Tip: Run a free scan for common Windows errors ad

re: Windows task manager closes within seconds Thursday, March 6, 2003 at 7:40 am Posted by Ricer46 (23823 messages posted) Are you using anti-virus software? If not, that must be dealt with immediately. You should also dwonload SpyBot Search and Destroy - it definitely sounds like you have some spyware loaded. This is only a start. On Thursday, March 6, 2003 at 7:28 am, Nagaraj wrote: >When I try to open the Task Manager, it opens and closes within seconds and i cannot >stop any process or do anything with it. Do any others ahaving the same problem ? >And also whenever i reboot my machine ,In IE the default web site keeps changing,one >tiime it was hirosh.tk and other time was hackers.com..I think some virus is installed >on my machine.And i can't catch the damn thing as i can't even open my task manager >to detect what processes are running.Any idea what this is all about? > >Thanks in advance >Nagaraj. [Reply or follow-up to this message] re: Windows task manager closes within seconds Thursday, March 6, 2003 at 7:48 am Posted by Nagaraj (4 messages posted) Thanks Ricer.No i am not using an anti-virus software at this time.I need to get one.I will download SPYBOT and see if it eliminates the problem.Any more pointers would be appreciated. On Thursday, March 6, 2003 at 7:40 am, Ricer46 wrote: >Are you using anti-virus software? If not, that must be dealt with immediately. You >should also dwonload SpyBot Search and Destroy - it definitely sounds like you have >some spyware loaded. This is only a start. > > [Reply or follow-up to this message] re: Windows task manager closes within seconds Thursday, March 6, 2003 at 9:00 am Posted by Ricer46 (23823 messages posted) The virus software is ABSOLUTELY critical in the world we live in today. Furthermore if you are using a broadband connection, it is absolutely critical that you are running an adequate firewall. There are people with a lot of time on their hands whose hobby is to find vulnerable computers and to see how much havoc they can wreak. To test your computers vulnerability go here: https://grc.com/x/ne.dll?bh0bkyd2 On Thursday, March 6, 2003 at 7:48 am, Nagaraj wrote: >Thanks Ricer.No i am not using an anti-virus software at this time.I need to get >one.I will download SPYBOT and see if it eliminates the problem.Any more pointers >would be appreciated. > > > [Reply or follow-up to this message] re: Windows task manager closes within seconds Thursday, March 6, 2003 at 4:55 pm Posted by mark_f (205 messages posted) You could have the Yaha virus, because I remember that behaviour on another XP system I fixed a while ago. On Thursday, March 6, 2003 at 7:28 am, Nagaraj wrote: >When I try to open the Task Manager, it opens and closes within seconds and i cannot >stop any process or do anything with it. Do any others ahaving the same problem ? >And also whenever i reboot my machine ,In IE the default web site keeps changing,one >tiime it was hirosh.tk and other time was hackers.com..I think some virus is installed >on my machine.And i can't catch the damn thing as i can't even open my task manager >to detect what processes are running.Any idea what this is all about? > >Thanks in advance >Nagaraj. [Reply or follow-up to this message] re: Windows task manager closes within seconds Thursday, March 6, 2003 at 9:22 pm Posted by Nagaraj (4 messages posted) It was the yaha virus ..i did get rid of it.. thanks, On Thursday, March 6, 2003 at 4:55 pm, mark_f wrote: >You could have the Yaha virus, because I remember that behaviour on another XP system >I fixed a while ago. > > [Reply or follow-up to this message] re: Windows task manager closes within seconds Saturday, July 5, 2003 at 7:39 am Posted by Dave Baxter (1 messages posted) I do not have the Yaha Virus and I am still having the task manager closes within a few seconds and msconfig doen't open as well. Sure hope to find out how to fix this error! On Thursday, March 6, 2003 at 4:55 pm, mark_f wrote: >You could have the Yaha virus, because I remember that behaviour on another XP system >I fixed a while ago. > > [Reply or follow-up to this message] re: Windows task manager closes within seconds Saturday, July 5, 2003 at 3:22 pm Posted by Dave (2 messages posted) I also have this problem. Just started today. It started after I tried to print a large file and cancelled printing. Several restarts later, still having the problem. On Saturday, July 5, 2003 at 7:39 am, Dave Baxter wrote: >I do not have the Yaha