regedit windows closes after 2-3 seconds

[Jarhead7236]

how do i get it to stop?

 

[UberBlue]

If Task Manager does the same thing, check this out.

 

[Jarhead7236]

yup, it does...thanks for the link...not much help but at least i ain't the only one.

 

[UberBlue]

What ever it is, I'm glad I don't have it.

Out of curriosity, are you behind a router or firewall?

 

[Jarhead7236]

i have a personal firewall installed after i did all the sp-1 updates...i hope i didn't get it from updating windows xp but that's the only thing i was downloading prior to the firewall install...i didn't use e-mail either...

 

[redduc900]

Sounds like one of the following worms...
W32.Spybot.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html

W32.Klez.Worm
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Yaha.Worm
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

 

[sentry]

speaking of registry ,,, i began with this problem first and well, ive gotten rid fo the viruses,however, i cant seem to locate the right registry location for my IE default hompage..

where in the registry can i locate the exact location so that i can change the homepage..---ive tried <currentuser/software/ms/ie/searchand urlsearch> also a few other locations..but still the same result

happy new year....

 

[mbentley]

it is a virus. i can guarantee it. the easiest way to solve this problem is to run a virus scan. i suggest this one cause it's free:
http://housecall.trendmicro.com/housecall/start_corp.asp

 

[sentry]

ive tried trendmicro..they didnt even detect it ... tried NOD32... no detection..decided to use NAV04 trilaware... they detected but somehow there was one file in the "recyclerprotect..something" folder which i cant seem to find to manualy delet...

ive been able to get rid of the viruses but that homepage **it is ****ing me off,,, im not sure if im locating the correct registry value.

when editing the registry (virus purposes) does it always have to be done through safemode..... ??/