[2] Task Mgr, msconfig & regedit

[Robert]

I posted a recent message about being unable to open task
mgr, msconfig & regedit. The replies I received suggested
antivirus scans, ad-aware scans & spybot scans. I've done
all 3 and was infected w/ multiple problems which I've
deleted (or quarantined?). However, I still cannot open
any of the above 3 programs. They either open briefly &
then disappear (regedit & task mgr), do not open at all
(msconfig) or state that I do not have authorization to
open (happened once trying to run regedit). To those who
provided help earlier, thank you. If anyone could provide
further help, I'd greatly appreciate it.

 

[Doug Knox MS-MVP]

You STILL have a virus. There are some that are capable of escaping detection.

Likely one of the following:

W32.Klez
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Yaha
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Spybot.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html

For additional help see www.dougknox.com, Win XP Utilities, Create Emergency Copies of Critical XP System Utilities. This small VB Program will create backup, usable copies of Task Manger, Regedit and MSConfig (named Taskmgr1.exe, Regedit.com and MSConfig1.exe) in a new folder C:\EmergencyUtil. Many virus programs will intercept these programs, based on their original file name. The modified file names, allow them to be run. Open Windows Explorer to C:\EmergencyUtil and double click the application you need. The next revision will allow you to browse for the folder you want to place the backups in.

Additionally, see the Win XP Utilities section for Startup Programs Tracker. This small utility scans your system for startup programs and running processes. It also allows you to create a log file that can be copied and pasted into a newsgroup post. The contents of the program window are also copied to the Windows Clipboard, automatically. For replies to newsgroup posts, do NOT include the Running Services, unless its absolutely necessary.