Virus and I am still having the task manager closes within >a few seconds and msconfig doen't open as well. Sure hope to find out how to fix >this error! > > [Reply or follow-up to this message] re:FIX HERE Saturday, July 5, 2003 at 3:46 pm Posted by Dave (2 messages posted) OK, I found the virus using this 3rd-party process viewer (the virus shuts down Task Mgr, Regedit, Msconfig, etc). http://download.com.com/3000-2094-10155399.html?tag=lst-0-1 The process was called "beta.exe." After deleting it, I was able to open TaskMgr, etc. You will also want to delete c:\windows\system32\beta. On Thursday, March 6, 2003 at 4:55 pm, mark_f wrote: >You could have the Yaha virus, because I remember that behaviour on another XP system >I fixed a while ago. > > [Reply or follow-up to this message] re: re:FIX HERE Saturday, July 5, 2003 at 10:36 pm Posted by Rich (1 messages posted) I am having the exact same problem as you were. However, I downloaded and ran the program you linked, but there is no beta.exe process running. Could it be anything else by chance? On Saturday, July 5, 2003 at 3:46 pm, Dave wrote: >OK, I found the virus using this 3rd-party process viewer (the virus shuts down Task >Mgr, Regedit, Msconfig, etc). > >http://download.com.com/3000-2094-10155399.html?tag=lst-0-1 > >The process was called "beta.exe." After deleting it, I was able to open TaskMgr, >etc. You will also want to delete c:\windows\system32\beta. > > > > [Reply or follow-up to this message] re: re:FIX HERE Monday, July 7, 2003 at 5:00 pm Posted by Tatu (1 messages posted) Explorer64.exe. Remember to clear it from your registry too. On Saturday, July 5, 2003 at 10:36 pm, Rich wrote: >I am having the exact same problem as you were. However, I downloaded and ran the >program you linked, but there is no beta.exe process running. Could it be anything >else by chance? [Reply or follow-up to this message] re: re:FIX HERE Thursday, July 10, 2003 at 11:38 am Posted by carlo (2 messages posted) Hi everybody. i'm also having problem with the same symptoms but my anti-virus is not detecting it. i even tried to remove it manually(from my anti-virus site), still no work. could it be possibly another file? thanks in advance! On Monday, July 7, 2003 at 5:00 pm, Tatu wrote: >Explorer64.exe. Remember to clear it from your registry too. > > [Reply or follow-up to this message] re: re:FIX HERE Friday, July 11, 2003 at 6:03 pm Posted by Jashin (2 messages posted) I too am having these problems. I've tried everything here that has been suggested, and no go. Any help would be very appreciated. On Thursday, July 10, 2003 at 11:38 am, carlo wrote: >Hi everybody. i'm also having problem with the same symptoms but my anti-virus is >not detecting it. i even tried to remove it manually(from my anti-virus site), still >no work. could it be possibly another file? >thanks in advance! > > [Reply or follow-up to this message] re: re:FIX HERE Sunday, July 13, 2003 at 12:23 pm Posted by esotericsean (2 messages posted) ok, i'm having the same problem. i've tried everything on this site, and lots of stuff from other sites, and nothing seems to be working.. On Friday, July 11, 2003 at 6:03 pm, Jashin wrote: >I too am having these problems. I've tried everything here that has been suggested, >and no go. Any help would be very appreciated. > > [Reply or follow-up to this message] re: re:FIX HERE Sunday, July 13, 2003 at 4:44 pm Posted by shabado (2 messages posted) Well I also are having these same problems and I also have tried everything that has been suggested here and on other sites and now I don't know what to do next. Does anyone else with this problem happen to be using Kazaa? I am wondering if it has something to do with it. Any help would be greatly appreciated. Thanks On Sunday, July 13, 2003 at 12:23 pm, esotericsean wrote: >ok, i'm having the same problem. i've tried everything on this site, and lots of >stuff from other sites, and nothing seems to be working.. > > [Reply or follow-up to this message] re: re:FIX HERE Sunday, July 13, 2003 at 8:25 pm Posted by esotericsean (2 messages posted) hmm, i've used kazaa for a long time (among other things), i don't think that's the problem, though, unless you downloaded somethin from it that's causing it, but then that's just you.. this thing is seriously pissing me off, though, and it seems like there's lot sof people with this problem on this "forum." it's weird that i can't find much about it online other than here, though.. On Sunday, July 13, 2003 at 4:44 