Applications shut down

[Jeff]

Had an issue with the Sasser worm. Was able to
successfully remove the files, however an issue has
arisen that I'm not sure has something to do with the
worm or is inherent in XP. When I attempt to run some
applications, i.e. Norton Internet Security, msconfig,
Norton Antivirus; they shut down without warning after
running for 20-30 seconds. Can anybody assist?

 

[Guest]

Task Manager, MSCONFIG, or REGEDIT disappear while opening
http://www.mvps.org/sramesh2k/ToolsQuit.htm

Emergency Msconfig, Regedit, Task Manager
http://www.dougknox.com/xp/utils/xp_emerutils.htm

http://www.dougknox.com/xp/utils/index.html



The following viruses terminate REGEDIT.EXE and
TASKMGR.EXE processes:

W32.HLLW.Kefy :
http://securityresponse.symantec.com/avcenter/venc/data/w32
..hllw.kefy.html
W32.HLLW.Cydog@mm :
http://securityresponse.symantec.com/avcenter/venc/data/w32
(e-mail address removed)
Backdoor.IRC.Yoink.A :
http://securityresponse.symantec.com/avcenter/venc/data/bac
kdoor.irc.yoink.a.html
Backdoor.Volac.dr :
http://securityresponse.symantec.com/avcenter/venc/data/bac
kdoor.volac.dr.html
W32.Kwbot.R.Worm :
http://www.symantec.com/avcenter/venc/data/w32.kwbot.r.worm
..html

W32.spybot worm disables NAV, Msconfig, Regedit and Task
Manager:
http://www.bitdefender.com/bd/site/virusinfo.php?
menu_id=1&v_id=114
http://securityresponse.symantec.com/avcenter/venc/data/w32
..spybot.worm.html
The same symptom is caused due to Klez, Yaha Viruses.
The following viruses deletes Regedit.exe, Regedt32.exe,
Msconfig.exe, Taskmgr.exe

W32.Petch.B :
http://www.symantec.com/avcenter/venc/data/w32.petch.b.html
W32.HLLW.Maax.B@mm:
http://securityresponse.symantec.com/avcenter/venc/data/w32
(e-mail address removed)

 

[Rich Barry]

Jeff, it appears that you havent removed the worm completely. Try
these sites to do a check
http://housecall.trendmicro.com/

http://safespy.net/Spyware_Hunter.htm

http://www.lavasoft.de/software/adaware/

http://spybot-spyware.com/trojan.htm

http://www.spysweeper.com/

http://www.kephyr.com/spywarescanner/

 

[Rick \Nutcase\ Rogers]

Hi,

It means you're not fully cleaned of the bugs yet, and it may be more than
just sasser. Download stinger from http://vil.nai.com/vil/stinger/ and place
it somewhere you can find it. Then reboot the system and load safe mode by
hitting F8 just as Windows begins to load. Logon as administrator, then run
the stinger file.

When finished, go to the Control Panel/System/System Restore tab and check
the box to disable it. Click apply/ok, then restart normally. Then retry
your Norton software, and immediately update it. You can also restart System
Restore at this point by reversing the earlier steps.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org