Unable to delete registry key

[JPL]

I have a rogue registry key on my Windows XP SP3 PC:

HKLM\SOFTWARE\Xanthic

I have no idea where it came from; I have never heard of Xanthic.

An attempt to delete it produces the error message:

Cannnot delete Xanthic: Error while deleting key.

Xanthic has just one sub-key. On right-clicking it the following error is
reported:

Cannot open {EAC0842F-9764-03DD-A0B6-5FFFB48AD6EB}: Error while opening key

How may I remove this registry entry?

[Tom Willett[_2_]]

Did you Google for it?
http://www.google.com/#hl=en&safe=off&q=xanthic+malware&aq=0&aqi=g1&oq=Xanthic+mal&fp=1c443ffcb5a5cce1

"JPL" > wrote in message
...
:I have a rogue registry key on my Windows XP SP3 PC:
:
: HKLM\SOFTWARE\Xanthic
:
: I have no idea where it came from; I have never heard of Xanthic.
:
: An attempt to delete it produces the error message:
:
: Cannnot delete Xanthic: Error while deleting key.
:
: Xanthic has just one sub-key. On right-clicking it the following error is
: reported:
:
: Cannot open {EAC0842F-9764-03DD-A0B6-5FFFB48AD6EB}: Error while opening
key
:
: How may I remove this registry entry?

[John John - MVP[_2_]]

Click on the parent key and grant yourself the necessary permissions to
access and delete the keys. (the {EAC0842F-9764-03DD-A0B6-5FFFB48AD6EB}
key is most likely inheriting permissions from its parent).

John

JPL wrote:
> I have a rogue registry key on my Windows XP SP3 PC:
>
> HKLM\SOFTWARE\Xanthic
>
> I have no idea where it came from; I have never heard of Xanthic.
>
> An attempt to delete it produces the error message:
>
> Cannnot delete Xanthic: Error while deleting key.
>
> Xanthic has just one sub-key. On right-clicking it the following error is
> reported:
>
> Cannot open {EAC0842F-9764-03DD-A0B6-5FFFB48AD6EB}: Error while opening key
>
> How may I remove this registry entry?

[Mike]

"Tom Willett" > wrote in message
...
> Did you Google for it?
> http://www.google.com/#hl=en&safe=off&q=xanthic+malware&aq=0&aqi=g1&oq=Xanthic+mal&fp=1c443ffcb5a5cce1
>
> "JPL" > wrote in message
> ...
> :I have a rogue registry key on my Windows XP SP3 PC:
> :
> : HKLM\SOFTWARE\Xanthic
> :
> : I have no idea where it came from; I have never heard of Xanthic.
> :
> : An attempt to delete it produces the error message:
> :
> : Cannnot delete Xanthic: Error while deleting key.
> :
> : Xanthic has just one sub-key. On right-clicking it the following error
> is
> : reported:
> :
> : Cannot open {EAC0842F-9764-03DD-A0B6-5FFFB48AD6EB}: Error while opening
> key
> :
> : How may I remove this registry entry?
>
>
You should be able to get shot of it in Safe Mode.
regards Mike

[JPL]

Safe Mode did not help.

"Mike" wrote:

> "Tom Willett" > wrote in message
> ...
> > Did you Google for it?
> > http://www.google.com/#hl=en&safe=off&q=xanthic+malware&aq=0&aqi=g1&oq=Xanthic+mal&fp=1c443ffcb5a5cce1
> >
> > "JPL" > wrote in message
> > ...
> > :I have a rogue registry key on my Windows XP SP3 PC:
> > :
> > : HKLM\SOFTWARE\Xanthic
> > :
> > : I have no idea where it came from; I have never heard of Xanthic.
> > :
> > : An attempt to delete it produces the error message:
> > :
> > : Cannnot delete Xanthic: Error while deleting key.
> > :
> > : Xanthic has just one sub-key. On right-clicking it the following error
> > is
> > : reported:
> > :
> > : Cannot open {EAC0842F-9764-03DD-A0B6-5FFFB48AD6EB}: Error while opening
> > key
> > :
> > : How may I remove this registry entry?
> >
> >
> You should be able to get shot of it in Safe Mode.
> regards Mike
>
>
> .
>

[JPL]

I had already tried this; it was not the problem.

"John John - MVP" wrote:

> Click on the parent key and grant yourself the necessary permissions to
> access and delete the keys. (the {EAC0842F-9764-03DD-A0B6-5FFFB48AD6EB}
> key is most likely inheriting permissions from its parent).
>
> John
>
> JPL wrote:
> > I have a rogue registry key on my Windows XP SP3 PC:
> >
> > HKLM\SOFTWARE\Xanthic
> >
> > I have no idea where it came from; I have never heard of Xanthic.
> >
> > An attempt to delete it produces the error message:
> >
> > Cannnot delete Xanthic: Error while deleting key.
> >
> > Xanthic has just one sub-key. On right-clicking it the following error is
> > reported:
> >
> > Cannot open {EAC0842F-9764-03DD-A0B6-5FFFB48AD6EB}: Error while opening key
> >
> > How may I remove this registry entry?
> .
>

[JPL]

Tom,

Thanks.

I had of course Googled for it, but without the malware tag, and found
nothing helpful.

From your search I found a link to an article suggesting the use of
Sysinternals RegDelNull.exe, and using this (RegDellNull
HKLM\SOFTWARE\Xanthic) it took only a few seconds to remove the rogue key.

I had not realised that RegEdit is unable to process keys containing nulls.

JPL

"Tom Willett" wrote:

> Did you Google for it?
> http://www.google.com/#hl=en&safe=off&q=xanthic+malware&aq=0&aqi=g1&oq=Xanthic+mal&fp=1c443ffcb5a5cce1
>
> "JPL" > wrote in message
> ...
> :I have a rogue registry key on my Windows XP SP3 PC:
> :
> : HKLM\SOFTWARE\Xanthic
> :
> : I have no idea where it came from; I have never heard of Xanthic.
> :
> : An attempt to delete it produces the error message:
> :
> : Cannnot delete Xanthic: Error while deleting key.
> :
> : Xanthic has just one sub-key. On right-clicking it the following error is
> : reported:
> :
> : Cannot open {EAC0842F-9764-03DD-A0B6-5FFFB48AD6EB}: Error while opening
> key
> :
> : How may I remove this registry entry?
>
>
> .
>