|
Posted by Zvi Netiv on November 4, 2005, 9:50 am
If you were Registered and logged in, you could reply and use other advanced thread options
> | I have recently removed viruses & spyware from my computer @ trend micro's
> | site. However now when I type regedit at the run box I get an error.
> |
> | The command prompt window appears with garbage in it, and a dialog is
> | displayed titled "16 bit MS-DOS Subsystem" in the dialog it says
> | c:\winnt\system32\regedit.com
> | The NTVDM CPU has encountered an illegal instruction.
> |
> | It gives the option to close or ingnore.
>
> Find; c:\winnt\system32\regedit.com
> Rename; regedit.com to regedit.exe
I wouldn't do that! Regedit.com could be a trojanized companion of Regedit,
that got "corrupted" in the process of cleaning, as described by the OP.
The reasons I believe it's a corrupted companion are two: The directory it's
found in, %windir%\system32, while the genuine Regedit.exe is in %windir%,
plain. The other reason is the "16 bit MS-DOS" error message - the original
Regedit.exe file has a PE structure and would issue a different error message.
Conclusion: Regedit.com is both fake, and corrupted.
To the OP: Do NOT rename the file as advised, and see my other post in this
thread for how to fix the problem.
Regards, Zvi
--
NetZ Computing Ltd. ISRAEL www.invircible.com www.ivi.co.il (Hebrew)
InVircible Virus Defense Solutions, ResQ and Data Recovery Utilities
| 
XML site map