Att. Yabba - Re: regedit, task manager open then immediately close... any ideas?

[bones@spamcrypt.com>]

Yabba ... I've run into the same snag and found a reference at Kelleys
Korner item 251 (on the right side)
http://www.kellys-korner-xp.com/xp_tweaks.htm

I dl/d the file but am reluctant to use it til I know more about why
it happened and perhaps get some additional info from Kelley.

You probably know more about this than I do so I would appreciate any
input you might have .

Let me know how it goes ...

Bones

On Fri, 01 Aug 2003 00:30:58 -0700,
(yabba) wrote:

>When I open regedit or task manager they open then immediately close. Been
>running xp for over a year and it just started happening.
>
>
>Anyone have any ideas what is causing this?
>
>Thanx for any help

[Kelly]

Hi,

Check your runkeys to see if you have either of these listed, if so either
manually follow the procedures in the write up and/or run the edit.

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr ent
Version\Run\CyberWolf

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr ent
Version\Run\Windows Kernel

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows
NT\CurrentVersion\Winlogon\System

This worm disables NAV, Msconfig, Regedit and Task Manager:
http://www.bitdefender.com/bd/site/virusinfo.php?menu_id=1&v_id=114

Rename regedit.exe to regedit.com then:

Download then Merge the edit on line 251 then delete all the files mentioned
in the above link.
http://www.kellys-korner-xp.com/xp_tweaks.htm

--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]

Troubleshooting Windows XP
http://www.kellys-korner-xp.com
http://www.kellys-korner-xp.com/xp_abc.htm
http://www.kellys-korner-xp.com/xp_tweaks.htm

Top 10 Frequently Asked Questions and Answers
http://www.kellys-korner-xp.com/top10faqs.htm



wrote:
> Yabba ... I've run into the same snag and found a reference at Kelleys
> Korner item 251 (on the right side)
> http://www.kellys-korner-xp.com/xp_tweaks.htm
>
> I dl/d the file but am reluctant to use it til I know more about why
> it happened and perhaps get some additional info from Kelley.
>
> You probably know more about this than I do so I would appreciate any
> input you might have .
>
> Let me know how it goes ...
>
> Bones
>
> On Fri, 01 Aug 2003 00:30:58 -0700,
> (yabba) wrote:
>
>> When I open regedit or task manager they open then immediately
>> close. Been running xp for over a year and it just started happening.
>>
>>
>> Anyone have any ideas what is causing this?
>>
>> Thanx for any help

[Spinner]

Kelly, there is also a new worm spreading. Trends will not detect it, but
Norton's and Mcafees are supposed to as of the last definetions.
It would be HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr ent
Version\Run\Wincfg.scr

The "Wincfg.scr" file is located in the system32 folder.
I found it on one of my systems while looking in the registry because of the
same problem, regedit,msconfig and taskmgr not working. I did a full system
scan with the newest versions of Adaware, Spybot S&D and Trends OfficeScan
all with the newest definations and none of them caught it. There is more
info here:
http://forums.techguy.org/t149985/s48ecc686eb232e78f337831a7eb91b15.html


..
"Kelly" > wrote in message
...
> Hi,
>
> Check your runkeys to see if you have either of these listed, if so either
> manually follow the procedures in the write up and/or run the edit.
>
> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr ent
> Version\Run\CyberWolf
>
> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr ent
> Version\Run\Windows Kernel
>
> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows
> NT\CurrentVersion\Winlogon\System
>
> This worm disables NAV, Msconfig, Regedit and Task Manager:
> http://www.bitdefender.com/bd/site/virusinfo.php?menu_id=1&v_id=114
>
> Rename regedit.exe to regedit.com then:
>
> Download then Merge the edit on line 251 then delete all the files
mentioned
> in the above link.
> http://www.kellys-korner-xp.com/xp_tweaks.htm
>
> --
> All the Best,
> Kelly
>
> MS-MVP Win98/XP
> [AE-Windows® XP]
>
> Troubleshooting Windows XP
> http://www.kellys-korner-xp.com
> http://www.kellys-korner-xp.com/xp_abc.htm
> http://www.kellys-korner-xp.com/xp_tweaks.htm
>
> Top 10 Frequently Asked Questions and Answers
> http://www.kellys-korner-xp.com/top10faqs.htm
>
>
>
> wrote:
> > Yabba ... I've run into the same snag and found a reference at Kelleys
> > Korner item 251 (on the right side)
> > http://www.kellys-korner-xp.com/xp_tweaks.htm
> >
> > I dl/d the file but am reluctant to use it til I know more about why
> > it happened and perhaps get some additional info from Kelley.
> >
> > You probably know more about this than I do so I would appreciate any
> > input you might have .
> >
> > Let me know how it goes ...
> >
> > Bones
> >
> > On Fri, 01 Aug 2003 00:30:58 -0700,
> > (yabba) wrote:
> >
> >> When I open regedit or task manager they open then immediately
> >> close. Been running xp for over a year and it just started happening.
> >>
> >>
> >> Anyone have any ideas what is causing this?
> >>
> >> Thanx for any help
>

