PC Review


Reply
Thread Tools Rate Thread

I cannot access the registry or the msconfig screen.

 
 
Frank Martin
Guest
Posts: n/a
 
      2nd Aug 2004
Recently I had occasion to go to the msconfig program by going to "run" on
the start bar and typing in "msconfig".

The program starts but then disappears after about 5 seconds.

The same thing happens to the registry.

I have run all my virus checkers but it still happens.

Can someone help me please, Frank


 
Reply With Quote
 
 
 
 
Kaylene aka Taurarian
Guest
Posts: n/a
 
      2nd Aug 2004
Some viruses actually disable your anti virus program. Perhaps an online scan -
links at the end.

http://www.dougknox.com/xp/utils/xp_emerutils.htm
Creates usable copies of REGEDIT, MSCONFIG and Task Manager

You could be infected with one of these worms:

W32.Spybot.Worm
http://securityresponse.symantec.com...ybot.worm.html
W32.Klez.Worm
http://(E-Mail Removed)
W32.Yaha.Worm
http://(E-Mail Removed)

These viruses terminate Regedit.exe and taskmgr.exe
W32.HLLW.Kefy:
http://securityresponse.symantec.com...hllw.kefy.html
W32.HLLW.Cydog@mm:
http://(E-Mail Removed)
Backdoor.IRC.Yoink.A:
http://securityresponse.symantec.com...c.yoink.a.html
Backdoor.Volac.dr:
http://securityresponse.symantec.com....volac.dr.html
W32.Kwbot.R.Worm:
http://www.symantec.com/avcenter/ven...ot.r.worm.html

These viruses delete the Regedit.exe, Regedt32.exe, Msconfig.exe, Taskmgr.exe
W32.Petch.B:
http://www.symantec.com/avcenter/ven...2.petch.b.html
W32.HLLW.Maax.B@mm:
http://(E-Mail Removed)


Downloadable McAfee AVERT Stinger:
Stinger: http://vil.nai.com/vil/stinger/
stand-alone utility used to detect and remove specific viruses. It is not a
substitute for full anti-virus protection, but rather a tool to assist
administrators and users when dealing with an infected system. Stinger utilizes
next generation scan engine technology, including process scanning, digitally
signed DAT files, and scan performance optimizations.

Perhaps an online security/virus check
Symantec
http://security.norton.com/sscv6/def...d=ie&venid=sym
Trend Micro House Call:
http://housecall.trendmicro.com/
Panda ActiveScan;
http://www.pandasoftware.com/actives..._principal.htm
McAfee FreeScan:
http://us.mcafee.com/root/mfs/default.asp
Kaspersky Labs On-line Virus Checker:
http://www.kaspersky.com/remoteviruschk.html
BitDefender Online Scan:
http://www.bitdefender.com/scan/licence.php


"Frank Martin" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Recently I had occasion to go to the msconfig program by going to "run" on
> the start bar and typing in "msconfig".
>
> The program starts but then disappears after about 5 seconds.
>
> The same thing happens to the registry.
>
> I have run all my virus checkers but it still happens.
>
> Can someone help me please, Frank
>
>


 
Reply With Quote
 
Frank Martin
Guest
Posts: n/a
 
      2nd Aug 2004
Thank you, I will try this.


"Kaylene aka Taurarian" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Some viruses actually disable your anti virus program. Perhaps an online

scan -
> links at the end.
>
> http://www.dougknox.com/xp/utils/xp_emerutils.htm
> Creates usable copies of REGEDIT, MSCONFIG and Task Manager
>
> You could be infected with one of these worms:
>
> W32.Spybot.Worm
>

http://securityresponse.symantec.com...ybot.worm.html
> W32.Klez.Worm
>

http://(E-Mail Removed)
> W32.Yaha.Worm
> http://(E-Mail Removed)
>
> These viruses terminate Regedit.exe and taskmgr.exe
> W32.HLLW.Kefy:
> http://securityresponse.symantec.com...hllw.kefy.html
> W32.HLLW.Cydog@mm:
>

http://(E-Mail Removed)
> Backdoor.IRC.Yoink.A:
>

http://securityresponse.symantec.com...c.yoink.a.html
> Backdoor.Volac.dr:
>

http://securityresponse.symantec.com....volac.dr.html
> W32.Kwbot.R.Worm:
> http://www.symantec.com/avcenter/ven...ot.r.worm.html
>
> These viruses delete the Regedit.exe, Regedt32.exe, Msconfig.exe,