pm, shabado wrote: >Well I also are having these same problems and I also have tried everything that >has been suggested here and on other sites and now I don't know what to do next. >Does anyone else with this problem happen to be using Kazaa? I am wondering if it >has something to do with it. Any help would be greatly appreciated. Thanks > > > [Reply or follow-up to this message] I Found Your Fix, Dave Sunday, July 13, 2003 at 10:22 pm Posted by Lloyd Reynolds (2 messages posted) Dave, download that software, and there'll be a program called something like "tskmngr.exe", close it, and it should then work. [Reply or follow-up to this message] I Found Your Real Fix, Dave Sunday, July 13, 2003 at 10:42 pm Posted by Lloyd Reynolds (2 messages posted) Okay, go to C:\Windows\System32 and delete a file called TSKMNGR32.EXE (that's pretty close), and then that should be the end of your problems, just restart the system after that. [Reply or follow-up to this message] I dunno what it is, but click here for the solution! Wednesday, July 16, 2003 at 3:16 am Posted by TagDaze (29 messages posted) I had exactly the same, and I solved it! Here's how to do it, if you get past step 3. ;-) Step 1: Download Process Viewer from Download.com Step 2: Restarted in Safe Mode Step 3: In Safe Mode, push CTRL-ALT-DEL for the Task Manager, it should work. Step 4: Write the names of all processes down. Step 5: Restart like usual. Step 6: Start Process Viewer. Step 7: Look for a process that isn't in the Safe Mode list. Step 8: Shut it down. Step 9: Press CTRL-ALT-DEL to test if the problem is solved. If not, go back to Step 7. Step 10: Do a file-search for the process name you just shut down, and delete it! KILL KILL KILL!!! Step 11: Do a register search for the process name you just shut down, and delete all keys! (Except for the search-key) Step 12: Reboot! I had the luck that my problem was the 1st one in the list. It was called CBRSS.EXE, which looks a lot like CSRSS.EXE! I used the search function and deleted the CBRSS.EXE, and a prefetch file with cbrss in the name. Here's what my registery search came up with. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Well, the problem is solved now... The registery said it was System Restore Settings, but jeez, I dunno... I don't have any problems now... On Thursday, March 6, 2003 at 7:28 am, Nagaraj wrote: >When I try to open the Task Manager, it opens and closes within seconds and i cannot >stop any process or do anything with it. Do any others ahaving the same problem ? >And also whenever i reboot my machine ,In IE the default web site keeps changing,one >tiime it was hirosh.tk and other time was hackers.com..I think some virus is installed >on my machine.And i can't catch the damn thing as i can't even open my task manager >to detect what processes are running.Any idea what this is all about? > >Thanks in advance >Nagaraj. [Reply or follow-up to this message] re: I dunno what it is, but click here for the solution! Wednesday, July 16, 2003 at 9:56 am Posted by shabado (2 messages posted) Well I ran Norton Anti Virus and it came up with a virus on the file called cmd32.exe. It deleted the file and now I have no problems whatsoever. I believe that the file was located in the system32 folder. Search for the file and if you have it delete it and then you will also have to change some registry to prevent an error everytime you start windows. If you don't know how to do that just ask. Dont worry about deleting it cmd32 is not a valid windows file but cmd.exe is the real valid windows file. I am so glad that this problem is finally over with. On Wednesday, July 16, 2003 at 3:16 am, TagDaze wrote: >I had exactly the same, and I solved it! Here's how to do it, if you get past step >3. ;-) > >Step 1: Download Process Viewer from Download.com >Step 2: Restarted in Safe Mode >Step 3: In Safe Mode, push CTRL-ALT-DEL for the Task Manager, it should work. >Step 4: Write the names of all processes down. >Step 5: Restart like usual. >Step 6: Start Process Viewer. >Step 7: Look for a process that isn't in the Safe Mode list. >Step 8: Shut it down. >Step 9: Press CTRL-ALT-DEL to test if the problem is solved. If not, go back to Step >7. >Step 10: Do a file-search for the process name you just shut down, and delete it! >KILL KILL KILL!!! >Step 11: Do a register search for the process name you just shut down, and delete >all keys! (Except for the search-key) >Step 12: Reboot! > >I had the luck that my problem was the 1st one in the list. It