Solved

AVG, firewall, regedit, and msconfig quit after a few seconds

Posted on 2004-08-23
5
845 Views
Last Modified: 2008-02-01
Anyone know what the latest virus is that shuts down Avg, sygate firewall, regedit, and msconfig after a few seconds?  I can scan for viruses using Panda online, but can't get avg et al to hang around for more than a few seconds.  Doesn't appear to be any viral processes going on in task manager to shut down either.  This is on xp home
0
Comment
Question by:queira
5 Comments
 
LVL 21

Expert Comment

by:jvuz
ID: 11878453
Have you already tried to check with Stinger:

http://vil.nai.com/vil/stinger/
0
 
LVL 6

Expert Comment

by:akboss
ID: 11878493
download and try running this.

http://vil.nai.com/vil/stinger/

also download these.

Spyware/Adware removal tools
SpyBot
http://www.pcworld.com/downloads/file_description/0,fid,22262,00.asp


Ad-aware
 http://www.lavasoftusa.com/support/download/#free

Run these before running HijackThis.

HijackThis
http://www.majorgeeks.com/download3155.html

when you run HijackThis make sure you place it in its own folder. Run it and make a copy of the log. Paste it here and I or someone else will look at it and see if there is something else that needs to be done.

Try these suggestions first. If there is more to do we can work on it at that time.
0
 
LVL 6

Accepted Solution

by:
acmp earned 250 total points
ID: 11890315
The process may be disguised as a valid process, such as SVCHost.

If you use PrcView (from http://www.xmlsp.com/pview/prcview.htm)  It includes the path info for the processes. Very useful.

But I'd go with jvuz and run stinger first.

Maybe you could post a hijackthis log and/or PrcView log

acmp<><
0
 

Author Comment

by:queira
ID: 11939180
Got rid of all the viruses, but when i boot up, as windows starts, I get an error message saying hostsrv.exe could not be found.  No entries in msconfig and no entries in the run key in any of the registry keys either.  Hostsrv.exe is not running in task manager either.  It was one of the processes that was running when the viruses were running wild.  How to get rid of?
0
 
LVL 6

Expert Comment

by:acmp
ID: 11943392
I did a Google for hostsrv.exe and only got 1 hit!
http://handsoff.infomedia.it/cgi-bin/lwgate/VB-IT/archives/vb-it.log.0204/Author/article-841.html

It relates to Win95, is that your OS?

I'd try a safemode boot and see if the problem persists. can you feed back what happens and also your Win Ver.

acmp<><
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

There are many HijackThis tutorials on the web already, so this article is about tips that help utilize HijackThis' full potential as a diagnostic tool. Download HijackThis from a TrendMicro link or from known reliable sources only. http://free.…
PREFACE The purpose of this guide is to provide information to successfully add specific IIS 7.0 role services for the Symantec Endpoint Protection Manager (SEPM) to function properly when installed on Windows 2008. AUDIENCE Information Technol…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Learn how to create flexible layouts using relative units in CSS.  New relative units added in CSS3 include vw(viewports width), vh(viewports height), vmin(minimum of viewports height and width), and vmax (maximum of viewports height and width).

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now