Interesting note about regedit

[jettlag]

I'm sure alot of you know this one already, but I just found out.

If you have a virus that infects your system and you can't run any exe files. You can rename the regedit.exe to regedit.com and it works.

You have to be pretty familar with the registry to go snooping around, but good info. to know nonetheless.

JL

[http://forums.windrivers.com/cgi-bin/forum1/noncgi]

Also, if you're running Windows NT or 2000, you may be able to run regedt32 instead.

Regedt32 lacks some of the features of Regedit (in particular, you cannot search for keys), but it adds one VERY important feature: you can change the security permissions on keys! Don't want your users changing settings, set them to Read Only!

[Lt. Columbo (formally Joevegany@..)]

Good tip.

[GC74]

Yes buddy...it's a very easy think, but in a panic moment (sue to a virus attack) this can be helpful!
Thanks.

[Vilefileman]

Sound like you were bitten by the SirCam virus, Am I right?

V

<IMG SRC="smilies/biggrin.gif" border="0">

[DFW_Tech_Kenny]

Originally posted by Captain Packrat:
<STRONG>Regedt32 lacks some of the features of Regedit (in particular, you cannot search for keys</STRONG>

Not sure about 2K but in NT you CAN search for keys using regedt32. Just go to View, Find Key. The only negative thing is that each section of the registry ( HKEY_Local_Machine, HKEY_Current_User, etc. ) is opened in its own window, if you want to search all of the registry you have to go window by window and click View, Find Key, to search each section of the registry.

<IMG SRC="smilies/biggrin.gif" border="0">

[cyberhh]

You can also search in regedit the same way, however as everything is in the same window - only one search point.