Andrew



Relevant Pages

  • RE: Editing Registry from Recovery Console
    ... After removing the spyware, ... but the registry still points to it and tries to ... Boot into recovery console. ... Reboot the system and logon. ...
    (microsoft.public.windowsxp.configuration_manage)
  • Re: Registry Editor
    ... This is spyware. ... I did go into the recovery console to delete the *.exe file. ... "G. Samuel Hays" wrote: ...
    (microsoft.public.win2000.file_system)
  • Re: Registry Entry!
    ... Privacy policy not disclosed to the user prior to installation, ... It looks like the DSO exploit that Ad-Aware and Spybot "detected" ... Each registry entry is specific to every system. ... Antispyware Beta1 free software and scan your system for any spyware. ...
    (microsoft.public.windowsxp.general)
  • Re: wins32.exe - virus? trojan? malware?
    ... >we ran new virus scans and spyware scans and found nothing. ... >renamed it there, whacked the registry entry again, but it still returns - ... >Servers, so we're pretty sure it's a bad file. ... it's best to post such help requests on alt.comp.virus ...
    (microsoft.public.win2000.security)
  • Re: Registry Entry!
    ... What sort of Spyware does Ad-Aware call it? ... patches from Microsoft for IE or have XP SP2, ... Each registry entry is specific to every system. ...
    (microsoft.public.windowsxp.general)