I'd say try booting into Safe Mode first and foremost...then try to run MSCONFIG disabling anything/everything in the start tab...
How to access Safe Mode:
http://www.webtree.ca/wind
Main Topics
Browse All TopicsClients XP Pro machine. Never had virus protection.
Running okay, a bit slow, but okay.
Cannot install AVG. Set up starts, but nothing happens after unpacking files.
Cannot run regedit, starts up then closes, almost instantly.
Cannot run MSCONFIG. Just will not open. Run from Start>Run>msconfig. Nothing.
Copied a new MSCONFIG to the desktop and tried to run that...nothing.
I have an idea this is a virus of some sort. Any suggestions would be gratefully recieved.
Thank you :)
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
I'd say try booting into Safe Mode first and foremost...then try to run MSCONFIG disabling anything/everything in the start tab...
How to access Safe Mode:
http://www.webtree.ca/wind
You might try system restore: http://support.microsoft.c
or can you click Start->Run->SFC /Scannow
?
Check these sites for information on how to perform a repair install of XP:
http://www.michaelstevenst
http://www.webtree.ca/wind
http://www.windowsreinstal
Typically, you want to turn off system restore... and DL a free anti-virus scanner, Mcafee's stinger works well, but if you can't get it to run you may need to get Ad-Aware to run before. (linked above)
http://vil.nai.com/vil/sti
http://vil.nai.com/vil/Sys
While the stinger product is good at finding and ridding you of the virus, it does not patch or portect the PC from further, or re-infection. Get a Firewall like ZoneAlarm and an AV solution like McAfee that can work "on access" in stead of after the fact.
Lot's of the lates't viri turn off AV FW and various other programs you'd use to get rid of them.
http://securityresponse.sy
Removal instructions for such a virus are located at the botom of that link...
The following instructions pertain to all current and recent Symantec antivirus products, including the Symantec AntiVirus and Norton AntiVirus product lines. (mcafee's stinger is more incompassing- norton will have you DL every one of their tools, while McAfee's is all in one)
1. Disable System Restore (Windows Me/XP).
2. Update the virus definitions.
3. Restart the computer in Safe mode or VGA mode.
4. Run a full system scan and delete all the files detected as W32.Gaobot.YN.
5. Reverse the changes made to the registry.
6. Remove the DNS entries added to Windows hosts file.
http://securityresponse.sy
GL!
-rich
Cleaning your computer - and protecting it in the future - can't be answered with one issue.
As you can see in my url below there are at least 7 different issues, where you should decide 1 of each, or else you does'nt protect your computer at all.
The reason is, that the many different programs not always protects against each other, and each of them does'nt protect equally.
It's very important, that you study all of these issues in my knowledgebase (some of them are freeware):
http://www.tryware.dk/Engl
BTW: I'm using the Trend Micro virus-suite, and SoftScan , and haven't got any of my servers or computers infected since 1999.
Many Regards
Jorgen Malmgren
IT-Supervisor
Denmark
:o) Your brain is like a parachute. It works best when it's open
If Sfc.exe does'nt work, then try to copy all the files from C:\WINNT\system32\dllcache
Files Manually Copied to the DLLCache Folder Are Not Used Until the Next Reboot
http://support.microsoft.c
the Viri aren't very smart... they only look for the name of the running process... nothing else, so if Adaware.exe or stinger.exe are killed by the virus, try renaming them, it worked when I came across this one before. Remember to turn off System Restore, as you'll just keep re-infecting yourself.
-rich
Firsrt solution :
1.restart ---> Safe Mode
then use the command sfc /scannow to restore the corrupted files
restart the machine againe then install Antivirus Program --->Scan all computer
Second solution :
boot the machine in Safe Mode With Command Prompt
if you access command prompt screen type this command :
%systemroot%\system32\Rest
ENTER
Restore your system
Business Accounts
Answer for Membership
by: LeftofCoolPosted on 2004-04-22 at 16:21:06ID: 10894739
Hi,
00-8022-10 194058.htm l?tag=lst- 0-3 . The second is Ad-Aware which can be found here: http://www.lavasoftusa.com / . Install both programs, update them, and let them scan for spyware. If you find that you cannot open either one of these programs then restart the computer in safe mode and run the programs. (Safe Mode starts Windows with a minimal amount of drivers and prevents most viruses from working due to the lack of drivers present.) Now, restart the computer normally and go to this link: http://housecall.trendmicr o.com/ . This is an online virus scanner that may evade viruses that attempt to shut down AV programs, should they be present. Remove everything detected. After performing these steps, I would like to know if any searches in Internet Explorer are being redirected and if so, to where. Please let me know if there is a problem performing a certain step as there are many alternate workarounds.
Since it seems your client has some pretty advanced spyware and viruses, you should download a couple of tools to aid in removing them. The first I will recommend is Spybot Search & Destroy, it can be found here: http://download.com.com/30