from Start>Run > window opens for 1 sec then closes

[Fulke Greville]

Hi,
Got a bit of a wierd one which after looking around trying to see if
anyone or MS have anything on it couldnt find anything so am asking on this
list.

When I select START >Run
then either of following

msconfig OR
regedit

the window opens up andstays for about 1 second then closes, repaeting the
command gives same result.
If I try "sysedit" at run line in lieu , it stays open as it should.
Also
If I hit CTRL + ALT + DEL when I want to end a task the window only stays
open for 1 -2 seconds and closes

Any one know oif this problem and a possible fix or a url to g o to to read
about it?
regards
Fulke
***NOTE return address is ficticious please reply to newsgroup

 

[Fulke Greville]

Thanks Will ....that was fast 15 minutes flat ...great service.
Fulke
Hi

This is a posting from MVP Kelly:

**This worm disables NAV, Msconfig, Regedit and Task Manager:
http://www.bitdefender.com/bd/site/virusinfo.php?menu_id=1&v_id=114

And this one:
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html

Rename regedit.exe to regedit.com then:

Download then Merge the edit on line 251 then delete all the files mentioned
in the above link. http://www.kellys-korner-xp.com/xp_tweaks.htm

--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]**

Will

 

[Will Denny]

Glad to help, Fulke.

Will

Thanks Will ....that was fast 15 minutes flat ...great service.
Fulke
Hi

This is a posting from MVP Kelly:

**This worm disables NAV, Msconfig, Regedit and Task Manager:
http://www.bitdefender.com/bd/site/virusinfo.php?menu_id=1&v_id=114

And this one:
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html

Rename regedit.exe to regedit.com then:

Download then Merge the edit on line 251 then delete all the files mentioned
in the above link. http://www.kellys-korner-xp.com/xp_tweaks.htm

--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]**

Will

Hi,
Got a bit of a wierd one which after looking around trying to see if
anyone or MS have anything on it couldnt find anything so am asking on this
list.

When I select START >Run
then either of following
the window opens up andstays for about 1 second then closes, repaeting the
command gives same result.
If I try "sysedit" at run line in lieu , it stays open as it should.
Also
If I hit CTRL + ALT + DEL when I want to end a task the window only stays
open for 1 -2 seconds and closes

Any one know oif this problem and a possible fix or a url to g o to to read
about it?
regards
Fulke
***NOTE return address is ficticious please reply to newsgroup

 

[Will Denny]

I hope that you get the rest of your problems sorted out. Perhaps Kelly might pick up on this thread a bit later. She will be able to help you more than I can.

Will

Yes it did stuff up NAV.
I am still sorting it out.
I am having a hard time getting the reg change windows from
Kelly's site to stay on long enough to hit the yes button to actually
do the change. I think it has activated but is so quick not sure
Regedit appears to be working again but still not working on some
of the other things yet...like msconfig.
I have reinstalled NAV2003 and got that back and working.
Fulke
Hi Fulke

I'm afraid I can't help you with NAV as I don't use it. I do believe that
the 'naughty' may have disabled NAV, but I'm not certain. Have you tried
contacting Norton to see if they can help you?

Will

Will
I am rather curious on this one.
I have had NAV2003 installed from 4/7/2003
(2 days after installing Win XP)
and have been auto updating my definitions
Now when I check , the last update is 23/7/2003
(I know there was another update on 30/7/2003 because my wifes PC shows
that).
So seems to suggest that my updater wasnt working after about 29/7/2003
Any ideas as to how this "naughty" would have got past NAV2003?
I dont have any of the files mentioned in the c:\windows\system folder
namely none of the .scr or exe or pif files, so is it as you suggested
(I have hidden files and known extensions showing)
As you could gather, I am not too amused about this "naughty" getting
in especially as I have NAV2003 installed and it was scanning emails in and
out.

Glad to help, Fulke.

Will

Thanks Will ....that was fast 15 minutes flat ...great service.
Fulke
Hi

This is a posting from MVP Kelly:

**This worm disables NAV, Msconfig, Regedit and Task Manager:
http://www.bitdefender.com/bd/site/virusinfo.php?menu_id=1&v_id=114

And this one:

http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html

Rename regedit.exe to regedit.com then:

Download then Merge the edit on line 251 then delete all the files mentioned
in the above link. http://www.kellys-korner-xp.com/xp_tweaks.htm

--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]**

Will

Hi,
Got a bit of a wierd one which after looking around trying to see if
anyone or MS have anything on it couldnt find anything so am asking on
this
list.

When I select START >Run
then either of following
msconfig
OR
regedit
the window opens up andstays for about 1 second then closes, repaeting the
command gives same result.
If I try "sysedit" at run line in lieu , it stays open as it should.
Also
If I hit CTRL + ALT + DEL when I want to end a task the window only stays
open for 1 -2 seconds and closes

Any one know oif this problem and a possible fix or a url to g o to to
read
about it?
regards
Fulke
***NOTE return address is ficticious please reply to newsgroup

 

[Fulke Greville]

The culprit appears to have been (Symantecs name) W32.Spybot.worm
and virusworm was detected (after re-install of NAV2003) in a file called
PVNMOK.SCR
Does other reg entries etc like the other one.
Not sure , but appears to generally do similar things to what the one you
said.
Things have stabilised considerably after I got it detected.
Regards and thanks for your input(s)
Fulke
I hope that you get the rest of your problems sorted out. Perhaps Kelly
might pick up on this thread a bit later. She will be able to help you more
than I can.

