Regedit screen is automatically disappearing

  • Thread starter Thread starter Yash Bhati
  • Start date Start date
Y

Yash Bhati

Now days we r facing the very abnormal behaviour of the
windows 2000 Advance server (32 bit version).
"When we type ""regedit.exe" in command box, the screen
comes but within a second it goes (Disappear)"
Therefore we r unable to edit the our registry, It's very
urgent for us. registry clean is essential for us.

If anyone can help me with this I'd really appreciate it.
Thanks in advance.
With Regards
M Yasir
 
Usually the result of spyware/ malware. These may help.

How to Perform an In-Place Upgrade of Windows 2000
http://support.microsoft.com/support/kb/articles/Q292/1/75.ASP

What an In-Place Windows 2000 Upgrade Changes and What It Does Not Change
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q306952

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect


:
| Now days we r facing the very abnormal behaviour of the
| windows 2000 Advance server (32 bit version).
| "When we type ""regedit.exe" in command box, the screen
| comes but within a second it goes (Disappear)"
| Therefore we r unable to edit the our registry, It's very
| urgent for us. registry clean is essential for us.
|
| If anyone can help me with this I'd really appreciate it.
| Thanks in advance.
| With Regards
| M Yasir
 
Thanks for prompt response.

Result of spyware/ malware scan didn't give any hint,
regarding "In-place upgrade" we can't do it becoz on our
windows server Oracle application is running, we cann't
take the risk, Pl help me how we can comeout from this
crisis .

Regards
Yasir
 
Yash said:
Thanks for prompt response.

Result of spyware/ malware scan didn't give any hint,
regarding "In-place upgrade" we can't do it becoz on our
windows server Oracle application is running, we cann't
take the risk, Pl help me how we can comeout from this
crisis .
Click to expand...
Hi

Run regmon and filemon from Sysinternals to try to find what kills
regedit.exe:

http://www.sysinternals.com/


If you are not able to find the culprit, try this:

Copy regedit.exe to e.g. myregedit.exe and see if you can run
myregedit.exe without any problems (if you can, I am pretty
sure you are infected by some worm/spyware/malware).


I suggest you run Stinger.exe to look for the most common worms:

McAfee AVERT Stinger
http://vil.nai.com/vil/stinger/

For the spyware/malware part:

Dealing with Unwanted Spyware and Parasites
http://www.mvps.org/winhelp2002/unwanted.htm

The Parasite Fight Quick Fix Protocol
http://aumha.org/a/quickfix.htm
 
Hi,
GR8, When I run stinger.exe a W32/Sdbot.worm found , The
infected c:\winnt\system32\Wnetlogin.exe\Wnetlogin.exe
file deleted by Stinger.exe automatically.

Thanks a lot, for ur help

Warm Regards
Yasir
 
Back
Top