Re: Windows Registry



Be sure to boot your computer into Safe Mode when you experience such
problems and also be sure to scan for malware and spyware in Safe Mode also.
It may also help to try and select kill process tree if you have not used
that or third party tools such as the free PsKill from SysInternals. ---
Steve

http://www.sysinternals.com/Utilities/PsKill.html

"Tordillo" <Tordillo@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:36096D32-CCAD-4AB3-9D03-EB1A72D1BC8C@xxxxxxxxxxxxxxxx
Hi everyone,

Ok, i want it to ask u guys if there is any registry branch that can
"lock"
you from killing any processes.

I while ago i got some nasty spyware, adware and i couldnt get it off my
pc
with any of the programs currently in the market, read Ad-aware, Spyboot,
MS
Antispyware, etc etc. So i had to do it manually. I did it, toke me a
while
to do so, but i got it, i deleted the files that were loading up with my
pc
and changing the registry.

But after i deleted them, im now unable to kill any process that is
running
as SYSTEM, not that i want to kill Winlogon or anything, but for example
Norton run processes under SYSTEM that if i wanted too i could kill them
with
out any consecuences to the system or anything. I thing that spyware,
adware
i got infected with, left something on the registry that is blocking me
somehow, preventing me for killing any processes that is "used" by the
system
(i imagine that they do that so we cant kill the process and the spyware,
adware can run freely).

Well, since i dont have them anymore, that lcokdown that they did its till
there, somewhere in the registry, can anyone help me to get rid off it???
Thre programs that i told you, dont find anything, like files, registry
values or anything suspicious on my pc. PLZ HELP!!!

Thanks all in advance. :)


.



Relevant Pages

  • Re: Spyware: how to clean registry and stop returns
    ... > hundreds of Spyware items, ... and clean up some of their registry entries. ... You need to run a combination of programs and do so in safe mode. ... Symantec Online Virus and Security Scan: ...
    (microsoft.public.windowsxp.general)
  • Re: backdoor.coreflood
    ... You need to kill the registry settings that are causing this DLL to be ... loaded every time the system boots, even in safe mode. ... This will explain about editing the registry. ... and killed every key referencing that ...
    (microsoft.public.security.virus)
  • Logged in as SYSTEM after using regular user account
    ... But the laptop was also riddled with spyware, ... To be sure I also cleaned up the start apps in the registry to ... However when I logged in using the user's account, ... I even tried making a new user and admin account in safe mode under the ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: OT reall OT
    ... you're going to have to kill it first or you'll ... be stuck in a loop. ... That's why you should do that kind of registry hacking in Windows ... safe mode where services do not start. ...
    (borland.public.delphi.non-technical)
  • Re: Final Report Vundo
    ... registry is more easily done from the XP partition. ... ddayv.exe and ddayv.dll in the system32 directory, ... I can also boot into ... Download and run firefox to protect your from future spyware ...
    (microsoft.public.windowsxp.configuration_manage)