win xp registry

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Guest
Archived from groups: microsoft.public.windowsnt.registry (More info?)

Is regsvr.exe a virus? Everytime it's running, I get a popup from Outlook
that says a program is trying to access my addresses. I also can't get into
my system registry because "registry editing has been disabled by your
administrator". I've never changed any settings that would pertain to this.

Please advise
 
Archived from groups: microsoft.public.windowsnt.registry (More info?)

Normally it's a 16 bit tool to register dynamic-link libraries (DLLs) and
ActiveX controls. It shouldn't be a normal running process so it very well
could be the work of some malware.

Use the Group policy editor
%windir%\system32\gpedit.msc
User Config\Admin Templates\System\Prevent Access To registry Editing
Tools="Not Configured"

(usually spyware/ junkware that sets this Reg_Dword decimal value to 1)
DisableRegistryTools
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System

Also check;
%windir%\system32\gpedit.msc
User Config\Admin Templates\System\
'Don't run specified Windows applications'
'Run only allowed Windows applications'

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

"Neil K" wrote:
| Is regsvr.exe a virus? Everytime it's running, I get a popup from Outlook
| that says a program is trying to access my addresses. I also can't get
into
| my system registry because "registry editing has been disabled by your
| administrator". I've never changed any settings that would pertain to
this.
|
| Please advise
|
|
 
Archived from groups: microsoft.public.windowsnt.registry (More info?)

also you can try using a different Registry editor, like RegmagiK from
Guzner Software www.RegMagik.com.
It has very nice features unavailable in regedit

- Boris

"Dave Patrick" <mail@Nospam.DSPatrick.com> wrote in message
news:eKKwjmipEHA.2764@TK2MSFTNGP11.phx.gbl...
> Normally it's a 16 bit tool to register dynamic-link libraries (DLLs) and
> ActiveX controls. It shouldn't be a normal running process so it very well
> could be the work of some malware.
>
> Use the Group policy editor
> %windir%\system32\gpedit.msc
> User Config\Admin Templates\System\Prevent Access To registry Editing
> Tools="Not Configured"
>
> (usually spyware/ junkware that sets this Reg_Dword decimal value to 1)
> DisableRegistryTools
> HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System
>
> Also check;
> %windir%\system32\gpedit.msc
> User Config\Admin Templates\System\
> 'Don't run specified Windows applications'
> 'Run only allowed Windows applications'
>
> --
> Regards,
>
> Dave Patrick ....Please no email replies - reply in newsgroup.
> Microsoft Certified Professional
> Microsoft MVP [Windows]
> http://www.microsoft.com/protect
>
> "Neil K" wrote:
> | Is regsvr.exe a virus? Everytime it's running, I get a popup from
Outlook
> | that says a program is trying to access my addresses. I also can't get
> into
> | my system registry because "registry editing has been disabled by your
> | administrator". I've never changed any settings that would pertain to
> this.
> |
> | Please advise
> |
> |
>
>