Open and immediately close

[Bill Wilson]

Win2K, SP4 recently installed.

Odd problems since install.

Task Manager flashes open, then goes to task bar. Moving
mouse over task bar icon closes icon.

Regedit opens and reads files then closes immediately.

Install/Remove programs icon in CP has no reaction.
Add/Remove hardware icon is OK.

tried running the SFC /purgecache and
SFC /scannow recovery utility with a re-boot but with
no discernable difference.

Any ideas?
TIA

 

[Locust]

Mine had the same problem. Turned out to be a virus.
Can't remember the name of it off hand sorry.

Reboot into safe mode and do a full system scan. It also
had loaded a couple items into the 'Run' folder in the
registry. I had to use a 3rd party registry editor to
remove them. It had added dll32.exe, system32.exe and
another one I can't remember off hand. Causes Task
Manager, all MMC things(real pain!) and about 40 other pre-
defined .exe programs to automatically close straight away.

 

[Dave Patrick]

More than one virus have these symptoms.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect


:
| Win2K, SP4 recently installed.
|
| Odd problems since install.
|
| Task Manager flashes open, then goes to task bar. Moving
| mouse over task bar icon closes icon.
|
| Regedit opens and reads files then closes immediately.
|
| Install/Remove programs icon in CP has no reaction.
| Add/Remove hardware icon is OK.
|
| tried running the SFC /purgecache and
| SFC /scannow recovery utility with a re-boot but with
| no discernable difference.
|
| Any ideas?
| TIA
|
|

 

[Guest]

That sounds like it. Which RUN folder had the added
programs and which registry editor did you use? The
regedit in safe mode does not have search function and it
is tough to find things.

Thanks

 

[Bruce Chambers]

Greetings --

The type of behavior you describe is typical behavior of more than
one virus/worm, the three below being the most common:

W32.Klez
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Yaha
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Spybot.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html


Because many of the newer viruses and worms, such as the
Spybot mentioned above, can disable antivirus applications whose
definitions aren't kept up-to-date, try using one or more of the free
on-line scanners to double-check your system.

Trend Micro - Free online virus Scan
http://housecall.trendmicro.com/

McAfee Security - FreeScan
http://www.mcafee.com/myapps/mfs/default.asp

Symantec Security Check
http://security.symantec.com/ssc/home.asp


Bruce Chambers

--
Help us help you:




You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH