Closes itself ackno registry

This problem is from a neighbor. Open the registry, after a second or two he closed. It is in principle the viral behavior, but is written in Windows in case anyone faced with.
I can write such a program in 5 minutes, but the malware it? In theory Yes. Help advice where to look? And malware at all? Autorun is checked - empty. AppData hell knows where to dig and what to look for.