PCTech Home 

Want More Tips, Sign Up Today!


Follow us on Facebook

PCTech  >>  General  >>  Cmd Prompt and Regedit restarts Explorer.exe automatically

 Cmd Prompt and Regedit restarts Explorer.exe automatically

Posted: 4/2/2009
Command Prompt (cmd) and Regedit.exe restarts or crashes Explorer.exe Automatically and Google.com randomly redirects to other websites. 
1. Rename your regedit.exe located in c:\windows to a file like pctech.exe then double click and open your registry.
2. Browse to the following location.  HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32
3. Copy the path of the key like in this example the viral file is called: dfxu.igg
4. Click start then go to run and paste the path and click ok. 
5. You should see the file listed there.  If not you may have to turn on hidden files.
6. With this information we then used a tool called Avenger.exe or Hijackthis to delete the file on reboot. 
Hijackthis screen shot:
Open hijackthis run system scan then click config (bottom right)
Choose the tab misc Tools on top.
Choose delete a file on reboot
Click open

It will tell you that this file will be deleted on next reboot. Click Yes or ok and your system will reboot.
This took care of it, now command prompt and regedit edit open fine.
 Post Id: 31

 RE: Cmd Prompt and Regedit restarts Explorer.exe automatically

Posted: 4/22/2009
Copy the path C:\windows\system32\...\ and then open up your run command. In XP click the start button and then goto Run. Paste that path in and click ok. Then the files showed up for me to delete with a tool like avenger or hijackthis. It's almost acting like a rootkit hiding it self from the operating system.
 Post Id: 34

 RE: Cmd Prompt and Regedit restarts Explorer.exe automatically

Posted: 4/25/2009
That error about limited connectivity usually indicates there's a problem with winsock.
If you have Windows XP with SP2 Installed use this command at the start run command: netsh winsock reset
Then reboot/restart your computer.
If that doesn't work you can also try this microsoft article: http://support.microsoft.com/default.aspx?scid=kb;en-us;811259
Sometimes there are additional rootkits that will block your access too. Let me know if that works.
 Post Id: 37

You're welcome to reprint or republish these articles on your website and in your e-newsletter free of charge, provided that you don't change the article in any way and you include the byline (including a link to our website)
In doing so you agree to indeminfy PCTech and its directors, officers, employees, and agents from and against all losses, claims, damages, and liabilities that arise out of their use.

Article provided by PCTech Computer Repair Topics

Home  |   Business Computer Repair  |   Security  |   Networking  |   Web Design  |   Computer Repair  |   Computer Help  |   Consultations  |   Privacy Policy  |   Contact us