G

Guest

Guest
Archived from groups: microsoft.public.windowsxp.basics (More info?)

Every time I run regedit, it disappears after 1 second.
Can anyone help?

TIA Jack
 
G

Guest

Guest
Archived from groups: microsoft.public.windowsxp.basics (More info?)

Hi,

Classic sign of a virus, probably Klez or Yaha. Download stinger from
http://vil.nai.com/vil/stinger/ and then restart in Safe mode:

How to start in Safe mode:
http://www.rickrogers.org/fixes.htm#Safe%20mode

You can use the emergency tools described here to assist you while you clean
up:
http://www.dougknox.com/xp/utils/xp_emerutils.htm

Update your antivirus software and run a full system scan before you
reconnect to the net.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Associate Expert - WindowsXP Expert Zone
www.microsoft.com/windowsxp/expertzone
Windows help - www.rickrogers.org

"My PC" <someone@not.here> wrote in message
news:H0hkd.30935$K7.495@news-server.bigpond.net.au...
> Every time I run regedit, it disappears after 1 second.
> Can anyone help?
>
> TIA Jack
>
>
 
G

Guest

Guest
Archived from groups: microsoft.public.windowsxp.basics (More info?)

Please follow these steps in order to clean your computer of Malware which
can include Viruses, Trojans, Worms, Spyware, Hijackers and Dialers.

Step 1:
Download Spybot and Adaware from the following locations and install them.
You should run both programs and clean up what it finds. This is to
gaurantee that you find the most malware you can installed on your computer.

Before running the scans on both programs, it is mandatory that you update
the programs. There are update options in each program when you run them.

Spybot
http://www.safer-networking.org/index.php?page=download

Ad-Aware
http://www.lavasoftusa.com/software/adaware/

If you would like to learn more about how to use these two programs with the
proper settings you can read the tutorials below:

AD-AWARE Tutorial
http://www.bleepingcomputer.com/forums/tutorial48.html

SPYBOT SEARCH AND DESTROY Tutorial
http://www.bleepingcomputer.com/forums/tutorial43.html

When you scan with both programs, fix everything that it finds.

When you are done with the scan and fixing the items. Please continue with
the next step.

Step 2:

Please run two online virus scans:

http://housecall.antivirus.com/
http://www.pandasoftware.com/activescan/

Step 3:

It is important that you run Spybot and Adaware before you proceed with this
step. Fixing enties with Hijackthis may leave behind unwanted files on your
computer if the previous step was not done first.

Create a directory on your hardrive to save HijackThis.exe. A directory
like c:\hijackthis. If you do not do this, you will not be able to use the
backup/restore features.

Download HijackThis from:

http://www.bleepingcomputer.com/files/hijackthis.php

Save this file into the directory you made previously and then run the
program. Click on the Scan button and when it is finished click on the Save
Log button. A Notepad window will open with the contents of this log. Click
on Edit then click on Select all. Then click on Edit and then Click on
Copy.

Register an account at http://www.bleepingcomputer.com and post this created
log into the Hijackthis Logs forum at that site. To do this, once you are
registered, create a new post, right click in message area and select paste
to paste the log into the post.

An expert will reply to you after reading this post. DO NOT fix any entries
unless you are absolutely sure you know what you are doing as you may cause
more damage to the system

To see a tutorial on using HijackThis you can click on the link below.

http://www.bleepingcomputer.com/forums/tutorial42.html

--
Lawrence Abrams
http://www.bleepingcomputer.com
Source for Original Content, Tutorials, and Support for the beginning
computer user.

"My PC" <someone@not.here> wrote in message
news:H0hkd.30935$K7.495@news-server.bigpond.net.au...
> Every time I run regedit, it disappears after 1 second.
> Can anyone help?
>
> TIA Jack
>
>
 
G

Guest

Guest
Archived from groups: microsoft.public.windowsxp.basics (More info?)

You have a virus.

--
----------------------------------------------------------
http://www.uscricket.com
"My PC" <someone@not.here> wrote in message news:H0hkd.30935$K7.495@news-server.bigpond.net.au...
> Every time I run regedit, it disappears after 1 second.
> Can anyone help?
>
> TIA Jack
>
>
 
G

Guest

Guest
Archived from groups: microsoft.public.windowsxp.basics (More info?)

Yes, you are right - WORM_RBOT_KZ

I got rid of it, but REGEDIT still won't work.
Going to reinstall Windows and start fresh.

Thanks everyone.


