[Dshield] Registry

Michael Machnica brainwave at adelphia.net
Fri Aug 24 16:23:18 GMT 2001


Hello,

    There is a wealth of information about the registry at this site:

http://windows.about.com/cs/registry/index.htm

                                    Best regards to all,

                                    Michael




----- Original Message -----
From: <dshield-request at dshield.org>
To: <dshield at dshield.org>
Sent: Friday, August 24, 2001 12:01 PM
Subject: Dshield digest, Vol 1 #219 - 1 msg


> Send Dshield mailing list submissions to
> dshield at dshield.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
> http://www1.dshield.org/mailman/listinfo/dshield
> or, via email, send a message with subject or body 'help' to
> dshield-request at dshield.org
>
> You can reach the person managing the list at
> dshield-admin at dshield.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Dshield digest..."
>
>
> Today's Topics:
>
>    1. Re: door opener (RShady)
>
> --__--__--
>
> Message: 1
> Date: Fri, 24 Aug 2001 11:05:23 -0400
> From: RShady <RShady at stny.rr.com>
> To: dshield at dshield.org
> Subject: Re: [Dshield] door opener
> Reply-To: dshield at dshield.org
>
> Does anyone know how to remove unneeded stuff from a systems
> registry? Whats safe, whats not? is it ok to open the reg file in a
> text editor then save back to disk?
>
> You really have to know what you're doing when you edit the registry.  I
use ConfigSafe which backs up the
> registry on a daily basis and you can specify what in the registry you can
back up.  The cool thing about
> ConfigSafe is that you can roll back the system configuration to a
previous good configuration.  I've had to
> roll back my W2k Pro a few times.  It really saved my bacon.  It's worth
the bucks and you can find it here:
> http://www.configsafe.com/index.htm
>
> Susan Buczak wrote:
>
> > Hello.
> >
> > New here. I think code red is just a door opener for other stuff. I
> > have never received as much suspicious possible virus email as I have
> > during the past 2 months.
> >
> > I just reformatted this computer because there was way too much
> > evidence of something... so it's 5 days old.
> >
> > I found my link to windows explorer looked like this last night:
> > C:\WINDOWS\EXPLORER.EXE/n,/e,C:\
> >
> > I have an executable in here already that does a running process, but
> > I cannot find it even with hidden files showing.
> >
> > Not like theres a lot of stuff in here so it should be easy one would
> > think... my computer sends two passwords at logon to my isp. That I
> > cannot figure out yet either. They are getting in here I think via
> > email. Then they sync data out somehow. I have deleted 'mobsync'
> > twice and it showed up again last night. I do wonder I am logging in
> > twice to my isp or to someone elses??? I have been through all the
> > settings numerous times, I am not a novice, and I cannot find the
> > problem. figure I will determine what I need on this end to fully
> > protect the mailbox/system then formatt again and reload clean AGAIN
> > hopefully.
> >
> > Does anyone know if its possible for a hacker to affect the bios of a
> > system? On last format this drive seemed to remember stuff it should
> > related to internet connections. I could just be ultra paranoid about
> > that one but it sure did seem that way.
> >
> > Does anyone know how to remove unneeded stuff from a systems
> > registry? Whats safe, whats not? is it ok to open the reg file in a
> > text editor then save back to disk?
> >
> > S.
> >
> > _______________________________________________
> > Dshield mailing list
> > Dshield at dshield.org
> > To change your subscription options (or unsubscribe), see:
http://www1.dshield.org/mailman/listinfo/dshield
>
>
>
> --__--__--
>
> _______________________________________________
> Dshield mailing list
> Dshield at dshield.org
> http://www1.dshield.org/mailman/listinfo/dshield
>
>
> End of Dshield Digest




More information about the list mailing list