was called CBRSS.EXE, >which looks a lot like CSRSS.EXE! I used the search function and deleted the CBRSS.EXE, >and a prefetch file with cbrss in the name. >Here's what my registery search came up with. > >HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce. > >HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run > >Well, the problem is solved now... The registery said it was System Restore Settings, >but jeez, I dunno... I don't have any problems now... > > [Reply or follow-up to this message] re: I dunno what it is, but click here for the solution! Wednesday, July 16, 2003 at 2:07 pm Posted by TagDaze (29 messages posted) I guess it just takes a process and changes a letter, or adds 32 or something, huh? Could be really confusing... [Reply or follow-up to this message] re: I dunno what it is, but click here for the solution! Wednesday, July 16, 2003 at 10:21 pm Posted by Scott (1 messages posted) I had the same problem. The filename was different in my case. The offending process was called IMN32.EXE. It was listed as a Generic Host Process for WIN32 Services. According to ZoneAlrm, it was trying to communicate from my system to another on the Internet. I used Process Viewer to kill the process and then RegEDIT to delete the multiple entries. I have the latest Norton Anti-Virus installed, it did not detect or correct the problem. On Wednesday, July 16, 2003 at 2:07 pm, TagDaze wrote: >I guess it just takes a process and changes a letter, or adds 32 or something, huh? >Could be really confusing... [Reply or follow-up to this message] re: I dunno what it is, but click here for the solution! Saturday, July 19, 2003 at 6:34 pm Posted by Mark D (1 messages posted) I found the bastard. I don't know if it will help some of you, but the exe is VGA4R32.exe. Down load PRCViewe from... http://download.com.com/3000-2094-10155399.html?tag=lst-0-1 Run this after install, find the exe and delete the above vga4r32.exe crap. Let me know if this helps people. Thanks. On Wednesday, July 16, 2003 at 10:21 pm, Scott wrote: >I had the same problem. The filename was different in my case. The offending process >was called IMN32.EXE. It was listed as a Generic Host Process for WIN32 Services. >According to ZoneAlrm, it was trying to communicate from my system to another on >the Internet. I used Process Viewer to kill the process and then RegEDIT to delete >the multiple entries. I have the latest Norton Anti-Virus installed, it did not detect >or correct the problem. > > [Reply or follow-up to this message] i also had this problem and the file was called..... Sunday, July 20, 2003 at 9:42 pm Posted by Zach (1 messages posted) I had the same problem and read all this and my file that was infected was windll.exe, it was also a system restore point thing in registry, just thought id try to help [Reply or follow-up to this message] re: i also had this problem and the file was called..... Wednesday, July 23, 2003 at 1:15 pm Posted by Larry (6 messages posted) On Sunday, July 20, 2003 at 9:42 pm, Zach wrote: >I had the same problem and read all this and my file that was infected was windll.exe, >it was also a system restore point thing in registry, just thought id try to help The one that caused me the problem was wincfg.scr. Everthing was back to normal after deleting it from the C drive and registry. The Process Viewer was a great help and so were the suggested solutions by some posters in this thread. Many thanks to all of you. [Reply or follow-up to this message] re: i also had this problem and the file was called..... Tuesday, July 29, 2003 at 11:25 pm Posted by n0n4n (1 messages posted) in my computer the file was called kill.exe how come the virus has so many name ? Hopefully, i can kill the virus by using the software thx guys for ur help [Reply or follow-up to this message] re: I dunno what it is, but click here for the solution! Wednesday, July 30, 2003 at 12:17 pm Posted by Test (22 messages posted) Thanks. Mine was wincfg.scr, and this process got it as well. On Wednesday, July 16, 2003 at 3:16 am, TagDaze wrote: >I had exactly the same, and I solved it! Here's how to do it, if you get past step >3. ;-) > >Step 1: Download Process Viewer from Download.com >Step 2: Restarted in Safe Mode >Step 3: In Safe Mode, push CTRL-ALT-DEL for the Task Manager, it should work. >Step 4: Write the names of all processes down. >Step 5: Restart like usual. >Step 6: Start Process Viewer. >Step 7: Look for a process that isn't in the Safe Mode list. >Step 8: Shut it down. >Step 