|
regedit.exe (5.1.2600.1106)
Contained in software |
|---|
| Name: | Windows XP Home Edition, Deutsch |
|---|
| License: | commercial |
|---|
| Information link: | http://www.microsoft.com/windowsxp/ |
|---|
File details |
|---|
| Filepath: | C:\WINDOWS\system32\dllcache \ regedit.exe |
|---|
| Filedate: | 2002-08-29 14:00:00 |
|---|
| Version: | 5.1.2600.1106 |
|---|
| Filesize: | 141.312 bytes |
|---|
Checksum and file hashes |
|---|
| CRC32: | 2CD1203F |
|---|
| MD5: | FD95 FFEC C4B1 FE72 597D 7FA6 AF8C 2870 |
|---|
| SHA1: | 131D 51DC 0CE4 6941 4A20 5BA4 E9F3 E048 DC12 559C |
|---|
Version resource information |
|---|
| CompanyName: | Microsoft Corporation |
|---|
| FileDescription: | Registrierungs-Editor |
|---|
| FileOS: | Windows NT, Windows 2000, Windows XP, Windows 2003 |
|---|
| FileType: | Application |
|---|
| FileVersion: | 5.1.2600.1106 |
|---|
| InternalName: | REGEDIT |
|---|
| LegalCopyright: | © Microsoft Corporation. Alle Rechte vorbehalten. |
|---|
| OriginalFilename: | REGEDIT.EXE |
|---|
| ProductName: | Betriebssystem Microsoft® Windows® |
|---|
| ProductVersion: | 5.1.2600.1106 |
|---|
regedit.exe was found in the following malware reports:
|
|
|---|
W32.HLLW.Reckus |
|---|
About W32.HLLW.Reckus
...It overwrites Notepad.exe and Regedit.exe with copies of itself and terminates antivirus and firewall processes....
Threat assessment
...Overwrites C:WindowsNotepad.exe and C:WindowsRegedit.exe; may delete other system files....
Technical details
...Notepad.exe Regedit.exe Note: The worm overwrites...
Removal instructions
...Because this worm overwrites regedit.exe, it will be necessary to restore this file from a backup copy before performing...
...(The Run dialog box appears.) Type regedit Then click OK. (The Registry...
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.reckus.html |
|---|
W32.Alcarys.B@mm |
|---|
About W32.Alcarys.B@mm
...It also overwrites many system files, including Regedit.exe. This causes the computer to...
Threat assessment
...Overwrites all .scr and .com files, as well as Regedit.exe, Regsvr32.exe, and Scanregw.exe...
...Enters an infinite loop due to the overwriting of Regedit.exe so the computer will quickly run out of resources and stop responding....
...Enters an infinite loop due to the overwriting of Regedit.exe so the computer will quickly run out of resources and stop responding....
Technical details
...Beautiful MindWatchme.exe C:WindowsRegedit.exe C:WindowsScanregw.exe...
...MenuProgramsWindows Updatefile###.###.exe Regedit C:windows
egedit.exe...
Removal instructions
...If the worm has successfully overwritten system files such as Regedit.exe, you first must reinstall Windows or restore the overwritten files from a clean...
...The Run dialog box appears. Type regedit and then click OK. The Registry Editor opens....
...MenuProgramsWindows Updatefile###.###.exe Regedit C:windows
egedit.exe...
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.alcarys.b@mm.html |
|---|
VBS.JongBoy@mm |
|---|
About VBS.JongBoy@mm
...VBS.JongBoy@mm deletes the Regedit.exe file and attempts to overwrite several other system files....
Threat assessment
...Deletes files: Deletes Regedit.exe and overwrites .dll, .ocx, and .sys files in the WindowsSystem folder...
Technical details
...If executed, this worm deletes the Regedit.exe file, which will prevent you from editing the Windows registry....
...It then attempts to delete Regedit.exe. Finally, this worm checks...
Source: http://securityresponse.symantec.com/avcenter/venc/data/vbs.jongboy@mm.html |
|---|
PIF.Fable.Worm |
|---|
About PIF.Fable.Worm
...When executed, the worm adds several files to the hard disk and deletes the file Regedit.exe. The worm spreads by means...
Threat assessment
...When first executed, the worm deletes the file Regedit.exe located at WindowsRegedit.exe....
Technical details
...After these files are created, the worm deletes [WindowsDir]Regedit.exe and sets the hidden and read only attributes on the newly inserted files....
Removal instructions
...Delele all infections. If necessary, restore Regedit.exe from a clean backup. Write-up by:...
Source: http://securityresponse.symantec.com/avcenter/venc/data/pif.fable.worm.html |
|---|
W32.Duksten.B@mm |
|---|
Technical details
...It first renames C:\%windir%Regedit.exe to C:\%windir%m-Regedit.exe, and then it copies itself as C:\%windir%Regedit.exe....
