[filename.info logo]
[cn regedit.exe][de regedit.exe][es regedit.exe][fr regedit.exe][gb regedit.exe][it regedit.exe][jp regedit.exe][kr regedit.exe][nl regedit.exe][pt regedit.exe][ru regedit.exe][us regedit.exe]
 

regedit.exe (5.1.2600.1106)

包含在软件

名字:Windows XP Home Edition, Deutsch
执照:商业
信息链接:http://www.microsoft.com/windowsxp/

文件细节

文件道路:C:\WINDOWS\system32\dllcache \ regedit.exe
文件日期:2002-08-29 14:00:00
版本:5.1.2600.1106
文件大小:141.312 字节

检查和和文件hashes

CRC32:2CD1203F
MD5:FD95 FFEC C4B1 FE72 597D 7FA6 AF8C 2870
SHA1:131D 51DC 0CE4 6941 4A20 5BA4 E9F3 E048 DC12 559C

版本资源信息

公司名称:Microsoft Corporation
文件描述:Registrierungs-Editor
文件操作系统:Windows NT, Windows 2000, Windows XP, Windows 2003
文件类型:Application
文件版本:5.1.2600.1106
内部名:REGEDIT
法律版权: Microsoft Corporation. Alle Rechte vorbehalten.
原始的文件名:REGEDIT.EXE
产品名称:Betriebssystem Microsoft Windows
产品版本:5.1.2600.1106

regedit.exe 被发现了在以下报告:

W32.HLLW.Reckus

关于W32.HLLW.Reckus
...It overwrites Notepad.exe and Regedit.exe with copies of itself and terminates antivirus and firewall processes....
威胁评估
...Overwrites C:WindowsNotepad.exe and C:WindowsRegedit.exe; may delete other system files....
技术细节
...Notepad.exe Regedit.exe Note: The worm overwrites...
撤除指示
...Because this worm overwrites regedit.exe, it will be necessary to restore this file from a backup copy before performing...
...(The Run dialog box appears.) Type regedit Then click OK. (The Registry...
来源: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.reckus.html

W32.Alcarys.B@mm

关于W32.HLLW.Reckus
...It also overwrites many system files, including Regedit.exe. This causes the computer to...
威胁评估
...Overwrites all .scr and .com files, as well as Regedit.exe, Regsvr32.exe, and Scanregw.exe...
...Enters an infinite loop due to the overwriting of Regedit.exe so the computer will quickly run out of resources and stop responding....
...Enters an infinite loop due to the overwriting of Regedit.exe so the computer will quickly run out of resources and stop responding....
技术细节
...Beautiful MindWatchme.exe C:WindowsRegedit.exe C:WindowsScanregw.exe...
...MenuProgramsWindows Updatefile###.###.exe Regedit              C:windows egedit.exe...
撤除指示
...If the worm has successfully overwritten system files such as Regedit.exe, you first must reinstall Windows or restore the overwritten files from a clean...
...The Run dialog box appears. Type regedit and then click OK. The Registry Editor opens....
...MenuProgramsWindows Updatefile###.###.exe Regedit              C:windows egedit.exe...
来源: http://securityresponse.symantec.com/avcenter/venc/data/w32.alcarys.b@mm.html

VBS.JongBoy@mm

关于W32.HLLW.Reckus
...VBS.JongBoy@mm deletes the Regedit.exe file and attempts to overwrite several other system files....
威胁评估
...Deletes files: Deletes Regedit.exe and overwrites .dll, .ocx, and .sys files in the WindowsSystem folder...
技术细节
...If executed, this worm deletes the Regedit.exe file, which will prevent you from editing the Windows registry....
...It then attempts to delete Regedit.exe. Finally, this worm checks...
来源: http://securityresponse.symantec.com/avcenter/venc/data/vbs.jongboy@mm.html

PIF.Fable.Worm

关于W32.HLLW.Reckus
...When executed, the worm adds several files to the hard disk and deletes the file Regedit.exe. The worm spreads by means...
威胁评估
...When first executed, the worm deletes the file Regedit.exe located at WindowsRegedit.exe....
技术细节
...After these files are created, the worm deletes [WindowsDir]Regedit.exe and sets the hidden and read only attributes on the newly inserted files....
撤除指示
...Delele all infections. If necessary, restore Regedit.exe from a clean backup. Write-up by:...
来源: http://securityresponse.symantec.com/avcenter/venc/data/pif.fable.worm.html

