Can't access registry editor

[TheFBI]

What gives?!! I'm running XP home. I need to adjust some settings in my registry. The problem is that when I type regedit in my run box, it pops up on the screen for maybe 1 or 2 secs and then disappears.
What's going on, and how do I fix this?

-Thanx

[bludgeon]

sounds whacky, I'd reinstall.

[Fatphantom]

Check these links-

http://www.computing.net/security/ww...orum/8794.html
http://www.hls-inc.net/general/virus.htm

W32/Swen@MM modifies various registry keys and disables the execution of REGEDIT.EXE on the victim's machine.

Are you running anti virus/spyware software on your computer?

[JohnHACK]

How long did you use that WinXP before this problem occurs? If it just happen after you install your OS, I suggest you to reinstall them, or you may check your system using Norton Utilities. NU provides more features to maintains you PC.

I hope I can help...

[Und3ertak3r]

Weeeeelllllll... There are a number of reasons...

Given the above links.. first is the following still working?

Task Manager (Ctl-Alt-Del)
MSCONFIG
Your Anti-Virus (Norton. AVG, McAfee, Sophos PcCillen)??
that is besides the non working regedit..

Have you Installed any patches that Microsoft Kindly emailed you recently?

OR

Playing with the registry.. have you changed ANY setting in the Policy area..????

but the Swen/yaha/etc wormy problem is likely..


cheers

[extremez]

Some versions of Klez will disable registry editor, antivirus and taskmanager.

[scriptkiddie18]

Do a scan for everything...it should get rid of that problem plus many others you might have and im sure you do...oh yea update before scaning
peace

[extremez]

Agreed, try to scan with an updated AV, however it's klez, it's extremely difficult to make any headway against within the OS, you'll need to slave the hardrive and scan it from another machine, unless you have a dualboot.

[Und3ertak3r]

TheFBI,

How are you going with this problem, it is very good form to keep us upto date..ie progress report..

along with Klez, yaha, swen.. here is a recent contender http://securityresponse.symantec.com...yang.b@mm.html


cheers

<edit>
Don't know what you mean..

however it's klez, it's extremely difficult to make any headway against within the OS,

1/ Get removal tool form one of the AV companies..
2/ DISABLE SYSTEM RESTORE
3/ BOOT INTO SAFE MODE
4/ Run The Klez removal tool
5/ reboot system
6/ Re Run the tool or
7/ UPDATE AV DEFINITIONS AND DO FULL SYSTEM SCANN
8/ Re-Enable System Restore

Disableing System restore and attempting the removal in safe mode, be it manualy or with the aid of a removal tool is very much a standard practice..

Scanning the infected drive from a Clean OS either in the dual boot or by removing the HDD is hazardous.. I would only use it to DETECT the Infection ONLY.. the AV won't remove the Registry entries on the infected Drive, Viri like lovegate, opasrv have registry keys that enable the reinstallation over network or internet of the virus..
So Identification only.. remove by using the known proceedures..

[nihil]

Try scanning in safe mode, you have a better chance then

Cheers