Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17


What virus turns apps off?

Posted on 2004-04-22
Medium Priority
Last Modified: 2013-12-04
Clients XP Pro machine. Never had virus protection.

Running okay, a bit slow, but okay.

Cannot install AVG. Set up starts, but nothing happens after unpacking files.

Cannot run regedit, starts up then closes, almost instantly.

Cannot run MSCONFIG. Just will not open. Run from Start>Run>msconfig. Nothing.

Copied a new MSCONFIG to the desktop and tried to run that...nothing.

I have an idea this is a virus of some sort. Any suggestions would be gratefully recieved.

Thank you :)
Question by:midhurst
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
  • +3

Accepted Solution

LeftofCool earned 750 total points
ID: 10894739

Since it seems your client has some pretty advanced spyware and viruses, you should download a couple of tools to aid in removing them. The first I will recommend is Spybot Search & Destroy, it can be found here: . The second is Ad-Aware which can be found here: . Install both programs, update them, and let them scan for spyware. If you find that you cannot open either one of these programs then restart the computer in safe mode and run the programs. (Safe Mode starts Windows with a minimal amount of drivers and prevents most viruses from working due to the lack of drivers present.)  Now, restart the computer normally and go to this link: . This is an online virus scanner that may evade viruses that attempt to shut down AV programs, should they be present. Remove everything detected. After performing these steps, I would like to know if any searches in Internet Explorer are being redirected and if so, to where. Please let me know if there is a problem performing a certain step as there are many alternate workarounds.
LVL 67

Expert Comment

ID: 10895144
I'd say try booting into Safe Mode first and foremost...then try to run MSCONFIG disabling anything/everything in the start tab...

How to access Safe Mode:


Author Comment

ID: 10895226
I'm not with the machine at the mo, but will try your suggestions.

I booted in to safe mode, but msconfig and regedit wouldn't start from there either. :O/

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

LVL 67

Expert Comment

ID: 10895287
You might try system restore: (Restore to previous state)

or can you click Start->Run->SFC /Scannow

Check these sites for information on how to perform a repair install of XP: (Last Known Good/Safe Mode/Recovery Console/Repair) (Choose Pro or Home from the side-bar)
LVL 38

Assisted Solution

by:Rich Rumble
Rich Rumble earned 450 total points
ID: 10896045
Typically, you want to turn off system restore... and DL a free anti-virus scanner, Mcafee's stinger works well, but if you can't get it to run you may need to get Ad-Aware to run before. (linked above) (turn off system restore on XP and ME to get rid of viri for good)

While the stinger product is good at finding and ridding you of the virus, it does not patch or portect the PC from further, or re-infection. Get a Firewall like ZoneAlarm and an AV solution like McAfee that can work "on access" in stead of after the fact.

Lot's of the lates't viri turn off AV FW and various other programs you'd use to get rid of them. (nasty! tries to kill everything...)
Removal instructions for such a virus are located at the botom of that link...
The following instructions pertain to all current and recent Symantec antivirus products, including the Symantec AntiVirus and Norton AntiVirus product lines. (mcafee's stinger is more incompassing- norton will have you DL every one of their tools, while McAfee's is all in one)
   1. Disable System Restore (Windows Me/XP).
   2. Update the virus definitions.
   3. Restart the computer in Safe mode or VGA mode.
   4. Run a full system scan and delete all the files detected as W32.Gaobot.YN.
   5. Reverse the changes made to the registry.
   6. Remove the DNS entries added to Windows hosts file. also a virus that attacks regedit and others..

LVL 12

Assisted Solution

trywaredk earned 300 total points
ID: 10897674
Cleaning your computer  - and protecting it in the future -  can't be answered with one issue.

As you can see in my url below there are at least 7 different issues, where you should decide 1 of each, or else you does'nt protect your computer at all.

The reason is, that the many different programs not always protects against each other, and each of them does'nt protect equally.

It's very important, that you study all of these issues in my knowledgebase (some of them are freeware):

BTW: I'm using the Trend Micro virus-suite, and SoftScan , and haven't got any of my servers or computers infected since 1999.

Many Regards
Jorgen Malmgren

:o) Your brain is like a parachute. It works best when it's open

LVL 12

Expert Comment

ID: 10897679
If Sfc.exe does'nt work, then try to copy all the files from C:\WINNT\system32\dllcache to C:\WINNT\system32
Files Manually Copied to the DLLCache Folder Are Not Used Until the Next Reboot;en-us;236995
LVL 38

Expert Comment

by:Rich Rumble
ID: 10900530
the Viri aren't very smart... they only look for the name of the running process... nothing else, so if Adaware.exe or stinger.exe are killed by the virus, try renaming them, it worked when I came across this one before. Remember to turn off System Restore, as you'll just keep re-infecting yourself.

Expert Comment

by:nader alkahtani
ID: 10911839
Firsrt solution :

1.restart ---> Safe Mode

then use the command sfc /scannow to restore the corrupted files

restart the machine againe then install Antivirus Program --->Scan all computer

Second solution :

boot the machine in Safe Mode With Command Prompt

if you access command prompt screen type this command :



Restore your system


Author Comment

ID: 10973648
Thanks guys. I learnt much from your answers and I'm grateful. Nothing worked completely and in the end, rather than spend endless hours, I reformated and reinstalled.

LVL 12

Expert Comment

ID: 10981632
:o) Glad we could help you - thank you for the points

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, a new law in my state forced us to get a top-to-bottom analysis of all of our contract client's networks. While we have documentation, it was spotty at best for some - and in any event it needed to be checked against reality. That was m…
In today's information driven age, entrepreneurs have so many great tools and options at their disposal to help turn good ideas into a thriving business. With cloud-based online services, such as Amazon's Web Services (AWS) or Microsoft's Azure, bus…
This tutorial will teach you the special effect of super speed similar to the fictional character Wally West aka "The Flash" After Shake : All lightning effects with instructions : http://www.mediaf…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses

715 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question