cannot start msconfig, task mgr, regedit,...



ashkaan57@hotmail.com
07-09-2005, 11:34 PM
Hi,
I cannot start MSCONFIG or Task Manager or regedit. The windows for
these applications open and immidiately close. I have run ad removal
and done a virus scan but found nothing.

TIA.

Bob I
07-09-2005, 11:34 PM
Try again in Safe mode so the malware doesn't get a chance to hide.

ashkaan57@hotmail.com wrote:

> Hi,
> I cannot start MSCONFIG or Task Manager or regedit. The windows for
> these applications open and immidiately close. I have run ad removal
> and done a virus scan but found nothing.
>
> TIA.
>

PA Bear
07-09-2005, 11:34 PM
Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/data/tshoot.htm
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine.blogspot.com/

--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE) & Security

ashkaan57@hotmail.com wrote:
> Hi,
> I cannot start MSCONFIG or Task Manager or regedit. The windows for
> these applications open and immidiately close. I have run ad removal
> and done a virus scan but found nothing.
>
> TIA.

compTech
07-09-2005, 11:34 PM
It sounds like a virus to me. I'm not ignoring the fact that you ran a scan,
but I've seen this issue before. Close all open programs and open the task
manager; click the processes tab. Go to www.processlibrary.com and look up
the processes that are running. If any of them turn out to be malicious, end
them. Then update your antivirus and spyware definitions and scan again. Hope
this helps.

"ashkaan57@hotmail.com" wrote:

> Hi,
> I cannot start MSCONFIG or Task Manager or regedit. The windows for
> these applications open and immidiately close. I have run ad removal
> and done a virus scan but found nothing.
>
> TIA.
>
>

Doug Knox MS-MVP
07-09-2005, 11:34 PM
You have a virus. Likely one of the following, or a variant:

W32.Klez
http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.e@mm.html

W32.Yaha
http://securityresponse.symantec.com/avcenter/venc/data/w32.yaha.c@mm.html

W32.Spybot.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html

For additional help see www.dougknox.com, Win XP Utilities, Create Emergency Copies of Critical XP System Utilities. This small VB Program will create backup, usable copies of Task Manger, Regedit and MSConfig (named Copy_of_Taskmgr.exe, Copy_of_Regedit.com and Copy_of_MSConfig.exe) in a new folder C:\EmergencyUtil. Many virus programs will intercept these programs, based on their original file name. The modified file names, allow them to be run. Open Windows Explorer to C:\EmergencyUtil and double click the application you need. The next revision will allow you to browse for the folder you want to place the backups in.

Additionally, see the Win XP Utilities section for Startup Programs Tracker. This small utility scans your system for startup programs and running processes. It also allows you to create a log file that can be copied and pasted into a newsgroup post. The contents of the program window are also copied to the Windows Clipboard, automatically. For replies to newsgroup posts, do NOT include the Running Services, unless its absolutely necessary.


--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

<ashkaan57@hotmail.com> wrote in message news:1116444905.206834.208380@g49g2000cwa.googlegroups.com...
> Hi,
> I cannot start MSCONFIG or Task Manager or regedit. The windows for
> these applications open and immidiately close. I have run ad removal
> and done a virus scan but found nothing.
>
> TIA.
>

Richard Urban
07-09-2005, 11:34 PM
You may have found nothing but you are still infected. Do as PA Bear
suggests.

--
Regards,

Richard Urban

aka Crusty (-: Old B@stard :-)

If you knew as much as you think you know,
You would realize that you don't know what you thought you knew!


