Solved

Ctrl-Alt-Del: The window opens for a brief second then closes by itself

Posted on 2006-07-16
14
510 Views
Last Modified: 2012-06-21
The same thing happens when i open MS Security Center from the system tray. Security Center opens for a second then closes by itself.

This  is a clients PC and I've tried many things to fix it but no joy. My current thinking is that McAfee version 7 may be the cause. I tried to uninstall it but it wont uninstall from Add/Remove programs.

This is XP pro box. Any ideas?
0
Comment
Question by:veedar
  • 5
  • 3
  • 3
  • +3
14 Comments
 
LVL 13

Expert Comment

by:Mark_FreeSoftware
ID: 17118486

run a full virus scan,

if that doesnt find anything,
run ad-aware

0
 
LVL 47

Accepted Solution

by:
rpggamergirl earned 200 total points
ID: 17118497
Let us look at your hijackthis log to see if it's clean.

Please download HijackThis 1.99.1
http://www.cyberanswers.org/forum/uploads/HijackThis1991.exe
Open Hijackthis, click "Do a system scan and save a logfile" don't fix anything yet.

Then go to the below link and login using your Experts-Exchange username and password.
http://www.ee-stuff.com
Click on "Expert Area" tab
type or paste the link to your Question
"Browse" your pc to the location of your Hijackthis log and click "Upload"
Copy the resulting "url" and post it back here.


OR: paste the log to either of these sites:
1. http://www.rafb.net/paste/
then at the bottom left corner click "paste"
Copy the address/url and post it here.

2. or at --> http://www.hijackthis.de/
and click "Analyse", click "Save".  Then post the link to the saved list here.
0
 
LVL 15

Assisted Solution

by:Ryan_R
Ryan_R earned 150 total points
ID: 17118628
are you the administrator of your network? they can can set it up so that certain files will not run (no matter what their path is)
the only way around this is to rename a copy of the file
ie c:\windows\system32\mshearts.exe won't run
copy the file
rename it to mshearts1.exe
running the copy should now work

so try this:
goto %SystemRoot%\System32
find the file called  wscui.cpl    'this is the security centre file
copy it and rename it to wscui1.cpl
run this and if it works make a shortcut to it where ever you want

hope this helps
0
 
LVL 47

Expert Comment

by:rpggamergirl
ID: 17118865
What McAfee products do you have in that pc?

If the Add/Remove programs doesn't uninstall it then use VSCleanupTool.exe
All info taken from here -->  http://ts.mcafeehelp.com/?siteID=1&resolution=1024x768

Please follow the instructions below to run the VirusScan removal tool. This will completely remove VirusScan from your computer.

Download and save the Virus Scan removal tool VSCleanupTool.exe to your desktop.
http://download.mcafee.com/products/licensed/cust_support_patches/VSCleanupTool.exe
Locate VSCleanupTool.exe on your desktop and double-click to launch.
The removal tool will schedule and display a time when the removal process will begin.
Note: The displayed time should be within one mintute of the current system time shown in the bottom right side of the screen.
Removal will begin at the displayed time.
During this process, several icons will be created on your desktop. All of these new icons, except one, will be removed when the uninstall is complete and the computer has been restarted. The file mccleanup.log will remain on the desktop. Once you have verified the removal was successful, you can delete this file.
When finished, the following message will be displayed: The machine must reboot to complete the uninstallation. Reboot now?
Press "Y" on your keyboard to restart your computer and complete the removal process.

If VirusScan is the only McAfee service installed on your computer, uninstall SecurityCenter.
http://ts.mcafeehelp.com/faq3.asp?docid=71525
0
 
LVL 4

Expert Comment

by:mctigue
ID: 17118928
Try clicking in an empty space on your bottom task bar (where all the minimized programs go)  and go to task manager.
0
 
LVL 15

Author Comment

by:veedar
ID: 17118942
Thanks all for your suggestions. I had already performed adaware/virus/hijackthis scans but the problem persisted.