Taskmgr.exe
> W32.Petch.B:
> http://www.symantec.com/avcenter/ven...2.petch.b.html
> W32.HLLW.Maax.B@mm:
>

http://(E-Mail Removed)
>
>
> Downloadable McAfee AVERT Stinger:
> Stinger: http://vil.nai.com/vil/stinger/
> stand-alone utility used to detect and remove specific viruses. It is not

a
> substitute for full anti-virus protection, but rather a tool to assist
> administrators and users when dealing with an infected system. Stinger

utilizes
> next generation scan engine technology, including process scanning,

digitally
> signed DAT files, and scan performance optimizations.
>
> Perhaps an online security/virus check
> Symantec
> http://security.norton.com/sscv6/def...d=ie&venid=sym
> Trend Micro House Call:
> http://housecall.trendmicro.com/
> Panda ActiveScan;
> http://www.pandasoftware.com/actives..._principal.htm
> McAfee FreeScan:
> http://us.mcafee.com/root/mfs/default.asp
> Kaspersky Labs On-line Virus Checker:
> http://www.kaspersky.com/remoteviruschk.html
> BitDefender Online Scan:
> http://www.bitdefender.com/scan/licence.php
>
>
> "Frank Martin" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > Recently I had occasion to go to the msconfig program by going to "run"

on
> > the start bar and typing in "msconfig".
> >
> > The program starts but then disappears after about 5 seconds.
> >
> > The same thing happens to the registry.
> >
> > I have run all my virus checkers but it still happens.
> >
> > Can someone help me please, Frank
> >
> >

>



 
Reply With Quote
 
Frank Martin
Guest
Posts: n/a
 
      3rd Aug 2004
I tried every thing you suggested and scanned my computer with the
'Freescan' fromMcAfee.

This gave the following files infected with the "Spybot.worm.gen.m"
virus/worm.

C:\WINDOWS\system32cyutgujghf.exe,
ditto\dvdmilnhjw.exe,
ditto\hvvgdzthl.exe,
ditto\messenger.exe,
ditto\norton2001.exe,
ditto\rmcukifzjr.exe,
ditto\zonealarm.exe,



I noticed from their properties that these files had been created in the
last 2 months, though WindowsXP was installed on my machine in 2002.

I deleted all these files to the recycle bin, where they now reside, though
zonealarm.exe could not be deleted, so I renamed it.

I then cold booted the computer.

On restart I found the problem fixed.

What should I do now with these deleted/renamed files?

Many thanks for your help.

Regards, Frank





"Kaylene aka Taurarian" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Some viruses actually disable your anti virus program. Perhaps an online

scan -
> links at the end.
>
> http://www.dougknox.com/xp/utils/xp_emerutils.htm
> Creates usable copies of REGEDIT, MSCONFIG and Task Manager
>
> You could be infected with one of these worms:
>
> W32.Spybot.Worm
>

http://securityresponse.symantec.com...ybot.worm.html
> W32.Klez.Worm
>

http://(E-Mail Removed)
> W32.Yaha.Worm
> http://(E-Mail Removed)
>
> These viruses terminate Regedit.exe and taskmgr.exe
> W32.HLLW.Kefy:
> http://securityresponse.symantec.com...hllw.kefy.html
> W32.HLLW.Cydog@mm:
>

http://(E-Mail Removed)
> Backdoor.IRC.Yoink.A:
>

http://securityresponse.symantec.com...c.yoink.a.html
> Backdoor.Volac.dr:
>

http://securityresponse.symantec.com....volac.dr.html
> W32.Kwbot.R.Worm:
> http://www.symantec.com/avcenter/ven...ot.r.worm.html
>
> These viruses delete the Regedit.exe, Regedt32.exe, Msconfig.exe,

