cannot start msconfig, task mgr, regedit,...

[ashkaan57]

Hi,
I cannot start MSCONFIG or Task Manager or regedit. The windows for
these applications open and immidiately close. I have run ad removal
and done a virus scan but found nothing.

TIA.

 

[Bob I]

Try again in Safe mode so the malware doesn't get a chance to hide.

 

[PA Bear]

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/data/tshoot.htm
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine.blogspot.com/

 

[Guest]

It sounds like a virus to me. I'm not ignoring the fact that you ran a scan,
but I've seen this issue before. Close all open programs and open the task
manager; click the processes tab. Go to www.processlibrary.com and look up
the processes that are running. If any of them turn out to be malicious, end
them. Then update your antivirus and spyware definitions and scan again. Hope
this helps.

 

[Doug Knox MS-MVP]

You have a virus. Likely one of the following, or a variant:

W32.Klez
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Yaha
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Spybot.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html

For additional help see www.dougknox.com, Win XP Utilities, Create Emergency Copies of Critical XP System Utilities. This small VB Program will create backup, usable copies of Task Manger, Regedit and MSConfig (named Copy_of_Taskmgr.exe, Copy_of_Regedit.com and Copy_of_MSConfig.exe) in a new folder C:\EmergencyUtil. Many virus programs will intercept these programs, based on their original file name. The modified file names, allow them to be run. Open Windows Explorer to C:\EmergencyUtil and double click the application you need. The next revision will allow you to browse for the folder you want to place the backups in.

Additionally, see the Win XP Utilities section for Startup Programs Tracker. This small utility scans your system for startup programs and running processes. It also allows you to create a log file that can be copied and pasted into a newsgroup post. The contents of the program window are also copied to the Windows Clipboard, automatically. For replies to newsgroup posts, do NOT include the Running Services, unless its absolutely necessary.

 

[Richard Urban]

You may have found nothing but you are still infected. Do as PA Bear
suggests.

--
Regards,

Richard Urban

aka Crusty (-: Old B@stard

If you knew as much as you think you know,
You would realize that you don't know what you thought you knew!

 

[Bruce Chambers]

Hi,
I cannot start MSCONFIG or Task Manager or regedit. The windows for
these applications open and immidiately close. I have run ad removal
and done a virus scan but found nothing.

TIA.

The type of behavior you describe is typical behavior of more than
one virus/worm, the three below being the most common:

W32.Klez
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Yaha
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Spybot.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html

Because many of the newer viruses and worms, such as the Spybot
mentioned above, can disable antivirus applications whose definitions
aren't kept up-to-date, try using one or more of the free on-line
scanners to double-check your system.

Trend Micro - Free online virus Scan
http://housecall.trendmicro.com/

McAfee Security - FreeScan
http://www.mcafee.com/myapps/mfs/default.asp

Symantec Security Check
http://security.symantec.com/ssc/home.asp

Panda ActiveScan - Free online scanner
http://www.pandasoftware.com/activescan/com/activescan_principal.htm

Computer Associates:
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

DialogueScience:
http://www.antivir.ru/english/www_av/

F-Secure:
http://support.f-secure.com/enu/home/ols.shtml

BitDefender
http://www.bitdefender.com/scan/license.php

Freedom Online scanner
http://www.freedom.net/viruscenter/index.html


--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH

 

[Guest]

Help me also.
I have quite similar problem. I canot open Task Manager but can open
msconfig and regedit. I have scanned whole system by many AntiVirus and
Spyware remover tools but found nothing. No scan works even in safe mode. I
think I am infected as I have seen that whenever I try to rename tskmgr.exe a
new file named so is automatically created and so cannot open task manager
even by applying Doug Knox's xp_emergencyutils.
I want help for this problem.
Thanks.

 

[Plato]

Hi,
I cannot start MSCONFIG or Task Manager or regedit. The windows for
these applications open and immidiately close. I have run ad removal
and done a virus scan but found nothing.

http://www.bootdisk.com/bootlist/154.htm#1