Re: Registry key not staying deleted

From: Dave Patrick (mail_at_NoSpam.DSPatrick.com)
Date: 09/01/04 

Date: Wed, 1 Sep 2004 09:26:09 -0600

Appears some process is checking the existence of the value and is
recreating it. You'll need to first kill this process. 

-- 
Regards,
Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect
"TJH" wrote:
|I have a few win2k workstations, some in a client-server
| config and some in a peer-peer config (2 different
| networks).  It was brought to my attention that these
| workstations were affected by popups/spyware.  In looking
| at them, I scanned them with our AV and Anti-spyware
| program.  Found a few items and removed them properly.  I
| also go through the registry to look at the HKLM-Software-
| Microsoft-Windows-CurrentVersion-Run key.  I found an
| entry that was definitely not a windows or approved
| program entry.  So, I deleted it.
|
| To my dismay, it reappeared when I hit the F5 (refresh)
| key in the registry editor (both regedt32 and regedit).
| No matter if I tried to delete it or change the value, it
| always reverted back.
|
| I was logged in as an admin on the local machine when
| trying to do this.  I am 99% sure this is some spyware
| garbage that has attached itself to the machine, but I
| have not run across any spyware that prevents one from
| removing the entries from the registry.
|
| I would appreciate some help on why I am unable to delete
| this particular registry entry (I had no problems removing
| other 'known' garbage entries), how to prevent this from
| happening in the future, and how to actually get rid of
| this entry.
|
|
| TIA

Relevant Pages

  • Re: Registry question
    ... RegMaid.exe Helps Clean Up the Registry ... Microsoft Visual C++, 32-bit Learning Edition, version 6.0 ... RegMaid provides information about entries that are believed to be ... server file entry cannot be found by the system. ...
    (microsoft.public.windowsxp.general)
  • Re: Microsoft Folder on Desktop since Installing Synctoy
    ... There are some entries in the listing that are not enclosed within ... Backup your registry first. ... Also note that the following entry looks incorrect. ... Microsoft MVP ...
    (microsoft.public.windowsxp.general)
  • Re: W2K send to wont allow new items
    ... This was never a problem in NT4 and certainly isn't currently in XP, ... registry key limiting how many or what kind of items are displayed on ... Microsoft recommends that you verify the following entry is present in the registry, ...
    (microsoft.public.win2000.new_user)
  • Re: how icon associated with extension?
    ... ..doc is not a good one as Microsoft has bagged it. ... However in the HKEY_CLASSES_ROOT section of the registry you'll find an ... entry for each known extension. ... the system where the icon is found. ...
    (microsoft.public.vc.mfc)
  • RE: browes problem
    ... Important This article contains information about modifying the registry. ... 256986 Description of the Microsoft Windows Registry ... Your Internet Explorer home page has been changed to a different Web site ...
    (microsoft.public.windows.inetexplorer.ie6.browser)