Taskmgr.exe
> W32.Petch.B:
> http://www.symantec.com/avcenter/ven...2.petch.b.html
> W32.HLLW.Maax.B@mm:
>

http://(E-Mail Removed)
>
>
> Downloadable McAfee AVERT Stinger:
> Stinger: http://vil.nai.com/vil/stinger/
> stand-alone utility used to detect and remove specific viruses. It is not

a
> substitute for full anti-virus protection, but rather a tool to assist
> administrators and users when dealing with an infected system. Stinger

utilizes
> next generation scan engine technology, including process scanning,

digitally
> signed DAT files, and scan performance optimizations.
>
> Perhaps an online security/virus check
> Symantec
> http://security.norton.com/sscv6/def...d=ie&venid=sym
> Trend Micro House Call:
> http://housecall.trendmicro.com/
> Panda ActiveScan;
> http://www.pandasoftware.com/actives..._principal.htm
> McAfee FreeScan:
> http://us.mcafee.com/root/mfs/default.asp
> Kaspersky Labs On-line Virus Checker:
> http://www.kaspersky.com/remoteviruschk.html
> BitDefender Online Scan:
> http://www.bitdefender.com/scan/licence.php
>
>
> "Frank Martin" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > Recently I had occasion to go to the msconfig program by going to "run"

on
> > the start bar and typing in "msconfig".
> >
> > The program starts but then disappears after about 5 seconds.
> >
> > The same thing happens to the registry.
> >
> > I have run all my virus checkers but it still happens.
> >
> > Can someone help me please, Frank
> >
> >

>



 
Reply With Quote
 
Walter Clayton
Guest
Posts: n/a
 
      3rd Aug 2004
Delete 'em. Then install a full blown AV app, update it and let it clean
anything else you have lurking.

--
Walter Clayton - MS MVP(WinXP)
Associate Expert
http://www.microsoft.com/windowsxp/expertzone
Any technology distinguishable from magic is insufficiently advanced.
http://www.dts-l.org
http://support.microsoft.com/servicedesks/fileversion/default.asp|


"Frank Martin" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
>I tried every thing you suggested and scanned my computer with the
> 'Freescan' fromMcAfee.
>
> This gave the following files infected with the "Spybot.worm.gen.m"
> virus/worm.
>
> C:\WINDOWS\system32cyutgujghf.exe,
> ditto\dvdmilnhjw.exe,
> ditto\hvvgdzthl.exe,
> ditto\messenger.exe,
> ditto\norton2001.exe,
> ditto\rmcukifzjr.exe,
> ditto\zonealarm.exe,
>
>
>
> I noticed from their properties that these files had been created in the
> last 2 months, though WindowsXP was installed on my machine in 2002.
>
> I deleted all these files to the recycle bin, where they now reside,
> though
> zonealarm.exe could not be deleted, so I renamed it.
>
> I then cold booted the computer.
>
> On restart I found the problem fixed.
>
> What should I do now with these deleted/renamed files?
>
> Many thanks for your help.
>
> Regards, Frank
>
>
>
>
>
> "Kaylene aka Taurarian" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>> Some viruses actually disable your anti virus program. Perhaps an online

> scan -
>> links at the end.
>>
>> http://www.dougknox.com/xp/utils/xp_emerutils.htm
>> Creates usable copies of REGEDIT, MSCONFIG and Task Manager
>>
>> You could be infected with one of these worms:
>>
>> W32.Spybot.Worm
>>

