Re: Reg key HKEY_LOCAL_MACHINE\SECURITY is empty



On Aug 5, 1:40 am, SnakeSteuben <SnakeSteuben.2ut...@xxxxxxxxxxxxxxxx>
wrote:
Jim;23778 Wrote:

When I launch programs, my XP Pro/SP2 system sometimes hesitates for a
few seconds.

Using RegMon (by Systems Internals) I found this hesitation was when
registry key HKEY_LOCAL_MACHINE\SECURITY was being accessed.

Oh yeah, one more thing, to address your original problem!

I'd run rootkit revealer if I were you. It's another sysinternals
utility, so you obviously know where to get it, and there's my pointer
above for anyone else. You'll need a fairly recent version, so I'd
update to the latest one. (Reason--as you now know--this info is in a
protective hive, and older versions of rootkit revealer didn't examine
protected hives.)

If you do so, let us know what you get, if anything.

But just so you won't have a heart attack before you report back :),
I'll say it's fairly likely to report that there are nulls embedded in
key names
HKLM\SECURITY\Policy\Secrets\SAC and SAI. But I understand that alone,
without more, is no cause for concern.

Men are like campsites. Women should leave them better than they found
them.
- My wife

McAfee has recently made available a free "Rootkit Detective",
downloadable from http://download.nai.com/products/mcafee-avert/McafeeRootkitDetective.zip
According to an 'expert' reviewer, "...early users have warned that
this is not one of those 'made for dummies' applications: It is safer
to send the list to McAfee, using the built-in routine, so that they
can determine if the files are indeed malware - otherwise one might
end up deleting essential files."
I have downloaded the zip file but have not installed it yet because
of the above warning. I shall be thankful for comments from experts in
this forum.

.



Relevant Pages

  • Re: Reg key HKEY_LOCAL_MACHINESECURITY is empty
    ... registry key HKEY_LOCAL_MACHINE\SECURITY was being accessed. ... Oh yeah, one more thing, to address your original problem! ... I'd run rootkit revealer if I were you. ... But just so you won't have a heart attack before you report back:), ...
    (microsoft.public.windowsxp.general)
  • Re: Error modifying registry key
    ... So I went back to safe mode and tried to change the McAfee services startup ... the way that McAfee said would disable anti-tampering, ... I found a different registry key that controls whether the McAfee ...
    (microsoft.public.windowsxp.general)
  • Re: pdf file per record creation from form
    ... ensure that the report will print to the PDF-writing device ... >a report or form to a separate pdf file, ... >> filename by setting a registry key. ... >> document that is printed to the Adobe PDF printer. ...
    (microsoft.public.access.formscoding)
  • RE: pdf file per record creation from form
    ... filename by setting a registry key. ... document that is printed to the Adobe PDF printer. ... Make sure that your report has the pdfwriter as default printer and you have ... I am printing a record, ...
    (microsoft.public.access.formscoding)
  • RE: pdf file per record creation from form
    ... > filename by setting a registry key. ... > document that is printed to the Adobe PDF printer. ... >> I can easily change the form to a report. ... I am printing a record, ...
    (microsoft.public.access.formscoding)