<ashkaan57@hotmail.com> wrote in message
news:1116444905.206834.208380@g49g2000cwa.googlegroups.com...
> Hi,
> I cannot start MSCONFIG or Task Manager or regedit. The windows for
> these applications open and immidiately close. I have run ad removal
> and done a virus scan but found nothing.
>
> TIA.
>

Bruce Chambers
07-09-2005, 11:35 PM
ashkaan57@hotmail.com wrote:
> Hi,
> I cannot start MSCONFIG or Task Manager or regedit. The windows for
> these applications open and immidiately close. I have run ad removal
> and done a virus scan but found nothing.
>
> TIA.
>


The type of behavior you describe is typical behavior of more than
one virus/worm, the three below being the most common:

W32.Klez
http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.e@mm.html

W32.Yaha
http://securityresponse.symantec.com/avcenter/venc/data/w32.yaha.c@mm.html

W32.Spybot.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html

Because many of the newer viruses and worms, such as the Spybot
mentioned above, can disable antivirus applications whose definitions
aren't kept up-to-date, try using one or more of the free on-line
scanners to double-check your system.

Trend Micro - Free online virus Scan
http://housecall.trendmicro.com/

McAfee Security - FreeScan
http://www.mcafee.com/myapps/mfs/default.asp

Symantec Security Check
http://security.symantec.com/ssc/home.asp

Panda ActiveScan - Free online scanner
http://www.pandasoftware.com/activescan/com/activescan_principal.htm

Computer Associates:
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

DialogueScience:
http://www.antivir.ru/english/www_av/

F-Secure:
http://support.f-secure.com/enu/home/ols.shtml

BitDefender
http://www.bitdefender.com/scan/license.php

Freedom Online scanner
http://www.freedom.net/viruscenter/index.html


--

Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH

Pramit Roy
07-09-2005, 11:35 PM
Help me also.
I have quite similar problem. I canot open Task Manager but can open
msconfig and regedit. I have scanned whole system by many AntiVirus and
Spyware remover tools but found nothing. No scan works even in safe mode. I
think I am infected as I have seen that whenever I try to rename tskmgr.exe a
new file named so is automatically created and so cannot open task manager
even by applying Doug Knox's xp_emergencyutils.
I want help for this problem.
Thanks.

"Bruce Chambers" wrote:

> ashkaan57@hotmail.com wrote:
> > Hi,
> > I cannot start MSCONFIG or Task Manager or regedit. The windows for
> > these applications open and immidiately close. I have run ad removal
> > and done a virus scan but found nothing.
> >
> > TIA.
> >
>
>
> The type of behavior you describe is typical behavior of more than
> one virus/worm, the three below being the most common:
>
> W32.Klez
> http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.e@mm.html
>
> W32.Yaha
> http://securityresponse.symantec.com/avcenter/venc/data/w32.yaha.c@mm.html
>
> W32.Spybot.Worm
> http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html
>
> Because many of the newer viruses and worms, such as the Spybot
> mentioned above, can disable antivirus applications whose definitions
> aren't kept up-to-date, try using one or more of the free on-line
> scanners to double-check your system.
>
> Trend Micro - Free online virus Scan
> http://housecall.trendmicro.com/
>
> McAfee Security - FreeScan
> http://www.mcafee.com/myapps/mfs/default.asp
>
> Symantec Security Check
> http://security.symantec.com/ssc/home.asp
>
> Panda ActiveScan - Free online scanner
> http://www.pandasoftware.com/activescan/com/activescan_principal.htm
>
> Computer Associates:
> http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
>
> DialogueScience:
> http://www.antivir.ru/english/www_av/
>
> F-Secure:
> http://support.f-secure.com/enu/home/ols.shtml
>
> BitDefender
> http://www.bitdefender.com/scan/license.php
>
> Freedom Online scanner
> http://www.freedom.net/viruscenter/index.html
>
>
> --
>
> Bruce Chambers
>
> Help us help you:
> http://dts-l.org/goodpost.htm
> http://www.catb.org/~esr/faqs/smart-questions.html
>
> You can have peace. Or you can have freedom. Don't ever count on having
> both at once. - RAH
>

Plato
07-09-2005, 11:36 PM
ashkaan57@hotmail.com wrote:
>
> Hi,
> I cannot start MSCONFIG or Task Manager or regedit. The windows for
> these applications open and immidiately close. I have run ad removal
> and done a virus scan but found nothing.

http://www.bootdisk.com/bootlist/154.htm#1






--
http://www.bootdisk.com/


cannot start msconfig, task mgr, regedit,...