registry editor

I need to access the registry files to eliminate a virus
that may be contained within. The problem is every time
I type regedit the window only opens for a few seconds
and then closes. I'm set up as an administrator so it
can't be that. Trying to rid myself of the
W32.Spybot.Worm.

On Fri, 1 Aug 2003 20:10:05 -0700, "Bob" <bobbram@fuse.net> wrote:

>I need to access the registry files to eliminate a virus
>that may be contained within. The problem is every time
>I type regedit the window only opens for a few seconds
>and then closes. I'm set up as an administrator so it
>can't be that. Trying to rid myself of the
>W32.Spybot.Worm.

With another virus that was going around, one could rename regedit.exe
to regedit.com and get it to load. Windows File Protection may step in
and undo the renaming so you may have to copy regedit.exe and then
rename the copy before running it.

I just tried this and double clicking the renamed regedit.com file did
bring up the registry editor. Not sure if it's enough to trick the
w32.spybot.worm but the only way to find out is to try.


Sharon F
MS MVP
[Windows XP - Shell/User]

I was tryong to open my registry editor but the registry
window would just pop open and close, is there any
setting I need to change to open this window? Please help
me out, thank you.

You may have a virus

http://www.dougknox.com/xp/utils/xp_emerutils.htm
Creates usable copies of REGEDIT, MSCONFIG and Task Manager

You could be infected with one of these worms:

W32.Spybot.Worm
http://securityresponse.symantec.com...ybot.worm.html
W32.Klez.Worm
http://securityresponse.symantec.com...ez.gen@mm.html
W32.Yaha.Worm
http://securityresponse.symantec.com...yaha.e@mm.html

These viruses terminate Regedit.exe and taskmgr.exe
W32.HLLW.Kefy:
http://securityresponse.symantec.com...hllw.kefy.html
W32.HLLW.Cydog@mm:
http://securityresponse.symantec.com....cydog@mm.html
Backdoor.IRC.Yoink.A:
http://securityresponse.symantec.com...c.yoink.a.html
Backdoor.Volac.dr:
http://securityresponse.symantec.com....volac.dr.html
W32.Kwbot.R.Worm:
http://www.symantec.com/avcenter/ven...ot.r.worm.html

These viruses delete the Regedit.exe, Regedt32.exe, Msconfig.exe, Taskmgr.exe
W32.Petch.B:
http://www.symantec.com/avcenter/ven...2.petch.b.html
W32.HLLW.Maax.B@mm:
http://securityresponse.symantec.com...maax.b@mm.html



"hernan" <anonymous@discussions.microsoft.com> wrote in message
news:18ace01c44b4e$3fffd680$a501280a@phx.gbl...

> I was tryong to open my registry editor but the registry
> window would just pop open and close, is there any
> setting I need to change to open this window? Please help
> me out, thank you.