Removal instructions
...C:\%system%m_WAB.XRF manually. Rename m-Regedit.exe back to Regedit.exe Remove the value...
...and C:\%system%m_WAB.XRF . To rename m-Regedit.exe back to Regedit.exe: Follow the instructions for...
...paste--the following file names: m-Regedit.exe Click Find Now or Search Now....
...found and then click Rename. Change the name to Regedit.exe. Windows XP...
...paste--the following file names: m-Regedit.exe Verify that "Look in"...
...found and then click Rename. Change the name to Regedit.exe. To remove the value from the...
...The Run dialog box appears. Type regedit and then click OK. The Registry Editor opens....
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.duksten.b@mm.html |
|---|
W32.Duksten.E@mm |
|---|
Technical details
...Renames the Windows Registry Editor file %windir%Regedit.exe to %windir%m_Regedit.exe, and then copies itself as %windir%Regedit.exe....
Removal instructions
...%system%P_Base64.xrf and %system%P_WAB.XRF. Rename m_Regedit.exe back to Regedit.exe. Remove the value...
...%system%P_Base64.xrf and %system%P_WAB.XRF. Renaming m-Regedit.exe to Regedit.exe Follow the instructions for...
..."Named" or "Search for..." box, type, or copy and paste, the file name m_Regedit.exe. Click Find Now or Search Now....
...found, and then click Rename. Change the name to Regedit.exe. Windows XP...
..."All or part of the file name" box, type, or copy and paste, the file name m_Regedit.exe. Verify that "Look in"...
...found, and then click Rename. Change the name to Regedit.exe. Removing the value from the...
...(The Run dialog box appears.) Type regedit, and then click OK. (The Registry Editor opens.)...
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.duksten.e@mm.html |
|---|
W32.Duksten.D@mm |
|---|
Technical details
...Renames the Windows Registry Editor file %windir%Regedit.exe to %windir%m_Regedit.exe, and then it copies itself as %windir%Regedit.exe....
Removal instructions
...%system%m_Base64.xrf and %system%m_WAB.XRF. Rename m_Regedit.exe to Regedit.exe Remove the value...
...%system%m_Base64.xrf and %system%m_WAB.XRF. Renaming m-Regedit.exe to Regedit.exe Follow the instructions for...
..."Named" or "Search for..." box, type, or copy and paste, the file name m_Regedit.exe. Click Find Now or Search Now....
...found, and then click Rename. Change the name to Regedit.exe. Windows XP...
..."All or part of the file name" box, type, or copy and paste, the file name m_Regedit.exe. Verify that "Look in"...
...found, and then click Rename. Change the name to Regedit.exe. Removing the value from the...
...(The Run dialog box appears.) Type regedit, and then click OK. (The Registry Editor opens.)...
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.duksten.d@mm.html |
|---|
W32.Vig.Worm |
|---|
Threat assessment
...Deletes files: Deletes C:WindowsRegedit.exe Modifies files:...
Technical details
...W32.Vig.Worm also deletes C:WindowsRegedit.exe. The path is hard-coded and...
Removal instructions
...detected as W32.Vig.Worm. 2. Restore the Regedit.exe file if it was deleted by the worm....
...W32.Vig.Worm, click Delete. To restore regedit.exe: If the file Regedit.exe was...
...The Run dialog box appears. 2. Type regedit and then click OK. The Registry Editor opens....
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.vig.worm.html |
|---|
W32.HLLW.Vig |
|---|
Threat assessment
...Deletes files: Deletes C:WindowsRegedit.exe Modifies files:...
Technical details
...W32.HLLW.Vig also deletes C:WindowsRegedit.exe. The path is hard-coded and...
Removal instructions
...detected as W32.HLLW.Vig. Restore the Regedit.exe file if it was deleted by the worm....
...W32.HLLW.Vig, click Delete. To restore regedit.exe: If the file Regedit.exe was...
...The Run dialog box appears. Type regedit and then click OK. The Registry Editor opens....
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.vig.html |
|---|
W32.Bajar.Worm.Int |
|---|
Technical details
...C:WindowsSystemNERFIX.vbs C:WindowsSystemRegedit.exe C:WindowsSystemMtv.exe...
...C:WindowsSystemirkov.exe C:WindowsSystemRegedit.exe C:WindowsSystemFonts.exe...
...C:Autoexec.bat C:WindowsRegedit.exe C:WindowsRegedit.com...
Removal instructions
...If the worm deleted Autoexec.bat, Rundll.exe (Windows 95/98/Me only), or Regedit.exe, you must restore them from a clean backup or reinstall them before you can...
...The Run dialog box appears. Type regedit and then click OK. The Registry Editor opens....
......
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.bajar.worm.int.html |
|---|
|
|
![[filename.info logo]](/img/logo.png){kind=logo}
![[cn regedit.exe]](/img/nix.gif){kind=small}
