Need an offline registry editor for a windows 98 registry

Hi,

a client just brought me this windows 98 machine with a serious problem: whenever you want to start a program it pops a message that "ctvroutestat.com could not be found... browse, cancel" and nothing can run

I found out this was caused by a worm (win32.darby.m) which had been deleted, but it put some registry entries so it is needed to run every application (including regedit).

Now I plan to place the HD in my XP machine and I need to know how I can edit its registry.

 I already tried regedt32 and loading a hive, but looks like the win98 registry is not compatible with regedt32 and failed to load.

thanks in advance.
chachoteAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

jvuzCommented:
Check with stinger:

http://vil.nai.com/vil/stinger/
0
jvuzCommented:
Do a check with HijackThis


HijackThis 1.98.2


and post the log into here:


www.hijackthis.de


It will analyze the log for you
0
Cloud Class® Course: C++ 11 Fundamentals

This course will introduce you to C++ 11 and teach you about syntax fundamentals.

JohnnyCanuckCommented:
Copy and paste the text below into notepad and save as "exe.reg".  You will need to get it onto the desktop of the affected machine (put the file on a floppy, put the floppy in the infected machine's drive, right click "My Computer" and click "open", double click the floppy drive, right click the file and select "copy", right click the desktop and select "paste").  Double click the file and click "merge".  You can also try renaming regedit.exe to regedit.com.  Both .EXE and .COM files are loaded as EXEcutables if the "MZ" signature is present, and as COMmand files otherwise, regardless of whether the file extension is .COM or .EXE. By renaming Regedit.exe to Regedit.com it can run normally, by bypassing the corrupt exe file Registry key.  If this works for you, you should be able to just merge the file from regedit.

REGEDIT4

[HKEY_CLASSES_ROOT\.exe]
"Content Type"="application/x-msdownload"
@="exefile"

[HKEY_CLASSES_ROOT\exefile]
"EditFlags"=hex:d8,07,00,00
@="Application"

[HKEY_CLASSES_ROOT\exefile\shell]
@=""

[HKEY_CLASSES_ROOT\exefile\shell\open]
@=""
"EditFlags"=hex:00,00,00,00

[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\exefile\DefaultIcon]
@="%1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.exe]
"Content Type"="application/x-msdownload"
@="exefile"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile]
"EditFlags"=hex:d8,07,00,00
@="Application"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\shell]
@=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\shell\open]
@=""
"EditFlags"=hex:00,00,00,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\shell\open\command]
@="\"%1\" %*"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\DefaultIcon]
@="%1"
0
VerbertCommented:
And if you can't get into windows and still want to edit the registry, you can use Avast! Bart CD.
It's a bootable cd often used by admins to make some changes in the registry, disable services and so on...
It helped me out adding something to the registry so windows started up again :-)
Link here : http://www.avast.com/eng/avast_bart_cd.html

You also can try to make a bootable cd yourself, but then you need the install files of windows and a registry editor and compose it together with Bart CD (tool for making bootable cd's and it's free)


0
JTCollinsCommented:
Quick question, on the 98 machine did you make a copy of regedit.exe/regedt32.exe and rename it to regedit.com/regedt32.com and try to run it?
0
MattuuggiCommented:
http://www.iolo.com/

System Mechanic works pretty good, and you can download it for free and try it for 30 days.....I have had a lot of success with it.
0
chachoteAuthor Commented:
Thanks for the quick response and all your ideas !

to JohnnyCanuck, I found this other script on my own: http://www.videosoft.net.uy/repara2.reg which has fixed the problem for me, and I tried it before I read your answer. Thanks. The copy-paste procedure was not necessary though. When you talk about editing the registry, probably you already know how to copy-paste, don't you think ? ;)

to Verbert: I can get to windows, all I couldn't do is running programs. However, I will try to check the tool in case I need it someday.

to JohnnyCanuck and JTCollins: it was no use renaming the exe files to *.com because the worm had associated the following extensions: .EXE, .REG, .SCR, .COM, .BAT o .PIF and only .REG could be re-associated to regedit.

to Mattuuggi: I will give it a try too :)

in the end, I didn't need the offline editor. So I'll ask for a refund. Sorry about that.

thanks anyway, to all of you !
0
way12goCommented:
You can use Lavasoft Reghance it's very good. It will lesten your burden and ease the way registry is accessed or modified or whatever...
0
way12goCommented:
You can use regscan in win98. If there is a good backup it will do. Otherwise try importing registry settings from a different PC excluding user settings. After that you can install and uninstall whatever programs you want to and need to and then use some registry+common bad issues fixer like CrapCleaner from [ www.ccleaner.com ]
0
way12goCommented:
You can also repair the registry by reinstalling the OS and it should fix it.
0
way12goCommented:
The windows registry consists of files like

Sam, security, system, software, NTUSER.DAT, UsrClass.dat

You should also download a complete disinfectant for the specific virus because major antivirus softwares don't reverse the trail of distruction done by the bugs. You are in safe hands if the bugs can be disinfected otherwise backing the data you want before formatting and reinstallation should be final depending upon the users discomfort and choice.
0
CetusMODCommented:
Closed, 250 points refunded.
CetusMOD
Community Support Moderator
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Operating Systems

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.