regedit.exe

Hi,
Is regedit.exe safe to let through my firewall?
Thanks,
Fangy.

 

Why is regedit requesting internet access? This could possibly the one of the baddies that duplicates regedit.exe. To rule this out, follow the below:

http://www.majorgeeks.com/images/grenade.gif Download HijackThis 1.99.1

http://www.majorgeeks.com/images/grenade.gif Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

http://www.majorgeeks.com/images/grenade.gif Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the ZIP file as your backups will not be safely stored.

http://www.majorgeeks.com/images/grenade.gifBefore running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

http://www.majorgeeks.com/images/grenade.gifRun HijackThis and save your log file.

http://www.majorgeeks.com/images/grenade.gif Post your log as an ATTACHMENT to your next post. (Do NOT copy/paste the log into your post as it will be removed).

http://www.majorgeeks.com/images/grenade.gifNeed help with HJT? See this thread: NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting

 

I've attached a Hijack This log, In your tutorial it only goes up to 022. In my log it goes up to 023, is this ok?
Thanks for the help,
Fangy.

 

Yes, its okay the O23 entries are Services used by Windows.

Your HJT log is clean, I dont see any problems. Does your firewall give you any file information as in the location?

 

The only thing i can find in my Firewall log is, file name..C:\Windows\regedit.exe, version..5.1.2600.21..I didn't allow it to connect and it hasn't asked again, If it does should I allow it?
Thanks again for your help,
Fangy.

 

Okay! That is the legit file. If it should request access again I would think it would be ok to grant access as this is a legit file.

 

Thank You.

 

Your Welcome!