Member Avatar for ljmora501

Hi all,

I just performed a clean install of windows xp, and immediately after the install I recieved multiple error messages. The error messages go something like this: "Your registry may be corrupted with spyware", "Corrupted windows registry". Obviously there is an issue somewhere within the registry, but can someone explain why and how it is possible to recieve these types of error messages after a clean install? Also, if someone knows of a solution to fix this problem, please get back to me, I would greatly appreciate it.

Thanks.

  • 4 Contributors
  • 7 Replies
  • 309 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by Coconut Monkey

Dani AI

Generated

Small, single-button popups right after a supposedly clean install are far more often "scare" dialogs or a newly-run program than a true, low-level registry corruption. 's suggestion to confirm that the install was actually a wiped, fresh install and 's point about the tiny OK-only dialog are both useful starting observations. The priority is to determine who created the window (a browser, a messenger-type service, or a running process) and then remove or block that creator rather than assuming the registry itself is intrinsically broken.

Recommended diagnostic and remediation steps:

  1. Isolate the machine — disconnect network and remove USB/optical media so nothing new can be dropped.
  2. Capture the dialog text and title (screen grab or note exact wording). The window title often reveals the owning program.
  3. While the popup is visible, open Task Manager and identify active or unfamiliar processes; right-click a suspicious process and view Properties to see file path and publisher. If available, use a process-inspection tool that shows the process owner and digital signature.
  4. Boot to Safe Mode; persistence only in normal mode usually points to a startup item, scheduled task or service. Inspect startup entries with msconfig or a startup-audit utility and disable unknown entries (backup first).
  5. Run an offline/bootable scanner if a running file looks suspicious or if a rootkit is suspected — scanning offline prevents malware from hiding.
  6. If the dialog appears to be browser/HTML-based, clear temporary internet files, disable scripts/active content, and reset the browser before reconnecting.

Reinstall Windows only as a last resort. If reinstalling, use trusted install media, fully wipe the disk, keep the system offline until all updates and security software are in place, and scan any backed-up files before restoring them. Back up critical data and create an image before editing the registry or removing system files — improper changes can make the system unbootable.

Recommended Answers

All 7 Replies

Member Avatar for clementine

Hi,
You may try installing the following software which may be of help. Go to download.com and look for spyware doctor and tweak now softwares. After installing both software, run them separately and see if this helps.

Member Avatar for Catweazle

Hi,

sounds to me like you THINK you performed a clean install but you really performed an 'upgrade install', loading Windows over the top of what was already there rather than wiping the drive and loading it all fresh and clean.

Check this topic for clean install info http://www.daniweb.com/techtalkforums/thread6632.html

Member Avatar for Coconut Monkey

I'm thinking another way. ;)

ljmora501, were you connected to the internet when these messages popped up? What kind of window were the message displayed in? A simple pop-up with an OK button at the bottom? Do you have any anti-spyware/virus programs running in the background that would pop up such a message?

I have the feeling these messages are nothing more than spam sent via the Messenger service.

Member Avatar for Catweazle

You may well be right! (But check that a clean install was actually, really, correctly performed :))

Member Avatar for ljmora501

I'm posotive I performed a clean install. I had two partitions and wiped both of them out prior to installing windows and formated the primary partition. The actual error messages are small in size with an "ok" button towards the bottom of the message. I'm running Norton AntiVirus so I don't see how this could be happening....would you guys recommend reintalling Windows?

Thanks much for your help.

Member Avatar for Catweazle

Download install and run the most recent versions of AdAware and Spybot Search & Destroy. (Make sure you check for updates before running them. You'll find download links amongst the stickied topics in out Viruses Spyware and Nasties forum section)

An antivirus program on its own is not enough to keep out intruders.

If those two don't find any intruders, read the instructions about HijackThis in that forum section and post a log in a new topic there for someone to check for you.

Let us know how you go after that please. The messages in themselves probably do not indicate there is something wrong with the registry. they are most likely the result of something which has surreptitiously made its way onto your system.

Member Avatar for Coconut Monkey

It just sounds like ordinary spam to me (best to have anti-spyware tools handy regardless!). Ensure you have a firewall running on your internet connection (properties of network connection, advanced tab. If you have SP2, then the Firewall item in Control Panel). To stop the messages from appearing in future, just Start -> Run -> "services.msc" and permanently disable the Messenger service (this does not affect MSN Messenger).

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.