I just went to safemode and ran msconfig to disable all startup apps and that fixed things. So there must be something running at start up that is causing this odd behavior

The only McAfee product installed is Virusscan Enterprise. I'll give the VSCleanup tool a try.
0
 
LVL 47

Expert Comment

by:rpggamergirl
ID: 17118953
Hijackthis is not a standalone tool, most often it needs another tool to fix if malware/viruses is present(especially if it's an infection)
I suggested hijackthis so I can look at all the entries present.

Since you already disabled entries in msconfig they wouldn't show up in the hijackthis log.

If Mcafee is not the culprit on this one, can you please enable ALL startup entries in your msconfig and run a Hijackthis scan again and let me see the log?
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 15

Expert Comment

by:Ryan_R
ID: 17118954
did you try renaming the %SystemRoot%\System32\wscui1.cpl file to something else?
it could be as easy as that. Certain apps at my school network don't work - they start up and then quit automatically after a second - i rename it and it works fine.
I've also used freshUI to stop certain apps running on my computer (like viruses/apps that hog CPU time, etc)
0
 
LVL 12

Assisted Solution

by:AmigoJack
AmigoJack earned 150 total points
ID: 17119997
in case some program is trying to not let you use your taskmanager, do the following:

- first try CTRL+SHIFT+ESC, thats a hotkey for the taskman, maybe that works.
- there are also two commandline tools integrated into xp to list and kill processes. click on "start", "run", enter "cmd". to display a list of processes like in the taskman, type in "tasklist". remember each PID of a suspicious and then for each of them enter "taskkill 2372" (in case some program has the PID 2372)
0
 
LVL 47

Expert Comment

by:rpggamergirl
ID: 17120031
>>Thanks all for your suggestions. I had already performed adaware/virus/hijackthis scans but the problem persisted.<<
Can we please look at the hijackthis log?


>>I just went to safemode and ran msconfig to disable all startup apps and that fixed things. So there must be something running at start up that is causing this odd behavior<<
Doing that only stops the culprit from running at startup, that does not remove them from your system. And you need to know exactly what kind of malware they are so you can remove them properly, and that's where hijackthis' log helps.
Can you please enable all startup entries in msconfig and then run hijackthis and show us the log?(you don't need to reboot after enabling them, just get the hijackthis log and you can disable them again)
0
 
LVL 15

Author Comment

by:veedar
ID: 17126736
Thanks guys I'm all set on this one.
0
 
LVL 47

Expert Comment

by:rpggamergirl
ID: 17126776
No problem, and thank you too.
0
 
LVL 15

Expert Comment

by:Ryan_R
ID: 17127667
thanks for the points, what did you do to fix it in case other EE members have the same prob and stumble accross this post?
0
 
LVL 15

Author Comment

by:veedar
ID: 17134520
I'm not 100% sure what the fix was as this was a home system heavily infected with malware etc. It had no functioning antivirus and XP firewall had been turned off.  Disabling all startup apps with msconfig allowed me to get the system stable enough to run the usual tools to clean things up.
0

Featured Post

Free Gift Card with Acronis Backup Purchase!

Backup any data in any location: local and remote systems, physical and virtual servers, private and public clouds, Macs and PCs, tablets and mobile devices, & more! For limited time only, buy any Acronis backup products and get a FREE Amazon/Best Buy gift card worth up to $200!

Join & Write a Comment

Can I legally transfer my OEM version of Windows to another PC?  (AKA - Can I put a new systemboard in my OEM PC?) Few of us are both IT and legal experts but we all have our own views of Microsoft's licensing rules and how they apply.  There are…
cPanel is a Unix based web hosting control panel that provides a graphical interface and automation tools designed to simplify the process of hosting a web site. cPanel utilizes a 3 tier structure that provides functionality for administrators, rese…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now