Sophos

Online support

Product maintenance

Contact support

Support services

Windows 95/98/Me: resetting the registry

Some viruses change the Windows 95/98/Me registry so that no executable files can be run. You can reset a registry altered in this way with RESETREG.BAT. This will enable you to follow the rest of the disinfection instructions for the virus concerned.

What to do

Download RESETREG.BAT

Restart the computer at the command prompt.

You must then restart the affected computer in a version of Safe mode that only has the command prompt. In Windows 95/98, restart in DOS mode. In Windows Me, use a startup disk.

Windows 95/98

  1. Go to Start|Shut Down.
  2. Select 'Restart the computer in DOS mode'.

Windows Me

  1. Go to Start|Settings|Control Panel.
  2. Click 'Add/Remove Programs'.
  3. Select the Startup Disk tab.
  4. Click the Create Disk button (if the virus stops you doing this, create an MS-DOS startup disk)
  5. Write-protect the startup disk
  6. Boot from this disk
  7. Select 'Minimal boot' in the Safe mode menu
  8. Remove the startup floppy disk from the drive.

Run RESETREG.BAT

At the DOS prompt

RESETREG.BAT will reset the executable file entries in the registry to the default settings.

Disinfect the virus in Safe mode

Reboot the computer in Safe mode

Windows 95/98

  1. Switch the computer off, then switch it on again.
  2. As the computer boots up, press the F8 key to get to the Safe Mode menu
  3. Select 'Safe mode'.

Windows Me

  1. Place the startup disk in the floppy disk drive
  2. Boot from this disk
  3. Select 'Safe mode' in the Safe mode menu
  4. Remove the startup floppy disk from the drive.

Follow the disinfection instructions for the virus you are removing.

If you need more information or guidance, then please contact technical support.