Virus disabling AV and firewall?

[Interferens]

So, the problem is that everytime I boot Windows (XP Pro SP2) some
appearantly strange things happen (or fail to happen):

-Norton AV 2004 is disabled
-Sygate Personal firewall is disabled
-MS Security center pops up, and doesn't remember my settings

I can start Sygate manually after boot and it seems to work. NAV
starts as well but I can't enable Auto-Protect, and Email Scanning
shows up with a red alert icon and "error" as status.

Full system scan with latest Intelligent Updater (9/19/2004) yields no
results.

So, the obvious question is: is there a virus involved, and if yes,
what could it be and how can I get rid of it? Or could there be
something other than a virus/other malicious application causing this?

 

[null]

So, the problem is that everytime I boot Windows (XP Pro SP2) some
appearantly strange things happen (or fail to happen):

-Norton AV 2004 is disabled
-Sygate Personal firewall is disabled
-MS Security center pops up, and doesn't remember my settings

I can start Sygate manually after boot and it seems to work. NAV
starts as well but I can't enable Auto-Protect, and Email Scanning
shows up with a red alert icon and "error" as status.

Full system scan with latest Intelligent Updater (9/19/2004) yields no
results.

So, the obvious question is: is there a virus involved, and if yes,
what could it be and how can I get rid of it? Or could there be
something other than a virus/other malicious application causing this?

Try scanning with the MWAV av Tookit Utility available via my web
site. MWAVSCAN might find and clean malware NAV doesn't.


Art
http://www.epix.net/~artnpeg

 

[xmp]

So, the obvious question is: is there a virus involved, and if yes,
what could it be and how can I get rid of it?

A lot of trojans and even worms use disabling. You might try Safe Mode.
Ideally you'd boot a live windows / DOS CD and scan from there.

Or could there be
something other than a virus/other malicious application causing this?

How long after SP2 did this occur?

michael

 

[Interferens]

Try scanning with the MWAV av Tookit Utility available via my web
site. MWAVSCAN might find and clean malware NAV doesn't.

MWAV didn't find anything either, but thanks for pointing me in the
direction of the toolkit, I'm sure it can come in handy in the future.

http://www.spreadfirefox.com/ - Igniting the Web

 

[Interferens]

A lot of trojans and even worms use disabling. You might try Safe Mode.
Ideally you'd boot a live windows / DOS CD and scan from there.


How long after SP2 did this occur?

michael

It started occuring just a few days ago, which was a couple of days
after I installed SP2 on this machine.
http://www.spreadfirefox.com/ - Igniting the Web