System 32 and Regedit

G

Guest

The System32 folder opens when I log on. I have solved this problem in the
past by deleting some entries in the appropriate registries as recommended by
Knowledge Base Article 170086 using Regedit. Now however, the when I try run
Rededit, it may pop up on my screen for just a fraction of second but then it
immediately disappears. I have a Dell 4550, running Windows XP Home Edition.
Recommendations?
 
R

Rick \Nutcase\ Rogers

Hi Mark,

The fact that regedit opens and closes right away indicates that you have a
virus, possibly Klez or Yaha. Many are known to disable the system tools
(regedit, taskmgr, msconfig). Use the emergency tools described here:
http://www.dougknox.com/xp/utils/xp_emerutils.htm

I would suggest that you download stinger from
http://vil.nai.com/vil/stinger/, then restart in Safe mode, logon as
administrator and run the file.

How to start in Safe mode:
http://www.rickrogers.org/fixes.htm#Safe mode

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org
 
D

David H. Lipman

1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend Pattern File.
http://www.trendmicro.com/download/pattern.asp

Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download Sysclean.com and place it in that directory.
Dowload the Trend Pattern File by obtaining the ZIP file.
For example; lpt238.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) Update Adaware with the latest definitions.
3) Disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode
5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) Re-enable System Restore and re-apply any System Restore preferences,
(e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) Create a new Restore point

You can also try some of the below online scanners.

BitDefender:
http://www.bitdefender.com/scan/license.php

Computer Associates:
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

DialogueScience:
http://www.antivir.ru/english/www_av/

F-Secure:
http://support.f-secure.com/enu/home/ols.shtml

Freedom Online scanner:
http://www.freedom.net/viruscenter/index.html

Kaspersky:
http://www.kaspersky.com/de/scanforvirus

McAfee:
http://www.mcafee.com/myapps/mfs/default.asp

Panda:
http://www.pandasoftware.com/activescan/

RAV
http://www.ravantivirus.com/scan/

Symantec:
http://security.symantec.com/

Trend:
http://housecall.antivirus.com
http://housecall.trendmicro.com


* * * Please report your results ! * * *

Dave



| The System32 folder opens when I log on. I have solved this problem in the
| past by deleting some entries in the appropriate registries as recommended by
| Knowledge Base Article 170086 using Regedit. Now however, the when I try run
| Rededit, it may pop up on my screen for just a fraction of second but then it
| immediately disappears. I have a Dell 4550, running Windows XP Home Edition.
| Recommendations?
 
G

Guest

You may want to try this from safemode, pressing F8 at startup, and selecting
Safemode, windows xp OS to start.
If it does not work from safemode, you may want to reboot, and press F8
again, and then chose Last Known Good Configuration, or run a system restore
back a few days before this started happening. Sounds like you may have some
File corruptoin or a virus affecting your system.
hope that helps
 
G

Guest

Dave:

I haven't tried all the on-line scans but the sysclean and adaware process
didn't help. The process seemed to find an clean up a number of things but a
couple it seemed unable to correct and in the final analysis it didn't help
my problem, I still can't get into regedit.
 
R

Rock

Mark said:
The System32 folder opens when I log on. I have solved this problem in the
past by deleting some entries in the appropriate registries as recommended by
Knowledge Base Article 170086 using Regedit. Now however, the when I try run
Rededit, it may pop up on my screen for just a fraction of second but then it
immediately disappears. I have a Dell 4550, running Windows XP Home Edition.
Recommendations?

At least three different viruses can cause this problem. Here are some
links for info:

W32.Spybot.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html

W32.Klez.Worm
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Yaha.Worm
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]
 
D

David H. Lipman

1) Download the following three items...

McAfee Stinger
http://vil.nai.com/vil/stinger/

2) Disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
3) Reboot your PC into Safe Mode
4) Using McAfee Stinger, perform a Full Scan of your platform and clean/delete any
infectors found
5) Restart your PC and perform a "final" Full Scan of your platform using both.
6) Re-enable System Restore and re-apply any System Restore preferences,
(e.g. HD space to use suggested 400 ~ 600MB),
7) Reboot your PC.
8) Create a new Restore point

* * * Please report back your results * * *

Dave






| Dave:
|
| I haven't tried all the on-line scans but the sysclean and adaware process
| didn't help. The process seemed to find an clean up a number of things but a
| couple it seemed unable to correct and in the final analysis it didn't help
| my problem, I still can't get into regedit.
|
| "David H. Lipman" wrote:
|
| > 1) Download the following three items...
| >
| > Trend Sysclean Package
| > http://www.trendmicro.com/download/dcs.asp
| >
| > Latest Trend Pattern File.
| > http://www.trendmicro.com/download/pattern.asp
| >
| > Adaware SE (free personal version v1.05)
| > http://www.lavasoftusa.com/
| >
| > Create a directory.
| > On drive "C:\"
| > (e.g., "c:\New Folder")
| > or the desktop
| > (e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")
| >
| > Download Sysclean.com and place it in that directory.
| > Dowload the Trend Pattern File by obtaining the ZIP file.
| > For example; lpt238.zip
| >
| > Extract the contents of the ZIP file and place the contents in the same directory as
| > sysclean.com.
| >
| > 2) Update Adaware with the latest definitions.
| > 3) Disable System Restore
| > http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
| > 4) Reboot your PC into Safe Mode
| > 5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
| > platform and clean/delete any infectors/parasites found.
| > (a few cycles may be needed)
| > 6) Restart your PC and perform a "final" Full Scan of your platform using both the
| > Trend Sysclean utility and Adaware
| > 7) Re-enable System Restore and re-apply any System Restore preferences,
| > (e.g. HD space to use suggested 400 ~ 600MB),
| > 8) Reboot your PC.
| > 9) Create a new Restore point
| >
| > You can also try some of the below online scanners.
| >
| > BitDefender:
| > http://www.bitdefender.com/scan/license.php
| >
| > Computer Associates:
| > http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
| >
| > DialogueScience:
| > http://www.antivir.ru/english/www_av/
| >
| > F-Secure:
| > http://support.f-secure.com/enu/home/ols.shtml
| >
| > Freedom Online scanner:
| > http://www.freedom.net/viruscenter/index.html
| >
| > Kaspersky:
| > http://www.kaspersky.com/de/scanforvirus
| >
| > McAfee:
| > http://www.mcafee.com/myapps/mfs/default.asp
| >
| > Panda:
| > http://www.pandasoftware.com/activescan/
| >
| > RAV
| > http://www.ravantivirus.com/scan/
| >
| > Symantec:
| > http://security.symantec.com/
| >
| > Trend:
| > http://housecall.antivirus.com
| > http://housecall.trendmicro.com
| >
| >
| > * * * Please report your results ! * * *
| >
| > Dave
| >
| >
| >
| > | > | The System32 folder opens when I log on. I have solved this problem in the
| > | past by deleting some entries in the appropriate registries as recommended by
| > | Knowledge Base Article 170086 using Regedit. Now however, the when I try run
| > | Rededit, it may pop up on my screen for just a fraction of second but then it
| > | immediately disappears. I have a Dell 4550, running Windows XP Home Edition.
| > | Recommendations?
| >
| >
| >
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top