Program Killing Everything in WinXP

Posted on 2005-03-16
Medium Priority
Last Modified: 2013-12-04
I have a WIN XP Service Pack 1  machine with some type of virus, it will immeditaly close any type of program I open,  it will even close the task manager after I hit CTR ALT DEL.
I have  disable everything in startup and in msconfig, I have started in safe mode and ran cwshredder,spyhunter,hijackthis and stinger. I can not even run an install from the command line interface, it kills it as soon as it starts.  Does anyone have any idea what I am dealing with here.  I am afraid it is going to be clean install but I would really like to know what the heck is going on.

Question by:bvea_tech
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
LVL 16

Expert Comment

ID: 13580249
When that type of virus appeared the only program that could close it was CodeStuff Starter...
It is something like Ctrl+Alt+Del.
It shows the path of every executable that runs on Startup and the current Processes.

Get it from here:

This type of virus can even close AV programs. U should consider updating to a newer version.

Disable System Restore.
When u find the application, go in safe mode and delete it.
Run adaware and ur antivirus app (updated).

Hope this helps :)
LVL 16

Expert Comment

ID: 13580261
When u terminate it .. it is possible that a shutdown will occur.
To prevent that do this:

You probably gonna have about 30 seconds so do it fast

Start ---> Run ----> Cmd
When Command Window appears type the following:


This will abort any shutdown process that is in progress.
This thing sounds like lsass virus.

Author Comment

ID: 13583482
Well I figured it out, it was the IM serbw worm, nasty sucker too. The only way I could figure out what it was, was to continually hold down ctl alt delete and I regonized that in the processes, then I found a slick little program called Trojan remover that would run but I had to put it on with a jump drive and it found the virus and removed the I could go ahead with a regular clean.
LVL 16

Expert Comment

ID: 13583721
Thats good :)

You can ask to refund your points at the support section..

Accepted Solution

CetusMOD earned 0 total points
ID: 13594200
PAQ'd, 500 points refunded.
Community Support Moderator

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

As I write this article, I am finishing cleanup from the Qakbot virus variant found in the wild on April 18, 2011.  It was a messy beast that had varying levels of infection, speculated as being dependent on how long it resided on the infected syste…
OfficeMate Freezes on login or does not load after login credentials are input.
In this video, Percona Solution Engineer Dimitri Vanoverbeke discusses why you want to use at least three nodes in a database cluster. To discuss how Percona Consulting can help with your design and architecture needs for your database and infras…
In this video, Percona Solution Engineer Rick Golba discuss how (and why) you implement high availability in a database environment. To discuss how Percona Consulting can help with your design and architecture needs for your database and infrastr…
Suggested Courses
Course of the Month12 days, 15 hours left to enroll

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question