regedit disappears after 15-20 seconds

[Guest]

After a fresh install of XP Professional, a virus entered the computer with the familiar RPC error then shuts down the computer; I've been down this road before and began corrective action immediately, changing the msconfig entry for RPC; but when I tried to do the second action -removing the "blast.exe" entry from the registry, I ran into this new problem; when I launch "regedit" the window remains open for only about 15-20 seconds then disappears. The virus obviously changed some setting; other than this problem, the PC runs fine and can connect to the internet without any incident; is it possible to edit the registry without using "run-regedit"

Take care

Martino

 

[Kelly]

This only means you have more than one. And actually 15-20 seconds is a
longer time than most gain.

Emergency Msconfig, Regedit, Task Manager
http://www.dougknox.com/xp/utils/xp_emergencyutil.zip

This behavior can be caused by a virus. One of three:

W32.Spybot.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html

W32.Klez.Worm
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Yaha.Worm
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

Enable the Task Manager (Line 51)
http://www.kellys-korner-xp.com/xp_tweaks.htm

Lift Restrictions - Task Manager, Regedit and CMD (Line 275)
http://www.kellys-korner-xp.com/xp_tweaks.htm

Run all of these when permitted:

Ad-Aware
http://www.lavasoftusa.com/

Spybot
http://tinyurl.com/btf8

CWShredder (Line 313)
http://www.kellys-korner-xp.com/xp_tweaks.htm

Hijack This
http://www.spychecker.com/program/hijackthis.html

Free Online Virus Scan
http://housecall.trendmicro.com/housecall/start_corp.asp

 

[Noozer]

After a fresh install of XP Professional, a virus entered the computer

with the familiar RPC error then shuts down the computer; I've been down
this road before and began corrective action immediately, changing the
msconfig entry for RPC; but when I tried to do the second action -removing
the "blast.exe" entry from the registry, I ran into this new problem; when
I launch "regedit" the window remains open for only about 15-20 seconds then
disappears. The virus obviously changed some setting; other than this
problem, the PC runs fine and can connect to the internet without any
incident; is it possible to edit the registry without using "run-regedit"?

Do another fresh install.... You can never be 100% sure that it's cleaned
properly and you haven't got a lot of time invested in the current
installation.

 

[Kelly]

He will run into the same problem once he sets his system online. He best
combat it now and get it over with.