Task mgr, Regedit, MSconfig

[Robert]

PLEASE HELP!
I've had some recent performance trouble and I tried to
use "msconfig" to reduce the # of startup programs.
However, when I try to run msconfig, nothing happens. The
same thing happens when I try to run "regedit" or open
the "task manager." The 1st time I noticed it the problem
was when I was trying to close pop-ups on the internet and
the task manager would disappear before I could close the
pop-up windows. Now it won't open at all. (Regedit pops
up briefly but then disappears almost immediately). If
anyone could help, I'd greatly appreciate it.

 

[Guest]

Some viruses will do this.
Scan your system with a virus program with uptodate virus
definitions. You can also go to symantec.com and do an
online virus scan.
You may also want to scan your system with adaware and
spybot for spyware.

 

[Bruce Chambers]

Greetings --

The type of behavior you describe, which also often applies to
Taskmgr.exe and MSConfig.exe, is typical behavior of more than one
virus/worm, the three below being the most common:

W32.Klez
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Yaha
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

W32.Spybot.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html

Because many of the newer viruses and worms, such as the
Spybot mentioned above, can disable antivirus applications whose
definitions aren't kept up-to-date, try using one or more of the free
on-line scanners to double-check your system.

Trend Micro - Free online virus Scan
http://housecall.trendmicro.com/

McAfee Security - FreeScan
http://www.mcafee.com/myapps/mfs/default.asp

Symantec Security Check
http://security.symantec.com/ssc/home.asp


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

 

[Doug Knox MS-MVP]

For additional help see www.dougknox.com, Win XP Utilities, Create Emergency Copies of Critical XP System Utilities. This small VB Program will create backup, usable copies of Task Manger, Regedit and MSConfig (named Taskmgr1.exe, Regedit.com and MSConfig1.exe) in a new folder C:\EmergencyUtil. Many virus programs will intercept these programs, based on their original file name. The modified file names, allow them to be run. Open Windows Explorer to C:\EmergencyUtil and double click the application you need. The next revision will allow you to browse for the folder you want to place the backups in.

Additionally, see the Win XP Utilities section for Startup Programs Tracker. This small utility scans your system for startup programs and running processes. It also allows you to create a log file that can be copied and pasted into a newsgroup post. The contents of the program window are also copied to the Windows Clipboard, automatically. For replies to newsgroup posts, do NOT include the Running Services, unless its absolutely necessary.

 

[cquirke (MVP Win9x)]

Some viruses will do this.
Scan your system with a virus program with uptodate virus
definitions. You can also go to symantec.com and do an
online virus scan.

Specifically, this smells like Swen.A, which will be sent to you if
your email address is harvested from newsgroups like this one.

You may find free Swen.A killers from Symantec, or the free Stinger
from Network Associates ("McAfee") may do it.

To learn more about Swen, or any other malware you've identified,
check out virus reference sites such as www.f-secure.com/v-descs or do
a Google. The best way to identiofy traditional malware (that would
be listed at such sites) is to do a formal virus scan, but NTFS may
botch that. For commercial malware, free dedicated tools such as
Spybot, AdAware and PestPatrol other reference sites are your best
bet. But the behaviour you describe is beyond commercial malware.

See http://users.iafrica.com/c/cq/cquirke/virtest.htm on formal virus
scanning. Windows-based av (or more laughably, online scanners) may
be foiled by active malware, which could react punitively. Be warned!

The same happens when I try to run "regedit" or open


---------- ----- ---- --- -- - - - -

Consumer Asks: "What are you?"
Market Research: ' What would you like us to be? '