Can't Run Task Manager or MSCONFIG.exe

[Guest]

I belieave I have a virus that has taken over some of the functionality of my computer. When I try to open Task Manager or MSCONFIG.exe they briefly flash on the screen and then close. I cannot get in to do some of the troubleshooting I need to do to figure out what programs are running. I have run Norton Antivirus and two files have a virus that the program cannot clean or quarantine. The files are reuopdfxtt.exe which has a W32.spybot.worm attached and the other file is syslaunch.exe which has a W32.Adclicker.G.Trojan virus attached. I am afraid to delete these files because I do not know their purpose and I have to think that the two problems(virus and TaskManager) are somehow linked.

I have done a system restore to the end of November, but the problem is still occuring. I do not want to do another restore unless I have to in order to recover. Any one have any help I am more than willing to listen, Thanks

 

[purplehaz]

Delete the files. Let nortons do it thing. Then goto nortons website and
search for the viri you had and go thru the manual virus delete procedure to
make sure its all gone.
Also your going to need to turn system restore off, reboot, then turn system
restore back on, so that all your restore points get deleted. You need to do
this cause the restore points hold the virus as well. Good luck.

 

[Guest]

Do a Online scan. There several Virus's that attact it,
msconfig and regedit.

http://security.symantec.com/ssc/home.asp?
j=1&langid=ie&venid=sym&plfid=23&pkj=YFLXORVWHFHMFNZMBBX

After you'll find out how to remove it.

-----Original Message-----
I belieave I have a virus that has taken over some of

the functionality of my computer. When I try to open
Task Manager or MSCONFIG.exe they briefly flash on the
screen and then close. I cannot get in to do some of the
troubleshooting I need to do to figure out what programs
are running. I have run Norton Antivirus and two files
have a virus that the program cannot clean or
quarantine. The files are reuopdfxtt.exe which has a
W32.spybot.worm attached and the other file is
syslaunch.exe which has a W32.Adclicker.G.Trojan virus
attached. I am afraid to delete these files because I do
not know their purpose and I have to think that the two
problems(virus and TaskManager) are somehow linked.

I have done a system restore to the end of November, but

the problem is still occuring. I do not want to do
another restore unless I have to in order to recover.
Any one have any help I am more than willing to listen,
Thanks

 

[Doug Knox MS-MVP]

You have a virus. Likely one of the following:

W32.Klez
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Yaha
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Spybot.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html

For additional help see www.dougknox.com, Win XP Utilities, Create Emergency Copies of Critical XP System Utilities. This small VB Program will create backup, usable copies of Task Manger, Regedit and MSConfig (named Taskmgr1.exe, Regedit.com and MSConfig1.exe) in a new folder C:\EmergencyUtil. Many virus programs will intercept these programs, based on their original file name. The modified file names, allow them to be run. Open Windows Explorer to C:\EmergencyUtil and double click the application you need. The next revision will allow you to browse for the folder you want to place the backups in.

Additionally, see the Win XP Utilities section for Startup Programs Tracker. This small utility scans your system for startup programs and running processes. It also allows you to create a log file that can be copied and pasted into a newsgroup post. The contents of the program window are also copied to the Windows Clipboard, automatically. For replies to newsgroup posts, do NOT include the Running Services, unless its absolutely necessary.