MSCONFIG and REGEDIT don't work!!

[Bill]

Hi.

When I try accessing msconfig or regedit through Start, Run, (command),
nothing happens. I ran SpyBot S&D and after that, regedit started to come up
but it only stays for about 2 seconds. Msconfig, on the other hand, doesn't
start up at all. I then ran Norton AV, but it found no threats. After that,
I tried "sfc /scannow" and even after its completion, regedit and msconfig
won't work.

Can anyone help me solve this problem?

Thanks!

 

[Doug Knox MS-MVP]

You have a virus. Likely one of the following:

W32.Klez
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Yaha
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Spybot.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html

For additional help see www.dougknox.com, Win XP Utilities, Create Emergency Copies of Critical XP System Utilities. This small VB Program will create backup, usable copies of Task Manger, Regedit and MSConfig (named Taskmgr1.exe, Regedit.com and MSConfig1.exe) in a new folder C:\EmergencyUtil. Many virus programs will intercept these programs, based on their original file name. The modified file names, allow them to be run. Open Windows Explorer to C:\EmergencyUtil and double click the application you need. The next revision will allow you to browse for the folder you want to place the backups in.

Additionally, see the Win XP Utilities section for Startup Programs Tracker. This small utility scans your system for startup programs and running processes. It also allows you to create a log file that can be copied and pasted into a newsgroup post. The contents of the program window are also copied to the Windows Clipboard, automatically. For replies to newsgroup posts, do NOT include the Running Services, unless its absolutely necessary.

 

[Bruce Chambers]

Greetings --

The type of behavior you describe, which also often applies to
Taskmgr.exe and MSConfig.exe, is typical behavior of more than one
virus/worm, the three below being the most common:

W32.Klez
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Yaha
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Spybot.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html


Because many of the newer viruses and worms, such as the
Spybot mentioned above, can disable antivirus applications whose
definitions aren't kept up-to-date, try using one or more of the free
on-line scanners to double-check your system.

Trend Micro - Free online virus Scan
http://housecall.trendmicro.com/

McAfee Security - FreeScan
http://www.mcafee.com/myapps/mfs/default.asp

Symantec Security Check
http://security.symantec.com/ssc/home.asp


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

 

[Bill]

I ran a couple of those virus checkers that you provided, but they found
nothing. Actually, the HouseCall one found some spybot related, but it
cleaned it. After that, I tried regedit and msconfig, and none of them work.
If infact it still is a virus problem, would a repair install of XP fix the
problem?

Thank you.