[CriticalError]

Ok well i was tryiing to find out which SID from HKEY_USERS belongs to which user, so i found this software (free-ware) and it said insert SID so i did and it gave me the username so i did it for all four accounts (including admin ME!) so when i went back in to regedit and in to HKEY_USERS all i saw was my SID and no other users SID (except system) was that software bad?

please help

thanks
Asim

[pat cooke]

Can't say for definite but you should be very wary of ANY software which manipulates the registry as you can suffer critical problems from anything being corrupted there (intentionally or not). There is a lot of good freeware out there but by definition much of it should be handled with extra care. Always run a backup of the registry before running any registry software. You could try running a system restore to try and get the registry back to where it was beforw you ran the program.

[CriticalError]

Thanks for the reply, but too bad that system restore did not complete successfully the system restore point was running from Sunday and that's the only one I could get. Still no luck in Reg-edit the software i used yesterday i think is also playing me around as well. Before i put this message topic up i got around 3 messages from Norton saying it blocked an intrusion attempt from Http. (forgot the rest, but I think it said something like malicious)So what can i do please?

found the blocking thing "Zbot malicious download" some site trys to download that to my computer!
im getting more and more WARNINGS!

(JUST THANK GOD NORTON DOING ITS JOB )


Thanks
Asim

This post has been edited by ASIM09: 04 November 2009 - 07:55 PM

[pat cooke]

Might be a good idea to run mbam - excellent free scanner and malware cleaner from here:

http://www.malwarebytes.org/mbam.php

[CriticalError]

too bad im ahead of ya lol..no already got that (malwarebytes) but thanks i solved it.......hmm for some reason that software was hiding them even thought i was admin...all i had to do is go in to C;\windows and run it from there by admin in stead of using the CMD like i do.

thanks

[amon91]

This topic is now resolved. Moved to Resolved Topics.