Windows Forum

Ask something
Discussion Locked

regedit.exe on boot

0 helpful
7 replies

by n3voc 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Every time I boot Windows XP Pro SP2, regedit.exe appears in processes in task manager and takes end process twice to kill it. There are several viruses out there that do this I have found, but when I look at the information as to files the virus installs(system32/regedit.exe), and registry changes they make, none of them match up. I have run Norton scans, Ad-ware scans, etc. to no solutions. HELP!!!!

7 replies

by garion11

Turn off System Restore, Boot in safe mode, run the Norton scans and Adware scans and see if anything comes up and delete/quarantine if necessary. Also check MSConfig for "unusual" startup items. In addition check the registry settings for "unknown and unusual startup" items...

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

Delete tmp files in every user profile in Documents and Settings.

Delete Temporary Internet files in Documents and Settings

Run Hijackthis and delete any "unknown and unusual" files, extensions, BHO, etc.

If you need to identify a file or BHO (Browser Helper Object) as normal or unusual that can come up in Hijackthis...Google it and see if it is a critical necessary file or spyware.

Good luck and hope this helps.

by n3voc

As I said, I already ran all scans, they find nothing. Looking in the Run, and Run once in the REG is basic first line investigation. Did that before running the scans.

by smart031279

Have you tried Microsoft Anti-Spyware Beta??

It really digs things out that Ad-aware and Spybot Search & Destroy over sight.

I hope it helps!

by n3voc

I have increased the points on this one. I have searched the entire web ;-) and can't find a thing. Help!!!

This discussion is closed to new replies.