• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 183
  • Last Modified:

Program Killing Everything in WinXP

I have a WIN XP Service Pack 1  machine with some type of virus, it will immeditaly close any type of program I open,  it will even close the task manager after I hit CTR ALT DEL.
I have  disable everything in startup and in msconfig, I have started in safe mode and ran cwshredder,spyhunter,hijackthis and stinger. I can not even run an install from the command line interface, it kills it as soon as it starts.  Does anyone have any idea what I am dealing with here.  I am afraid it is going to be clean install but I would really like to know what the heck is going on.

thanks
scoop
0
bvea_tech
Asked:
bvea_tech
  • 3
1 Solution
 
CodedKCommented:
When that type of virus appeared the only program that could close it was CodeStuff Starter...
It is something like Ctrl+Alt+Del.
It shows the path of every executable that runs on Startup and the current Processes.

Get it from here:
http://codestuff.mirrorz.com

This type of virus can even close AV programs. U should consider updating to a newer version.

Disable System Restore.
When u find the application, go in safe mode and delete it.
Run adaware and ur antivirus app (updated).

Hope this helps :)
0
 
CodedKCommented:
When u terminate it .. it is possible that a shutdown will occur.
To prevent that do this:

You probably gonna have about 30 seconds so do it fast

Start ---> Run ----> Cmd
When Command Window appears type the following:

Shutdown/a

This will abort any shutdown process that is in progress.
This thing sounds like lsass virus.
0
 
bvea_techAuthor Commented:
Well I figured it out, it was the IM serbw worm, nasty sucker too. The only way I could figure out what it was, was to continually hold down ctl alt delete and I regonized that in the processes, then I found a slick little program called Trojan remover that would run but I had to put it on with a jump drive and it found the virus and removed the I could go ahead with a regular clean.
0
 
CodedKCommented:
Thats good :)

You can ask to refund your points at the support section..
0
 
CetusMODCommented:
PAQ'd, 500 points refunded.
CetusMOD
Community Support Moderator
0

Featured Post

SMB Security Just Got a Layer Stronger

WatchGuard acquires Percipient Networks to extend protection to the DNS layer, further increasing the value of Total Security Suite.  Learn more about what this means for you and how you can improve your security with WatchGuard today!

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now