G
Guest
when I start regedit, I got 1 second a black window and then it's over
Can anybody help me to solve this problem
Can anybody help me to solve this problem
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an alternative browser.
You should upgrade or use an alternative browser.
J
John Bell
Try regedit32 from the run window if using XP
John
John
D
David H. Lipman
From: "Wim Frencken" <Wim (e-mail address removed)>
| when I start regedit, I got 1 second a black window and then it's over
| Can anybody help me to solve this problem
You could be infected with a virus. There are viruses that are known to to kill the
regedit.exe process if started.
Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe
It is a self-extracting ZIP file that contains the Kixtart Script Interpreter {
http://kixtart.org Kixtart is CareWare } 4 batch files, 6 Kixtart scripts, one Link
(.LNK) file, a PDF instruction file and two utilities; UNZIP.EXE and WGET.EXE. It will
simplify the process of using; Sophos, Trend, Kaspersky and McAfee Anti Virus Command
Line Scanners to remove viruses, Trojans and various other malware.
C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.
You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.
When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm
To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close
Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }
NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.
* * * Please report back your results * * *
| when I start regedit, I got 1 second a black window and then it's over
| Can anybody help me to solve this problem
You could be infected with a virus. There are viruses that are known to to kill the
regedit.exe process if started.
Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe
It is a self-extracting ZIP file that contains the Kixtart Script Interpreter {
http://kixtart.org Kixtart is CareWare } 4 batch files, 6 Kixtart scripts, one Link
(.LNK) file, a PDF instruction file and two utilities; UNZIP.EXE and WGET.EXE. It will
simplify the process of using; Sophos, Trend, Kaspersky and McAfee Anti Virus Command
Line Scanners to remove viruses, Trojans and various other malware.
C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.
You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.
When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm
To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close
Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }
NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.
* * * Please report back your results * * *
N
Nepatsfan
in message
Try the following test:
Go to Start - Run and enter regedit.exe in the Open box.
If the Registry editor opens, then you probably have been
infected with some type of virus or trojan which has placed
files on your computer designed to prevent you from running a
number of Windows utilities. Search your hard drive for the
following files: regedit.com, taskmgr.com and cmd.com. The
presence of those file would be an indication that your system
is infected. Update and run your antivirus software. If nothing
is detected try some of the online scanners:
Run both the AntiVirus and the AntiSpyware scan on this site:
http://housecall.trendmicro.com/
Click on the "Scan your PC button" while holding down the CTRL
key (to override any popup stoppers):
http://www.pandasoftware.com/products/activescan/com/activescan_principal.htm
McAfee FreeScan
http://us.mcafee.com/root/mfs/default.asp?WWW_URL=www.mcafee.com/myapps/mfs/default.asp
Symantec Security Check
http://security.symantec.com/sscv6/default.asp?productid=symhome&langid=ie&venid=sym
If that's not the problem, open up a command prompt window from
the Start menu and try to run regedit.exe from there. If it
works, then you have a problem with your Path Environmental
Variable.
Good luck
Nepatsfan
when I start regedit, I got 1 second a black window and then
it's over Can anybody help me to solve this problem
Try the following test:
Go to Start - Run and enter regedit.exe in the Open box.
If the Registry editor opens, then you probably have been
infected with some type of virus or trojan which has placed
files on your computer designed to prevent you from running a
number of Windows utilities. Search your hard drive for the
following files: regedit.com, taskmgr.com and cmd.com. The
presence of those file would be an indication that your system
is infected. Update and run your antivirus software. If nothing
is detected try some of the online scanners:
Run both the AntiVirus and the AntiSpyware scan on this site:
http://housecall.trendmicro.com/
Click on the "Scan your PC button" while holding down the CTRL
key (to override any popup stoppers):
http://www.pandasoftware.com/products/activescan/com/activescan_principal.htm
McAfee FreeScan
http://us.mcafee.com/root/mfs/default.asp?WWW_URL=www.mcafee.com/myapps/mfs/default.asp
Symantec Security Check
http://security.symantec.com/sscv6/default.asp?productid=symhome&langid=ie&venid=sym
If that's not the problem, open up a command prompt window from
the Start menu and try to run regedit.exe from there. If it
works, then you have a problem with your Path Environmental
Variable.
Good luck
Nepatsfan
W
Wesley Vogel
You have a virus/trojan/worm.
regedit.exe will not open a command prompt, but regedit.com will.
regedit.com is *NOT* an XP file, it's added by a trojan/worm/virus.
Update your antivirus software and run a complete scan.
