DelphiFAQ Home Search:

The registry editor does not work - it closes itself!

 

comments63 comments. Current rating: 4 stars (11 votes). Leave comments and/ or rate it.

Question:

I believe to have a virus or malware on my computer and want to clean it up in the registry. But I cannot open the registry editor - the registry editor closes upon about 5 seconds to opening it. So I keep opening registry editor and every time I opened it, about 5 seconds later it closes itself.

Answer:

Many trojan horses, viruses and other malwares make changes to the registry. They may one or more of the shellopencommand keys. By changing these keys they can make themselves be executed each time that you 'open' a certain type of file e.g. if they modified the exefileshellopencommand key then the trojan will be invoked every time you start any (!) executable file.

One common trick is to disable the registry editor, so that it is more difficult for you to get rid of the trojan horse. Yes, Microsoft provides such a key in the registry - under

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System

you will find an entry DisableRegistryTools which can be 0 or 1. By default this entry does not even exist which means you are allowed to edit the registry.

Here is an installer script which you can download and have it execute and it should restore your original settings. It does not do any magic. It will simply reset the shell open command for executable files:
.exe, .com, .bat, .pif, .scr (screensavers!)
and also for .reg files (registry data files).

Further on it will re-enable editing the registry alltogether and make sure that the application associated with registry batch files (*.reg) is indeed the official registry editor and not some trojan horse.

Instructions:
  1. download this file by right-clicking on the link and save it to your desktop
  2. right-click on the file and select 'install'

It will not display any success message but your registry editor will work now again.

Note:
It is important that you right-click on the link and save the file as described. If you just click on it, it will probably open in Notepad. (You could save it from there to the desktop though.)



Content-type: text/html

Comments:

You are on page 2 of 5, other pages: 1 [2] 3 4 5
2006-05-30, 22:09:05
anonymous from United States  
I am having the same problem as the poster on 6/25/06. i have installed but still not working
2006-07-17, 20:27:46
anonymous from United States  
i have triue every thing an can't get rid of spysherif
2006-07-18, 05:16:25
anonymous from United Kingdom  
Try this url - http://www.delphifa..850.shtml

if that doesnt work try typing 'removing spy sheriff' into the search bar at the top. then follow the steps there... THEN come back to this one...
2006-08-09, 11:17:23
anonymous from United Kingdom  
rating
my laptop is infected with spyshreiif. It has so much advware,spyware and other trojans that whenever i connect to the internet , the huge amount of pop-ups dont let me go on this site and download the file to fix my registory editor. Therefore, i am using this computer to download and file and transfer it to my laptop via USB storage device.however, everytime i install it, it says 'installation failed' and my registory editor is not fixed.

help would be appreciated
2006-08-09, 11:28:28
anonymous from United Kingdom  
rating
my laptop is infected with spyshreiif. It has so much advware,spyware and other trojans that whenever i connect to the internet , the huge amount of pop-ups dont let me go on this site and download the file to fix my registory editor. Therefore, i am using this computer to download and file and transfer it to my laptop via USB storage device.however, everytime i install it, it says 'installation failed' and my registory editor is not fixed.

help would be appreciated
2006-09-17, 19:17:47
anonymous from United States  
but how do i open reg edit
2006-10-08, 23:13:49
kayla_goldsby_is@hotmail.com from Australia  
look i need help ASAP im not a computer wiz i need to get my backround and stuff back i dont know how can u please explain it in a dumb language? lol it is also making my computer incredibly slow
2006-10-15, 04:38:10
anonymous from United States  
rating
Thank you SO SO SO SO MUCH !!!!!!!!!!!!!!!!
2006-11-22, 22:12:21
carla from Venezuela  
Thank you so much! you help me SOO much thnx!
2006-11-25, 01:10:19
anonymous from United States  
this does not work for me it wont install it says install failed
2006-12-10, 10:21:11
asthadhar@gmail.com from India  
I have the same problem. I downloaded this file but even after installing, I'm not able to open regedit. I have regedt32.exe (and no regedit.exe) in my systems32 folder ( I have XP installed) . Even my Start>Run link was disabled. Somehow I have got around with the run command but my regedit is not working. Moreover my opening page leads to a clip24h(mallicious) site. This virus doesn't allow me to change my homepage as well. This all happened after I clicked a link on my Y! Messenger :( Help !!!!
2007-01-08, 08:16:28
posture.ashok@gmail.com from India  
it's not working at all i did in the way you told me plz help ?
2007-01-24, 16:48:10
anonymous from United States  
I simply went to control panel and deleted the spysherrif... then rebooted and it was gone.
2007-03-10, 23:36:59
anonymous  
Thanks a lot. That .inf really worked. Despite using the win ME standalone OS, i was getting a message 'your registry edit has been disabled by the administrator'. Now i can edit my registry.


Rahul
2007-04-02, 17:39:47
anonymous from Canada  
where is the registry
You are on page 2 of 5, other pages: 1 [2] 3 4 5

 

 

NEW: Optional: Register   Login
Email address (not necessary):

Rate as
Hide my email when showing my comment.
Please notify me once a day about new comments on this topic.
Please provide a valid email address if you select this option, or post under a registered account.
 

Show city and country
Show country only
Hide my location
You can mark text as 'quoted' by putting [quote] .. [/quote] around it.
Please type in the code:

Please do not post inappropriate pictures. Inappropriate pictures include pictures of minors and nudity.
The owner of this web site reserves the right to delete such material.

photo Add a picture: