Regedit.exe get automatically recreated

[tkosel]

I have a windows xp sp3 machine that appears to have a worm or virus. It is
on a network which has the latest version of Symantec endpoint protection
installed and running on the this client. It reports no threats or risks.

However, when I try to run regedit.exe, it will not run. I downloaded and
ran xp_emegencyutil.exe from
http://www.dougknox.com/xp/utils/xp_emerutils.htm which I found in a
microsoft article. The Copy_of_Regedit.com file which it created in
c:\EmergenyUtils works fine. So, thinking simply, I decided to delete the
existing Regedit.exe file found in the c:\windows folder. (The thought was
then I would rename Copy_of_Regedit.com to Regedit.exe and everything would
be fine.)

Lo and behold, as soon as I delete the existing Regedit.exe file, it
automatically re-appears. Does anyone know what causes this to happen?

Does anyone recognize these symptoms and what should I do about the whole
issue? Thanks.

 

[Andrew E.]

I would look into kb307545 This rebuilds the registry.Or,go to run,type:cmd
In cmd type: Sfc /Scannow Once its thru,type:CHKDSK C: /F Agree to
restart,type:EXIT Restart pc.

 

[tkosel]

Thanks for your insight. Howevever, I am still mostly interested in why
regedit.exe is being automatically recreated!