Also Known As: W32.Alcan.A, Win32.Alcan.A [Computer Associates],
P2P-Worm.Win32.Alcan.a [Kaspersky Lab], W32/Alcan.worm!p2p [McAfee],
W32/Alcra-A [Sophos], WORM_ALCAN.A [Trend Micro]
[[This worm drops the legitimate file compression DLL, BSZIP.DLL in the
Windows system folder. It does this so it can compress itself. It also drops
the following files in the Windows system folder:
CMD.COM
NETSTAT.COM
PING.COM
REGEDIT.COM
TASKKILL.COM
TASKLIST.COM
TRACERT.COM
These files contain the string MZ so that this worm can disable the
following Windows tool applications:
CMD.EXE
NETSTAT.EXE
PING.EXE
REGEDIT.EXE
TASKKILL.EXE
TASKLIST.EXE
TRACERT.EXE ]]
From...
WORM_ALCAN.A - Technical details
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_ALCAN.A&VSect=T
Symantec Security Response - W32.Alcra.A
http://securityresponse.symantec.com/avcenter/venc/data/w32.alcra.a.html
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
In
regedit.exe will not open a command prompt, but regedit.com will.
regedit.com is *NOT* an XP file, it's added by a trojan/worm/virus.
Update your antivirus software and run a complete scan.
Also Known As: W32.Alcan.A, Win32.Alcan.A [Computer Associates],
P2P-Worm.Win32.Alcan.a [Kaspersky Lab], W32/Alcan.worm!p2p [McAfee],
W32/Alcra-A [Sophos], WORM_ALCAN.A [Trend Micro]
[[This worm drops the legitimate file compression DLL, BSZIP.DLL in the
Windows system folder. It does this so it can compress itself. It also drops
the following files in the Windows system folder:
CMD.COM
NETSTAT.COM
PING.COM
REGEDIT.COM
TASKKILL.COM
TASKLIST.COM
TRACERT.COM
These files contain the string MZ so that this worm can disable the
following Windows tool applications:
CMD.EXE
NETSTAT.EXE
PING.EXE
REGEDIT.EXE
TASKKILL.EXE
TASKLIST.EXE
TRACERT.EXE ]]
From...
WORM_ALCAN.A - Technical details
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_ALCAN.A&VSect=T
Symantec Security Response - W32.Alcra.A
http://securityresponse.symantec.com/avcenter/venc/data/w32.alcra.a.html
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
In
B
Bruce Chambers
John said:Try regedit32 from the run window if using XP
John
There's no such file in WinXP, or any other version of Windows that
I've ever seen, for that matter.
--
Bruce Chambers
Help us help you:
You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH
B
Bruce Chambers
Wim said:when I start regedit, I got 1 second a black window and then it's over
Can anybody help me to solve this problem
The type of behavior you describe is typical behavior of more than
one virus/worm, the three below being the most common:
W32.Klez
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]
W32.Yaha
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]
W32.Spybot.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html
Because many of the newer viruses and worms, such as the Spybot
mentioned above, can disable antivirus applications whose definitions
aren't kept up-to-date, try using one or more of the free on-line
scanners to double-check your system.
Trend Micro - Free online virus Scan
http://housecall.trendmicro.com/
McAfee Security - FreeScan
http://www.mcafee.com/myapps/mfs/default.asp
Symantec Security Check
http://security.symantec.com/ssc/home.asp
Panda ActiveScan - Free online scanner
http://www.pandasoftware.com/activescan/com/activescan_principal.htm
Computer Associates:
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
DialogueScience:
http://www.antivir.ru/english/www_av/
F-Secure:
http://support.f-secure.com/enu/home/ols.shtml
BitDefender
http://www.bitdefender.com/scan/license.php
Freedom Online scanner
http://www.freedom.net/viruscenter/index.html
--
Bruce Chambers
Help us help you:
You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH
R
Richard in AZ
Because of the limit of 8 character file names for "non-windows"
applications, the files are:
regedit.exe and
regedt32.exe note the lack of the letter "i" in the second one.
either one will work.
applications, the files are:
regedit.exe and
regedt32.exe note the lack of the letter "i" in the second one.
either one will work.
W
Wesley Vogel
[[Regedt32.exe
In Windows XP and Windows Server 2003, Regedt32.exe is a small
program that just runs Regedit.exe. ]]
Differences Between Regedit.exe and Regedt32.exe
http://support.microsoft.com/default.aspx?scid=kb;en-us;141377
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
In
In Windows XP and Windows Server 2003, Regedt32.exe is a small
program that just runs Regedit.exe. ]]
Differences Between Regedit.exe and Regedt32.exe
http://support.microsoft.com/default.aspx?scid=kb;en-us;141377
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
In