"David Candy" <.> wrote in message
news:O6OxqwuxEHA.2016@TK2MSFTNGP15.phx.gbl...
You have a virus.

--
----------------------------------------------------------
http://www.uscricket.com
"My PC" <someone@not.here> wrote in message
news:H0hkd.30935$K7.495@news-server.bigpond.net.au...
> Every time I run regedit, it disappears after 1 second.
> Can anyone help?
>
> TIA Jack
>
>
 
G

Guest

Guest
Archived from groups: microsoft.public.windowsxp.basics (More info?)

Instead of reinstalling Windows, try Start>Run then type "sfc /scannow" (no
quotes, space before '/') in the Open box.

"My PC" <someone@not.here> wrote in message
news:6TAkd.31897$K7.19857@news-server.bigpond.net.au...
> Yes, you are right - WORM_RBOT_KZ
>
> I got rid of it, but REGEDIT still won't work.
> Going to reinstall Windows and start fresh.
>
> Thanks everyone.
>
>
> "David Candy" <.> wrote in message
> news:O6OxqwuxEHA.2016@TK2MSFTNGP15.phx.gbl...
> You have a virus.
>
> --
> ----------------------------------------------------------
> http://www.uscricket.com
> "My PC" <someone@not.here> wrote in message
> news:H0hkd.30935$K7.495@news-server.bigpond.net.au...
>> Every time I run regedit, it disappears after 1 second.
>> Can anyone help?
>>
>> TIA Jack
>>
>>
>
>
 
G

Guest

Guest
Archived from groups: microsoft.public.windowsxp.basics (More info?)

If it still doesn't work, then you are still infected.

A new installation will help only if you are formatting or installing to a
new folder. If you do a repair installation, or install "over the top", then
you will still have the same problem.

Sort of like buying a new car because your fan belt broke.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Associate Expert - WindowsXP Expert Zone
www.microsoft.com/windowsxp/expertzone
Windows help - www.rickrogers.org

"My PC" <someone@not.here> wrote in message
news:6TAkd.31897$K7.19857@news-server.bigpond.net.au...
> Yes, you are right - WORM_RBOT_KZ
>
> I got rid of it, but REGEDIT still won't work.
> Going to reinstall Windows and start fresh.
>
> Thanks everyone.
>
>
> "David Candy" <.> wrote in message
> news:O6OxqwuxEHA.2016@TK2MSFTNGP15.phx.gbl...
> You have a virus.
>
> --
> ----------------------------------------------------------
> http://www.uscricket.com
> "My PC" <someone@not.here> wrote in message
> news:H0hkd.30935$K7.495@news-server.bigpond.net.au...
>> Every time I run regedit, it disappears after 1 second.
>> Can anyone help?
>>
>> TIA Jack
>>
>>
>
>
 
G

Guest

Guest
Archived from groups: microsoft.public.windowsxp.basics (More info?)

Yes, thanks, I always format c drive and then do a clean install.


"Rick "Nutcase" Rogers" <rick@mvps.org> wrote in message
news:elJgrw9xEHA.3096@tk2msftngp13.phx.gbl...
> If it still doesn't work, then you are still infected.
>
> A new installation will help only if you are formatting or installing to a
> new folder. If you do a repair installation, or install "over the top",
then
> you will still have the same problem.
>
> Sort of like buying a new car because your fan belt broke.
>
> --
> Best of Luck,
>
> Rick Rogers, aka "Nutcase" - Microsoft MVP
> http://mvp.support.microsoft.com/
> Associate Expert - WindowsXP Expert Zone
> www.microsoft.com/windowsxp/expertzone
> Windows help - www.rickrogers.org
>
> "My PC" <someone@not.here> wrote in message
> news:6TAkd.31897$K7.19857@news-server.bigpond.net.au...
> > Yes, you are right - WORM_RBOT_KZ
> >
> > I got rid of it, but REGEDIT still won't work.
> > Going to reinstall Windows and start fresh.
> >
> > Thanks everyone.
> >
> >
> > "David Candy" <.> wrote in message
> > news:O6OxqwuxEHA.2016@TK2MSFTNGP15.phx.gbl...
> > You have a virus.
> >
> > --
> > ----------------------------------------------------------
> > http://www.uscricket.com
> > "My PC" <someone@not.here> wrote in message
> > news:H0hkd.30935$K7.495@news-server.bigpond.net.au...
> >> Every time I run regedit, it disappears after 1 second.
> >> Can anyone help?
> >>
> >> TIA Jack
> >>
> >>
> >
> >
>
>