[filename.info logo]
[cn regedit.exe][de regedit.exe][es regedit.exe][fr regedit.exe][gb regedit.exe][it regedit.exe][jp regedit.exe][kr regedit.exe][nl regedit.exe][pt regedit.exe][ru regedit.exe][us regedit.exe]
 

regedit.exe (5.1.2600.1106)

Contained in software

Name:Windows XP Home Edition, Deutsch
License:commercial
Information link:http://www.microsoft.com/windowsxp/

File details

Filepath:C:\WINDOWS\system32\dllcache \ regedit.exe
Filedate:2002-08-29 14:00:00
Version:5.1.2600.1106
Filesize:141.312 bytes

Checksum and file hashes

CRC32:2CD1203F
MD5:FD95 FFEC C4B1 FE72 597D 7FA6 AF8C 2870
SHA1:131D 51DC 0CE4 6941 4A20 5BA4 E9F3 E048 DC12 559C

Version resource information

CompanyName:Microsoft Corporation
FileDescription:Registrierungs-Editor
FileOS:Windows NT, Windows 2000, Windows XP, Windows 2003
FileType:Application
FileVersion:5.1.2600.1106
InternalName:REGEDIT
LegalCopyright:© Microsoft Corporation. Alle Rechte vorbehalten.
OriginalFilename:REGEDIT.EXE
ProductName:Betriebssystem Microsoft® Windows®
ProductVersion:5.1.2600.1106

regedit.exe was found in the following malware reports:

W32.HLLW.Reckus

About W32.HLLW.Reckus
...It overwrites Notepad.exe and Regedit.exe with copies of itself and terminates antivirus and firewall processes....
Threat assessment
...Overwrites C:WindowsNotepad.exe and C:WindowsRegedit.exe; may delete other system files....
Technical details
...Notepad.exe Regedit.exe Note: The worm overwrites...
Removal instructions
...Because this worm overwrites regedit.exe, it will be necessary to restore this file from a backup copy before performing...
...(The Run dialog box appears.) Type regedit Then click OK. (The Registry...
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.reckus.html

W32.Alcarys.B@mm

About W32.Alcarys.B@mm
...It also overwrites many system files, including Regedit.exe. This causes the computer to...
Threat assessment
...Overwrites all .scr and .com files, as well as Regedit.exe, Regsvr32.exe, and Scanregw.exe...
...Enters an infinite loop due to the overwriting of Regedit.exe so the computer will quickly run out of resources and stop responding....
...Enters an infinite loop due to the overwriting of Regedit.exe so the computer will quickly run out of resources and stop responding....
Technical details
...Beautiful MindWatchme.exe C:WindowsRegedit.exe C:WindowsScanregw.exe...
...MenuProgramsWindows Updatefile###.###.exe Regedit              C:windows egedit.exe...
Removal instructions
...If the worm has successfully overwritten system files such as Regedit.exe, you first must reinstall Windows or restore the overwritten files from a clean...
...The Run dialog box appears. Type regedit and then click OK. The Registry Editor opens....
...MenuProgramsWindows Updatefile###.###.exe Regedit              C:windows egedit.exe...
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.alcarys.b@mm.html

VBS.JongBoy@mm

About VBS.JongBoy@mm
...VBS.JongBoy@mm deletes the Regedit.exe file and attempts to overwrite several other system files....
Threat assessment
...Deletes files: Deletes Regedit.exe and overwrites .dll, .ocx, and .sys files in the WindowsSystem folder...
Technical details
...If executed, this worm deletes the Regedit.exe file, which will prevent you from editing the Windows registry....
...It then attempts to delete Regedit.exe. Finally, this worm checks...
Source: http://securityresponse.symantec.com/avcenter/venc/data/vbs.jongboy@mm.html

PIF.Fable.Worm

About PIF.Fable.Worm
...When executed, the worm adds several files to the hard disk and deletes the file Regedit.exe. The worm spreads by means...
Threat assessment
...When first executed, the worm deletes the file Regedit.exe located at WindowsRegedit.exe....
Technical details
...After these files are created, the worm deletes [WindowsDir]Regedit.exe and sets the hidden and read only attributes on the newly inserted files....
Removal instructions
...Delele all infections. If necessary, restore Regedit.exe from a clean backup. Write-up by:...
Source: http://securityresponse.symantec.com/avcenter/venc/data/pif.fable.worm.html