> http://securityresponse.symantec.com...ybot.worm.html
>> W32.Klez.Worm
>>

> http://(E-Mail Removed)
>> W32.Yaha.Worm
>> http://(E-Mail Removed)
>>
>> These viruses terminate Regedit.exe and taskmgr.exe
>> W32.HLLW.Kefy:
>> http://securityresponse.symantec.com...hllw.kefy.html
>> W32.HLLW.Cydog@mm:
>>

> http://(E-Mail Removed)
>> Backdoor.IRC.Yoink.A:
>>

> http://securityresponse.symantec.com...c.yoink.a.html
>> Backdoor.Volac.dr:
>>

> http://securityresponse.symantec.com....volac.dr.html
>> W32.Kwbot.R.Worm:
>> http://www.symantec.com/avcenter/ven...ot.r.worm.html
>>
>> These viruses delete the Regedit.exe, Regedt32.exe, Msconfig.exe,

> Taskmgr.exe
>> W32.Petch.B:
>> http://www.symantec.com/avcenter/ven...2.petch.b.html
>> W32.HLLW.Maax.B@mm:
>>

> http://(E-Mail Removed)
>>
>>
>> Downloadable McAfee AVERT Stinger:
>> Stinger: http://vil.nai.com/vil/stinger/
>> stand-alone utility used to detect and remove specific viruses. It is not

> a
>> substitute for full anti-virus protection, but rather a tool to assist
>> administrators and users when dealing with an infected system. Stinger

> utilizes
>> next generation scan engine technology, including process scanning,

> digitally
>> signed DAT files, and scan performance optimizations.
>>
>> Perhaps an online security/virus check
>> Symantec
>> http://security.norton.com/sscv6/def...d=ie&venid=sym
>> Trend Micro House Call:
>> http://housecall.trendmicro.com/
>> Panda ActiveScan;
>> http://www.pandasoftware.com/actives..._principal.htm
>> McAfee FreeScan:
>> http://us.mcafee.com/root/mfs/default.asp
>> Kaspersky Labs On-line Virus Checker:
>> http://www.kaspersky.com/remoteviruschk.html
>> BitDefender Online Scan:
>> http://www.bitdefender.com/scan/licence.php
>>
>>
>> "Frank Martin" <(E-Mail Removed)> wrote in message
>> news:(E-Mail Removed)...
>> > Recently I had occasion to go to the msconfig program by going to "run"

> on
>> > the start bar and typing in "msconfig".
>> >
>> > The program starts but then disappears after about 5 seconds.
>> >
>> > The same thing happens to the registry.
>> >
>> > I have run all my virus checkers but it still happens.
>> >
>> > Can someone help me please, Frank
>> >
>> >

>>

>
>


 
Reply With Quote
 
Doug Knox MS-MVP
Guest
Posts: n/a
 
      3rd Aug 2004
Delete them. Particularly if you're not using ZoneAlarm as a firewall, or if you are and its still working correctly.

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"Frank Martin" <(E-Mail Removed)> wrote in message news:(E-Mail Removed)...
>I tried every thing you suggested and scanned my computer with the
> 'Freescan' fromMcAfee.
>
> This gave the following files infected with the "Spybot.worm.gen.m"
> virus/worm.
>
> C:\WINDOWS\system32cyutgujghf.exe,
> ditto\dvdmilnhjw.exe,
> ditto\hvvgdzthl.exe,
> ditto\messenger.exe,
> ditto\norton2001.exe,
> ditto\rmcukifzjr.exe,
> ditto\zonealarm.exe,
>
>
>
> I noticed from their properties that these files had been created in the
> last 2 months, though WindowsXP was installed on my machine in 2002.
>
> I deleted all these files to the recycle bin, where they now reside, though
> zonealarm.exe could not be deleted, so I renamed it.
>
> I then cold booted the computer.
>
> On restart I found the problem fixed.
>
> What should I do now with these deleted/renamed files?
>
> Many thanks for your help.
>
> Regards, Frank
>
>
>
>
>
> "Kaylene aka Taurarian" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>> Some viruses actually disable your anti virus program. Perhaps an online

> scan -
>> links at the end.
>>
>> http://www.dougknox.com/xp/utils/xp_emerutils.htm
>> Creates usable copies of REGEDIT, MSCONFIG and Task Manager
>>
>> You could be infected with one of these worms:
>>
>> W32.Spybot.Worm
>>

> http://securityresponse.symantec.com...ybot.worm.html
>> W32.Klez.Worm
>>

> http://(E-Mail Removed)
>> W32.Yaha.Worm
>> http://(E-Mail Removed)
>>
>> These viruses terminate Regedit.exe and taskmgr.exe
>> W32.HLLW.Kefy:
>> http://securityresponse.symantec.com...hllw.kefy.html
>> W32.HLLW.Cydog@mm:
>>

> http://securityresponse.symantec.com...cydog@mm..html
>> Backdoor.IRC.Yoink.A:
>>

> http://securityresponse.symantec.com...c.yoink.a.html
>> Backdoor.Volac.dr:
>>

> http://securityresponse.symantec.com...volac.dr..html
>> W32.Kwbot.R.Worm:
>> http://www.symantec.com/avcenter/ven...ot.r.worm.html
>>
>> These viruses delete the Regedit.exe, Regedt32.exe, Msconfig.exe,

> Taskmgr.exe
>> W32.Petch.B:
>> http://www.symantec.com/avcenter/ven...2.petch.b.html
>> W32.HLLW.Maax.B@mm:
>>

> http://(E-Mail Removed)
>>
>>
>> Downloadable McAfee AVERT Stinger:
>> Stinger: http://vil.nai.com/vil/stinger/
>> stand-alone utility used to detect and remove specific viruses. It is not

> a
>> substitute for full anti-virus protection, but rather a tool to assist
>> administrators and users when dealing with an infected system. Stinger

> utilizes
>> next generation scan engine technology, including process scanning,

> digitally
>> signed DAT files, and scan performance optimizations.
>>
>> Perhaps an online security/virus check
>> Symantec
>> http://security.norton.com/sscv6/def...d=ie&venid=sym
>> Trend Micro House Call:
>> http://housecall.trendmicro.com/
>> Panda ActiveScan;
>> http://www.pandasoftware.com/actives..._principal.htm
>> McAfee FreeScan:
>> http://us.mcafee.com/root/mfs/default.asp
>> Kaspersky Labs On-line Virus Checker:
>> http://www.kaspersky.com/remoteviruschk.html
>> BitDefender Online Scan:
>> http://www.bitdefender.com/scan/licence.php
>>
>>
>> "Frank Martin" <(E-Mail Removed)> wrote in message
>> news:(E-Mail Removed)...
>> > Recently I had occasion to go to the msconfig program by going to "run"

> on
>> > the start bar and typing in "msconfig".
>> >
>> > The program starts but then disappears after about 5 seconds.
>> >
>> > The same thing happens to the registry.
>> >
>> > I have run all my virus checkers but it still happens.
>> >
>> > Can someone help me please, Frank
>> >
>> >

>>

>
>

 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Cannot access registry, msconfig, task manager Justin Jeffries Windows XP Help 5 19th Jul 2004 03:10 PM
Cannot access Registry, MSCONFIG, Task Manager Justin Jeffries Windows XP Help 1 19th Jul 2004 02:05 PM
Cannot access Registry, MSCONFIG, Task Manager Justin Jeffries Windows XP Help 1 19th Jul 2004 03:40 AM
Cannot access registry, msconfig, or task manager Justin Jeffries Windows XP General 1 19th Jul 2004 02:06 AM
Remove Password from login screen / Access Registry Murtaza Windows XP General 2 7th Jun 2004 08:05 AM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 02:36 AM.