Error Message

  • Thread starter Thread starter Jewels
  • Start date Start date
J

Jewels

When I turn my computer on i get a error message. It says
something about sys.reg file. Does anyone know how to fix
this?
 
Hijacker.

Run MSCONFIG.exe from the Start/Run applet
If you see this:

"sys" as a process

then disable it.

You may also have an entry in your system.ini file under boot section.
That looks like this
shell=Explorer.exe regedit /s sys.reg
change it to
shell=Explorer.

There could also be a setting in your registry.

Suggest also that you download and run this tool to find out if all is
cleaned.

Go to http://www.spywareinfo.com/downloads.php#det
Download "Hijack This!" [freeware] or download direct (below):
http://www.spywareinfo.com/~merijn/files/hijackthis.zip

If you get a 404 error or Access denied, try:
http://216.180.252.218/~spywareinfo.com/downloads/tools/hijackthis.zip

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates "hijackthis.log")

Next, HijackThis | Config [button] | Misc Tools [button]
Click: Generate StartupList log [button] (generates "startuplist.txt")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, then copy and paste both files in your message.

HijackThis Quick Start Help
http://www.tomcoyote.org/hjt/


Henri Leboeuf
Web page: http://www.generation.net/~hleboeuf/index.htm
 
Please be more precise about the error message. I would suspect, though
that you have a hijacker or virus on board. I recognise the name sys.reg.

It is essential to check for spyware/hijackware/foistware.

Go to IE tools, internet options, general tab. Click on the cache settings
button and then 'view objects'. Delete anything you don't recognise. If you
are unsure, or no objects appear, for diagnosis purposes I REALLY like
BHODemon, available at http://www.definitivesolutions.com/bhodemon.htm. It
does not need installing - simply unzip and run the EXE programme. It is
very easy to use.

I find this programme is a better option than IE6's ability to turn off
"Enable third-party browser extensions (requires restart)". This disables
*all* plug-ins and makes troubleshooting very difficult.

Many people like AdAware, available at www.lavasoft.de . Make sure you keep
the signature files up to date and remember, AdAware may only remove the
current installation of spyware; it may not do anything about software that
reinstalls itself, so unless you want to get stuck in an endless loop of
hijack/cleanout/hijack/cleanout make sure you get rid of whatever is
installing the junk. See my Troubleshooting advice for information about
how to track down and get rid of spyware completely.
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot

An excellent replacement for AdAware is Spybot. Again, it is a free
programme which can be downloaded from:
http://spybot.eon.net.au/

Also scan your computer with an up-to-date virus scanner.

--
Install the latest IE cumulative patch for protection against QHost:
http://www.microsoft.com/security/security_bulletins/ms03-040.asp
More information about QHosts can be found here:
http://www.mvps.org/inetexplorer/darnit_3.htm#qhost
________________________________________
Sandi - Microsoft MVP since 1999 (IE/OE)
http://www.mvps.org/inetexplorer
 
Back
Top