[Kelly]

Thank you. Have added it. :o)

--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]

Troubleshooting Windows XP
http://www.kellys-korner-xp.com
http://www.kellys-korner-xp.com/xp_abc.htm
http://www.kellys-korner-xp.com/xp_tweaks.htm

Top 10 Frequently Asked Questions and Answers
http://www.kellys-korner-xp.com/top10faqs.htm



Spinner wrote:
> Kelly, there is also a new worm spreading. Trends will not detect it,
> but Norton's and Mcafees are supposed to as of the last definetions.
> It would be HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr ent
> Version\Run\Wincfg.scr
>
> The "Wincfg.scr" file is located in the system32 folder.
> I found it on one of my systems while looking in the registry because
> of the same problem, regedit,msconfig and taskmgr not working. I did
> a full system scan with the newest versions of Adaware, Spybot S&D
> and Trends OfficeScan all with the newest definations and none of
> them caught it. There is more info here:
> http://forums.techguy.org/t149985/s48ecc686eb232e78f337831a7eb91b15.html
>
>
> .
> "Kelly" > wrote in message
> ...
>> Hi,
>>
>> Check your runkeys to see if you have either of these listed, if so
>> either manually follow the procedures in the write up and/or run the
>> edit.
>>
>> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr ent
>> Version\Run\CyberWolf
>>
>> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr ent
>> Version\Run\Windows Kernel
>>
>> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows
>> NT\CurrentVersion\Winlogon\System
>>
>> This worm disables NAV, Msconfig, Regedit and Task Manager:
>> http://www.bitdefender.com/bd/site/virusinfo.php?menu_id=1&v_id=114
>>
>> Rename regedit.exe to regedit.com then:
>>
>> Download then Merge the edit on line 251 then delete all the files
>> mentioned in the above link.
>> http://www.kellys-korner-xp.com/xp_tweaks.htm
>>
>> --
>> All the Best,
>> Kelly
>>
>> MS-MVP Win98/XP
>> [AE-Windows® XP]
>>
>> Troubleshooting Windows XP
>> http://www.kellys-korner-xp.com
>> http://www.kellys-korner-xp.com/xp_abc.htm
>> http://www.kellys-korner-xp.com/xp_tweaks.htm
>>
>> Top 10 Frequently Asked Questions and Answers
>> http://www.kellys-korner-xp.com/top10faqs.htm
>>
>>
>>
>> wrote:
>>> Yabba ... I've run into the same snag and found a reference at
>>> Kelleys Korner item 251 (on the right side)
>>> http://www.kellys-korner-xp.com/xp_tweaks.htm
>>>
>>> I dl/d the file but am reluctant to use it til I know more about why
>>> it happened and perhaps get some additional info from Kelley.
>>>
>>> You probably know more about this than I do so I would appreciate
>>> any input you might have .
>>>
>>> Let me know how it goes ...
>>>
>>> Bones
>>>
>>> On Fri, 01 Aug 2003 00:30:58 -0700,
>>> (yabba) wrote:
>>>
>>>> When I open regedit or task manager they open then immediately
>>>> close. Been running xp for over a year and it just started
>>>> happening.
>>>>
>>>>
>>>> Anyone have any ideas what is causing this?
>>>>
>>>> Thanx for any help