[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 955
  • Last Modified:

can't run regedit or cmd

I too cannot run regedit or cmd
Desktop goes blank for a second, then refreshes
Noticed that several programs that normally sit in system tray aren't starting, but can be manually started.  This includes Norton Security.
I've run a boatload of registry cleaners and virus scanners - everything is clean
No policies are enabled
I found a 3rd party regeditor that works.  Using that, I found nothing in the way of
DisableRegistryTools or DisableCMD
Previous post regarding this subject concluded reload the OS - not a good option
0
novaguy
Asked:
novaguy
1 Solution
 
Dhiraj MuthaCommented:
Try the following:

1) Run Combofix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
2) If no luck, try MalwareBytes: http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?part=dl-10804572&subj=dl&tag=button 
3) If no luck, try running SFC: Go to Start > Run and type 'Sfc /scannow' --- This will require the XP CD with you
4) If no luck, Then try repairing the OS.
0
 
madzantaCommented:
I assume you can't run them from" c:\<windir>\system32\" either, correct?
0
 
fluctoCommented:
There's an as-yet unrecognized virus/malware that grabs the "aux" entry under

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

or in some cases adds an aux2=

The malware entry will generally be a random file in your \windows directory

the aux entry should be C:\windows\system32\wdmaud.drv or simply wdmaud.drv

to gain access to the registry, press ctrl+del, run task manager, kill the process for windows explorer, then use the task manager "run" option to run "regedit" (you'll be able to run cmd at this point too)

fix the registry entry, make sure you find and delete the malware file too.  You may well experience other issues but at least this should kill the malware.
0
 
novaguyAuthor Commented:
combofix fix did the trick
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now