regedit disappears after 15-20 seconds

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

After a fresh install of XP Professional, a virus entered the computer with the familiar RPC error then shuts down the computer; I've been down this road before and began corrective action immediately, changing the msconfig entry for RPC; but when I tried to do the second action -removing the "blast.exe" entry from the registry, I ran into this new problem; when I launch "regedit" the window remains open for only about 15-20 seconds then disappears. The virus obviously changed some setting; other than this problem, the PC runs fine and can connect to the internet without any incident; is it possible to edit the registry without using "run-regedit"

Take care

Martino
 
This only means you have more than one. And actually 15-20 seconds is a
longer time than most gain.

Emergency Msconfig, Regedit, Task Manager
http://www.dougknox.com/xp/utils/xp_emergencyutil.zip

This behavior can be caused by a virus. One of three:

W32.Spybot.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html

W32.Klez.Worm
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Yaha.Worm
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

Enable the Task Manager (Line 51)
http://www.kellys-korner-xp.com/xp_tweaks.htm

Lift Restrictions - Task Manager, Regedit and CMD (Line 275)
http://www.kellys-korner-xp.com/xp_tweaks.htm

Run all of these when permitted:

Ad-Aware
http://www.lavasoftusa.com/

Spybot
http://tinyurl.com/btf8

CWShredder (Line 313)
http://www.kellys-korner-xp.com/xp_tweaks.htm

Hijack This
http://www.spychecker.com/program/hijackthis.html

Free Online Virus Scan
http://housecall.trendmicro.com/housecall/start_corp.asp
 
martino said:
After a fresh install of XP Professional, a virus entered the computer
Click to expand...
with the familiar RPC error then shuts down the computer; I've been down
this road before and began corrective action immediately, changing the
msconfig entry for RPC; but when I tried to do the second action -removing
the "blast.exe" entry from the registry, I ran into this new problem; when
I launch "regedit" the window remains open for only about 15-20 seconds then
disappears. The virus obviously changed some setting; other than this
problem, the PC runs fine and can connect to the internet without any
incident; is it possible to edit the registry without using "run-regedit"?

Do another fresh install.... You can never be 100% sure that it's cleaned
properly and you haven't got a lot of time invested in the current
installation.
 
He will run into the same problem once he sets his system online. He best
combat it now and get it over with.
 
Back
Top