W32.Duksten.B@mm

技术细节
...It first renames C:\%windir%Regedit.exe to C:\%windir%m-Regedit.exe, and then it copies itself as C:\%windir%Regedit.exe....
撤除指示
...C:\%system%m_WAB.XRF manually. Rename m-Regedit.exe back to Regedit.exe Remove the value...
...and C:\%system%m_WAB.XRF . To rename m-Regedit.exe back to Regedit.exe: Follow the instructions for...
...paste--the following file names: m-Regedit.exe Click Find Now or Search Now....
...found and then click Rename. Change the name to Regedit.exe. Windows XP...
...paste--the following file names: m-Regedit.exe Verify that "Look in"...
...found and then click Rename. Change the name to Regedit.exe. To remove the value from the...
...The Run dialog box appears. Type regedit and then click OK. The Registry Editor opens....
来源: http://securityresponse.symantec.com/avcenter/venc/data/w32.duksten.b@mm.html

W32.Duksten.E@mm

技术细节
...Renames the Windows Registry Editor file %windir%Regedit.exe to %windir%m_Regedit.exe, and then copies itself as %windir%Regedit.exe....
撤除指示
...%system%P_Base64.xrf and %system%P_WAB.XRF. Rename m_Regedit.exe back to Regedit.exe. Remove the value...
...%system%P_Base64.xrf and %system%P_WAB.XRF. Renaming m-Regedit.exe to Regedit.exe Follow the instructions for...
..."Named" or "Search for..." box, type, or copy and paste, the file name m_Regedit.exe. Click Find Now or Search Now....
...found, and then click Rename. Change the name to Regedit.exe. Windows XP...
..."All or part of the file name" box, type, or copy and paste, the file name m_Regedit.exe. Verify that "Look in"...
...found, and then click Rename. Change the name to Regedit.exe. Removing the value from the...
...(The Run dialog box appears.) Type regedit, and then click OK. (The Registry Editor opens.)...
来源: http://securityresponse.symantec.com/avcenter/venc/data/w32.duksten.e@mm.html

W32.Duksten.D@mm

技术细节
...Renames the Windows Registry Editor file %windir%Regedit.exe to %windir%m_Regedit.exe, and then it copies itself as %windir%Regedit.exe....
撤除指示
...%system%m_Base64.xrf and %system%m_WAB.XRF. Rename m_Regedit.exe to Regedit.exe Remove the value...
...%system%m_Base64.xrf and %system%m_WAB.XRF. Renaming m-Regedit.exe to Regedit.exe Follow the instructions for...
..."Named" or "Search for..." box, type, or copy and paste, the file name m_Regedit.exe. Click Find Now or Search Now....
...found, and then click Rename. Change the name to Regedit.exe. Windows XP...
..."All or part of the file name" box, type, or copy and paste, the file name m_Regedit.exe. Verify that "Look in"...
...found, and then click Rename. Change the name to Regedit.exe. Removing the value from the...
...(The Run dialog box appears.) Type regedit, and then click OK. (The Registry Editor opens.)...
来源: http://securityresponse.symantec.com/avcenter/venc/data/w32.duksten.d@mm.html

W32.Vig.Worm

威胁评估
...Deletes files: Deletes C:WindowsRegedit.exe Modifies files:...
技术细节
...W32.Vig.Worm also deletes C:WindowsRegedit.exe. The path is hard-coded and...
撤除指示
...detected as W32.Vig.Worm. 2. Restore the Regedit.exe file if it was deleted by the worm....
...W32.Vig.Worm, click Delete. To restore regedit.exe: If the file Regedit.exe was...
...The Run dialog box appears. 2. Type regedit and then click OK. The Registry Editor opens....
来源: http://securityresponse.symantec.com/avcenter/venc/data/w32.vig.worm.html

W32.HLLW.Vig

威胁评估
...Deletes files: Deletes C:WindowsRegedit.exe Modifies files:...
技术细节
...W32.HLLW.Vig also deletes C:WindowsRegedit.exe. The path is hard-coded and...
撤除指示
...detected as W32.HLLW.Vig. Restore the Regedit.exe file if it was deleted by the worm....
...W32.HLLW.Vig, click Delete. To restore regedit.exe: If the file Regedit.exe was...
...The Run dialog box appears. Type regedit and then click OK. The Registry Editor opens....
来源: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.vig.html

W32.Bajar.Worm.Int

技术细节
...C:WindowsSystemNERFIX.vbs C:WindowsSystemRegedit.exe C:WindowsSystemMtv.exe...
...C:WindowsSystemirkov.exe C:WindowsSystemRegedit.exe C:WindowsSystemFonts.exe...
...C:Autoexec.bat C:WindowsRegedit.exe C:WindowsRegedit.com...
撤除指示
...If the worm deleted Autoexec.bat, Rundll.exe (Windows 95/98/Me only), or Regedit.exe, you must restore them from a clean backup or reinstall them before you can...
...The Run dialog box appears. Type regedit and then click OK. The Registry Editor opens....
......
来源: http://securityresponse.symantec.com/avcenter/venc/data/w32.bajar.worm.int.html



Valid HTML 4.01!