W32.Duksten.B@mm

Technical details
...It first renames C:\%windir%Regedit.exe to C:\%windir%m-Regedit.exe, and then it copies itself as C:\%windir%Regedit.exe....
Removal instructions
...C:\%system%m_WAB.XRF manually. Rename m-Regedit.exe back to Regedit.exe Remove the value...
...and C:\%system%m_WAB.XRF . To rename m-Regedit.exe back to Regedit.exe: Follow the instructions for...
...paste--the following file names: m-Regedit.exe Click Find Now or Search Now....
...found and then click Rename. Change the name to Regedit.exe. Windows XP...
...paste--the following file names: m-Regedit.exe Verify that "Look in"...
...found and then click Rename. Change the name to Regedit.exe. To remove the value from the...
...The Run dialog box appears. Type regedit and then click OK. The Registry Editor opens....
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.duksten.b@mm.html

W32.Duksten.E@mm

Technical details
...Renames the Windows Registry Editor file %windir%Regedit.exe to %windir%m_Regedit.exe, and then copies itself as %windir%Regedit.exe....
Removal instructions
...%system%P_Base64.xrf and %system%P_WAB.XRF. Rename m_Regedit.exe back to Regedit.exe. Remove the value...
...%system%P_Base64.xrf and %system%P_WAB.XRF. Renaming m-Regedit.exe to Regedit.exe Follow the instructions for...
..."Named" or "Search for..." box, type, or copy and paste, the file name m_Regedit.exe. Click Find Now or Search Now....
...found, and then click Rename. Change the name to Regedit.exe. Windows XP...
..."All or part of the file name" box, type, or copy and paste, the file name m_Regedit.exe. Verify that "Look in"...
...found, and then click Rename. Change the name to Regedit.exe. Removing the value from the...
...(The Run dialog box appears.) Type regedit, and then click OK. (The Registry Editor opens.)...
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.duksten.e@mm.html

W32.Duksten.D@mm

Technical details
...Renames the Windows Registry Editor file %windir%Regedit.exe to %windir%m_Regedit.exe, and then it copies itself as %windir%Regedit.exe....
Removal instructions
...%system%m_Base64.xrf and %system%m_WAB.XRF. Rename m_Regedit.exe to Regedit.exe Remove the value...
...%system%m_Base64.xrf and %system%m_WAB.XRF. Renaming m-Regedit.exe to Regedit.exe Follow the instructions for...
..."Named" or "Search for..." box, type, or copy and paste, the file name m_Regedit.exe. Click Find Now or Search Now....
...found, and then click Rename. Change the name to Regedit.exe. Windows XP...
..."All or part of the file name" box, type, or copy and paste, the file name m_Regedit.exe. Verify that "Look in"...
...found, and then click Rename. Change the name to Regedit.exe. Removing the value from the...
...(The Run dialog box appears.) Type regedit, and then click OK. (The Registry Editor opens.)...
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.duksten.d@mm.html

W32.Vig.Worm

Threat assessment
...Deletes files: Deletes C:WindowsRegedit.exe Modifies files:...
Technical details
...W32.Vig.Worm also deletes C:WindowsRegedit.exe. The path is hard-coded and...
Removal instructions
...detected as W32.Vig.Worm. 2. Restore the Regedit.exe file if it was deleted by the worm....
...W32.Vig.Worm, click Delete. To restore regedit.exe: If the file Regedit.exe was...
...The Run dialog box appears. 2. Type regedit and then click OK. The Registry Editor opens....
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.vig.worm.html

W32.HLLW.Vig

Threat assessment
...Deletes files: Deletes C:WindowsRegedit.exe Modifies files:...
Technical details
...W32.HLLW.Vig also deletes C:WindowsRegedit.exe. The path is hard-coded and...
Removal instructions
...detected as W32.HLLW.Vig. Restore the Regedit.exe file if it was deleted by the worm....
...W32.HLLW.Vig, click Delete. To restore regedit.exe: If the file Regedit.exe was...
...The Run dialog box appears. Type regedit and then click OK. The Registry Editor opens....
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.vig.html

W32.Bajar.Worm.Int

Technical details
...C:WindowsSystemNERFIX.vbs C:WindowsSystemRegedit.exe C:WindowsSystemMtv.exe...
...C:WindowsSystemirkov.exe C:WindowsSystemRegedit.exe C:WindowsSystemFonts.exe...
...C:Autoexec.bat C:WindowsRegedit.exe C:WindowsRegedit.com...
Removal instructions
...If the worm deleted Autoexec.bat, Rundll.exe (Windows 95/98/Me only), or Regedit.exe, you must restore them from a clean backup or reinstall them before you can...
...The Run dialog box appears. Type regedit and then click OK. The Registry Editor opens....
......
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.bajar.worm.int.html



Valid HTML 4.01!