Task Manager, Regedit, Msconfig Stops Suddenly.

[Tim]

I used the utility you mentioned. The programs work when run from the
EmergencyUtil folder proving the original files are not currupt. I still am
unable to run system restore sucessfully. I ran a complete scan of my
computer with completely upgraded 2003 Norton AV. No virus found.

What would you suggest next?

SEE ORIGINAL MESSAGE AT BOTTOM.

-- Registry --
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce

No Items Found

-- Registry --
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

SynTPLpr C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
SynTPEnh C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
Cpqset C:\Program Files\HPQ\Default
Settings\cpqset.exe
hpsysdrv c:\windows\system\hpsysdrv.exe
AutoTBar C:\hp\bin\autotbar.exe
ccApp "C:\Program Files\Common Files\Symantec
Shared\ccApp.exe"
ccRegVfy "C:\Program Files\Common Files\Symantec
Shared\ccRegVfy.exe"
Advanced Tools Check C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
CARPService carpserv.exe
Display Settings C:\Program Files\HPQ\Notebook
Utilities\hptasks.exe /s
QT4HPOT C:\PROGRA~1\HPQ\ONE-TO~1\OneTouch.EXE
Winsock2 driver WINLODR.SCR

-- Registry --
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce

Winsock2 driver WINLODR.SCR

-- Registry --
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

ctfmon.exe C:\WINDOWS\System32\ctfmon.exe

-- Registry --
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce

No Items Found

-- Start Menu - Current User --
No Items Found

-- Start Menu - All Users --
No Items Found

-- Disabled Items --
Ati2mdxx
atiptaxx
carpserv
ElbyCheck
CloneCDTray
taskswitch
hptasks
kazaa
mm_tray
msmsgs
setup
realplay
srmclean
TvNow
WINLODR
WinStart001
ypager
ZeaSoft/zlaunch
Billminder
Microsoft Office
Quicken Scheduled Updates
Quicken Startup
PalNetaware

-- Registry - Shell Value - HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon --
Explorer.exe

-- Running Processes --
System Idle Process
System
smss.exe \SystemRoot\System32\smss.exe
csrss.exe
winlogon.exe winlogon.exe
services.exe C:\WINDOWS\system32\services.exe
lsass.exe C:\WINDOWS\system32\lsass.exe
svchost.exe C:\WINDOWS\system32\svchost -k rpcss
svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
spoolsv.exe C:\WINDOWS\system32\spoolsv.exe
CCEVTMGR.EXE "C:\Program Files\Common Files\Symantec
Shared\ccEvtMgr.exe"
HPConfig.exe C:\WINDOWS\system32\HPConfig.exe
HPWirelessMgr.exe "C:\Program Files\HPQ\Notebook
Utilities\HPWirelessMgr.exe"
mdm.exe "C:\Program Files\Common Files\Microsoft
Shared\VS7Debug\mdm.exe"
NAVAPSVC.EXE "C:\Program Files\Norton AntiVirus\navapsvc.exe"
NPROTECT.EXE "C:\Program Files\Norton
AntiVirus\AdvTools\NPROTECT.EXE"
svchost.exe C:\WINDOWS\System32\svchost.exe -k imgsvc
explorer.exe C:\WINDOWS\Explorer.EXE
SynTPLpr.exe "C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
SynTPEnh.exe "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
hpsysdrv.exe "C:\windows\system\hpsysdrv.exe"
ccApp.exe "C:\Program Files\Common Files\Symantec
Shared\ccApp.exe"
winlodr.scr "C:\WINDOWS\System32\WINLODR.SCR" /S
carpserv.exe "C:\WINDOWS\System32\carpserv.exe"
ONETOUCH.EXE "C:\PROGRA~1\HPQ\ONE-TO~1\OneTouch.EXE"
ctfmon.exe "C:\WINDOWS\System32\ctfmon.exe"
msmsgs.exe "C:\Program Files\Messenger\msmsgs.exe" -Embedding
IEXPLORE.EXE "C:\Program Files\Internet Explorer\IEXPLORE.EXE"
msimn.exe "C:\Program Files\Outlook Express\msimn.exe"
DLExpert.exe "C:\Program Files\DLExpert\DLExpert.exe"
StartupTracker3.exe "C:\Documents and Settings\Owner\Local
Settings\Temp\Temporary Directory 1 for
StartupTracker3.zip\StartupTracker3.exe"
wmiprvse.exe

 

[Chris Lanier]

w32.spybot worm disables NAV, Msconfig, Regedit and Task Manager:
http://www.bitdefender.com/bd/site/virusinfo.php?menu_id=1&v_id=114

Try this to:
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html

Rename regedit.exe to regedit.com then:

Download then Merge the edit on line 251 then delete all the files mentioned
in the above link.
http://www.kellys-korner-xp.com/xp_tweaks.htm

ALSO
http://www.dougknox.com/xp/utils/xp_emerutils.htm