Will

Yes it did stuff up NAV.
I am still sorting it out.
I am having a hard time getting the reg change windows from
Kelly's site to stay on long enough to hit the yes button to actually
do the change. I think it has activated but is so quick not sure
Regedit appears to be working again but still not working on some
of the other things yet...like msconfig.
I have reinstalled NAV2003 and got that back and working.
Fulke
Hi Fulke

I'm afraid I can't help you with NAV as I don't use it. I do believe that
the 'naughty' may have disabled NAV, but I'm not certain. Have you tried
contacting Norton to see if they can help you?

Will

Will
I am rather curious on this one.
I have had NAV2003 installed from 4/7/2003
(2 days after installing Win XP)
and have been auto updating my definitions
Now when I check , the last update is 23/7/2003
(I know there was another update on 30/7/2003 because my wifes PC shows
that).
So seems to suggest that my updater wasnt working after about 29/7/2003
Any ideas as to how this "naughty" would have got past NAV2003?
I dont have any of the files mentioned in the c:\windows\system folder
namely none of the .scr or exe or pif files, so is it as you suggested
(I have hidden files and known extensions showing)
As you could gather, I am not too amused about this "naughty" getting
in especially as I have NAV2003 installed and it was scanning emails in and
out.

Glad to help, Fulke.

Will

http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html

Rename regedit.exe to regedit.com then:

Download then Merge the edit on line 251 then delete all the files mentioned
in the above link. http://www.kellys-korner-xp.com/xp_tweaks.htm

--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]**

Will

Hi,
Got a bit of a wierd one which after looking around trying to see if
anyone or MS have anything on it couldnt find anything so am asking on
this
list.

When I select START >Run
then either of following
msconfig
OR
regedit
the window opens up andstays for about 1 second then closes,

repaeting
the

command gives same result.
If I try "sysedit" at run line in lieu , it stays open as it should.
Also
If I hit CTRL + ALT + DEL when I want to end a task the window only stays
open for 1 -2 seconds and closes

Any one know oif this problem and a possible fix or a url to g o to to
read
about it?
regards
Fulke
***NOTE return address is ficticious please reply to newsgroup

 

[Will Denny]

Glad you're sorted out now.

Will

The culprit appears to have been (Symantecs name) W32.Spybot.worm
and virusworm was detected (after re-install of NAV2003) in a file called
PVNMOK.SCR
Does other reg entries etc like the other one.
Not sure , but appears to generally do similar things to what the one you
said.
Things have stabilised considerably after I got it detected.
Regards and thanks for your input(s)
Fulke
I hope that you get the rest of your problems sorted out. Perhaps Kelly
might pick up on this thread a bit later. She will be able to help you more
than I can.

Will

Yes it did stuff up NAV.
I am still sorting it out.
I am having a hard time getting the reg change windows from
Kelly's site to stay on long enough to hit the yes button to actually
do the change. I think it has activated but is so quick not sure
Regedit appears to be working again but still not working on some
of the other things yet...like msconfig.
I have reinstalled NAV2003 and got that back and working.
Fulke
Hi Fulke

I'm afraid I can't help you with NAV as I don't use it. I do believe that
the 'naughty' may have disabled NAV, but I'm not certain. Have you tried
contacting Norton to see if they can help you?

Will

Will
I am rather curious on this one.
I have had NAV2003 installed from 4/7/2003
(2 days after installing Win XP)
and have been auto updating my definitions
Now when I check , the last update is 23/7/2003
(I know there was another update on 30/7/2003 because my wifes PC shows
that).
So seems to suggest that my updater wasnt working after about 29/7/2003
Any ideas as to how this "naughty" would have got past NAV2003?
I dont have any of the files mentioned in the c:\windows\system folder
namely none of the .scr or exe or pif files, so is it as you suggested
(I have hidden files and known extensions showing)
As you could gather, I am not too amused about this "naughty" getting
in especially as I have NAV2003 installed and it was scanning emails in and
out.

Glad to help, Fulke.

Will

Thanks Will ....that was fast 15 minutes flat ...great service.
Fulke
Hi

This is a posting from MVP Kelly:

**This worm disables NAV, Msconfig, Regedit and Task Manager:
http://www.bitdefender.com/bd/site/virusinfo.php?menu_id=1&v_id=114

And this one:

http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html

Rename regedit.exe to regedit.com then:

Download then Merge the edit on line 251 then delete all the files
mentioned
in the above link. http://www.kellys-korner-xp.com/xp_tweaks.htm

--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]**

Will

Hi,
Got a bit of a wierd one which after looking around trying to see if
anyone or MS have anything on it couldnt find anything so am asking on
this
list.

When I select START >Run
then either of following
msconfig
OR
regedit
the window opens up andstays for about 1 second then closes, repaeting
the
command gives same result.
If I try "sysedit" at run line in lieu , it stays open as it should.
Also
If I hit CTRL + ALT + DEL when I want to end a task the window only
stays
open for 1 -2 seconds and closes

Any one know oif this problem and a possible fix or a url to g o to to
read
about it?
regards
Fulke
***NOTE return address is ficticious please reply to newsgroup