From: Ann Marie Medlar Sent: Tuesday, April 12, 2011 8:53 AM To: jfw@xxxxxxxxxxxxx Subject: Re: How to edit the register safely with jaws. Hi a friend sent this remedy to me but unsure what system you have. I believe I might have had a virus or malware but I had a bad DLL file which caused windows to not operate correctly. Second problem I had was wehn i pressed the applications key on a highlighted file the default was search rather than open. I'll post this solution as well. Good luck. I think that the first thing you might want to do is run a full scan with an updated spyware detection and removal program. You didn't mention if you are able to get into Windows and work in that environment or not, but if not then you might need to run a scan in safe mode. If you are able to get into Windows and work in the operating system then update SuperAntiSpyware, MalwareBytes or whatever antispyware program you use and then do a full scan. Remove anything that is found by the scan. You likely should also update your antivirus program and do a scan with it. If you need to run the scans in safe mode then you will need sighted help unless you have enough sight to read the screen. Start the computer and the power on self-test will happen. Before the Windows logo appears press function key 8 until a menu appears. In the menu choose to use safe mode with networking or just safe mode if your antivirus and antispywre programs are up-to-date. You can use up or down arrow keys in the menu or click on the choice with a mouse. Windows will start in safe mode and will not load a lot of the drivers needed in normal Windows operation. While in safe mode update your antispywre and antivirus if necessary and run the scans. You can also use the system file checker utility to find out if unwanted changes have been made in Windows. Go into accessories, use a right click or application key on the command prompt choice and choose to run command prompt as an administrator. When you get to the command prompt try typing in SFC.EXE /scannow or SFC.EXE /verify. If you use SFC.EXE /Scannow the result will be that any errors or changes found will be repaired and system files will be set to their original state. If you use the verify switch instead then the result will be that the system only scans for errors. I think you probably should use the SFC.EXE /scannow command. If the command doesn't work then try changing directly to system32 and then using the command of SFC.EXE /scannow again. Change to the system32 folder if necessary by typing cd c:\windows\system32 at the command prompt and pressing enter key. The SFC.EXE /scannow might take a while to run. When the process is finished and if you are still at a command prompt then type in the word "exit" (without the quotes) followed immediately with the enter key to return to Windows. Second solution: The first method that you might want to try is to run the following command at a command prompt. 1. Use Windows key with R to bring up the Run dialog box. 2. Type the following command information exactly as follows: regsvr32 /i shell32.dll 3. Press enter key after typing the above command string of text. 4. If the command doesn't work then try typing CMD after bringing up the Run Box, which should put you at a command prompt and then try the above string of text again. After using the above command, go to your drives and see if the context menu that you get with the application key is corrected. If not, there is a registry tweak that you can use. The above method is really preferred. If you need to go into the registry, I am sure that you know if any change is accidently made that there is no retreat. You can use system restore, which sometimes will undo an unintended change but not always. You can back up the registry first as well, which is probably a good idea. Let me know if you need me to give you the steps for backing up the registry. The second method that you might want to try is using the following registry tweak: 1. Use Windows key with R to bring up the run box. As before, if the command doesn't work from the run box then try it from an actual command prompt. Although, the registry editor can usually be launched from the run dialog box. Use Windows key R to bring up the Run dialog. 2. Tyep in "regedit" without the quotes. That is r e g e d I t without spaces and press enter key. 3. Here is the path to the key to be changed: HKEY_CLASSES_ROOT\Directory\shell You can get to this point in the registry by going to the top of the tree view using CTRL+home. You should hear My Computer as the top choice. If it is not opened then right arrow to open the level. Arrow down to the HKEY_classes_root choice and use right arrow key to open the hive if it is closed. Use the letter D until you get to the Directory choice, or if you can type fairly quickly then start typing the word "directory" without quotes and you should move to it. Use right arrow key to open the level. Use the letter S until you find the word "shell" without quotes. You can type the word quickly also to move to the choice. If there is much of a hesitation between typing the characters then Windows will go to a choice starting with the last character typed instead of what you are wanting. 4. Use tab key to the list view and see if the default value is set to None. If not then press enter on the line that says "default value" and change the value to "none" without the quotes. 5. Close the registry by using Alt+f4. There are other possibilities but I think the problem you are having should be cleared up by using the first method above. ----- Original Message ----- From: Dave Durber To: jfw@xxxxxxxxxxxxx Sent: Tuesday, April 12, 2011 7:35 AM Subject: Re: How to edit the register safely with jaws. Yadiel: You could try restoring your computer to a time and date prior to Sunday. The only difficulty wit this idea is that you have no idea when your computer became infected. My next suggestion is that you use a program such as SuperAntispyware, to get rid of any spyware, spamware and malware from your computer. My last suggestion is that you use a program such as CCleaner, to get rid of unwanted files, such as, temporary files temporary internet files and use the registry part of the program to clean up the Windows registry. HTH Sincerely: Dave Durber ----- Original Message ----- From: Yadiel Sotomayor To: jfw@xxxxxxxxxxxxx Sent: Tuesday, April 12, 2011 6:56 AM Subject: How to edit the register safely with jaws. Hello list:' My subject says it all. I wwant to delete some anoying regestry keys on my system and I need hints and ideas on how it works, what I should I do and how should I do it using jaws. The reason I want to delete some registry keys is because on sunday my computer was infected yet again (first time since I have avast though). Apparently my anti-virus did not picked it up. But thankfully I did. It was one of those little malwares that enter your system and puts the following message on your computer "your anti-virus program is out of date, click here to download the latest version". This of course struck me as odd since just a few seconds before my anti-virus--avast--said "virus database has been updated". Of course I did not clicked on the link. What I did on the following days is to technical and doesn't bring much to the subject. But the short story is that I found the little creature and I deleted all of its components except the registery keys. According to a host of internet and written manuals on virus prevention and destruction, one of the most important things one must do is to delete the registry keys. So, any ideas on what to do? Thanks for any help. Yadiel J. Sotomayor E-MAIL: yadosotomayor@xxxxxxxxxxx Yadiel J. Sotomayor E-MAIL: yadosotomayor@xxxxxxxxxxx