9: Press CTRL-ALT-DEL to test if the problem is solved. If not, go back to Step >7. >Step 10: Do a file-search for the process name you just shut down, and delete it! >KILL KILL KILL!!! >Step 11: Do a register search for the process name you just shut down, and delete >all keys! (Except for the search-key) >Step 12: Reboot! > >I had the luck that my problem was the 1st one in the list. It was called CBRSS.EXE, >which looks a lot like CSRSS.EXE! I used the search function and deleted the CBRSS.EXE, >and a prefetch file with cbrss in the name. >Here's what my registery search came up with. > >HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce. > >HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run > >Well, the problem is solved now... The registery said it was System Restore Settings, >but jeez, I dunno... I don't have any problems now... > > [Reply or follow-up to this message] Nooo! Listen up! Thursday, July 31, 2003 at 4:34 am Posted by TagDaze (29 messages posted) Nooo!!! The virus (if it is one) HAS NO COMMON NAME!!! It copies the name of one of your system processes, AND CHANGES ONE LETTER OR PUTS 32 BEHIND IT!! It has NO COMMON NAME WHATSOEVER!!! Check my post! It has the REAL solution in it! The way to identify the file, how to solve it, etc! Check it here! On Sunday, July 13, 2003 at 10:42 pm, Lloyd Reynolds wrote: >Okay, go to C:\Windows\System32 and delete a file called TSKMNGR32.EXE (that's pretty >close), and then that should be the end of your problems, just restart the system >after that. [Reply or follow-up to this message] re: I dunno what it is, but click here for the solution! Thursday, July 31, 2003 at 6:24 pm Posted by Mark Weedon (1 messages posted) Thx for the advice it worked for me,i didnt even need to go to my registry either,my virus was the backdoor.litmus.203. The exe file was called wincfg.scr and was in system32 folder,it appeared to be a quicktime file,thx again your a star!!!! On Wednesday, July 16, 2003 at 3:16 am, TagDaze wrote: >I had exactly the same, and I solved it! Here's how to do it, if you get past step >3. ;-) > >Step 1: Download Process Viewer from Download.com >Step 2: Restarted in Safe Mode >Step 3: In Safe Mode, push CTRL-ALT-DEL for the Task Manager, it should work. >Step 4: Write the names of all processes down. >Step 5: Restart like usual. >Step 6: Start Process Viewer. >Step 7: Look for a process that isn't in the Safe Mode list. >Step 8: Shut it down. >Step 9: Press CTRL-ALT-DEL to test if the problem is solved. If not, go back to Step >7. >Step 10: Do a file-search for the process name you just shut down, and delete it! >KILL KILL KILL!!! >Step 11: Do a register search for the process name you just shut down, and delete >all keys! (Except for the search-key) >Step 12: Reboot! > >I had the luck that my problem was the 1st one in the list. It was called CBRSS.EXE, >which looks a lot like CSRSS.EXE! I used the search function and deleted the CBRSS.EXE, >and a prefetch file with cbrss in the name. >Here's what my registery search came up with. > >HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce. > >HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run > >Well, the problem is solved now... The registery said it was System Restore Settings, >but jeez, I dunno... I don't have any problems now... > > [Reply or follow-up to this message] I know what this is. I know how to fix it. Monday, August 4, 2003 at 11:57 pm Posted by knigitz (1 messages posted) A lot of people have been posting about their task manager, regedit or msconfig closing automatically as soon as they open. This should help you all. - It is a worm, that's for sure. - There is no common name, but the random name scheme it uses are system files and it either: - changes one letter (csrss.exe -> cscss.exe) - or adds 32 to the end of the filename (msconfig.exe -> msconfig32.exe) How to find out what file is our trojan.. 1. Copy task manager to desktop and rename to: helpme.exe 2. Open helpme.exe and search for processes that fit the random name scheme and close that process. Open something that was closing previously and see if it still closes. When it stops closing, that file is our trojan! Scan your registry and harddrives for this filename and delete all traces of this file. You may also want to check your startup folder in your start menu, make sure hidden and system files are visible. Delete anything that doesn't belong and scan your registry and harddrives for traces of these files as well. This should work, at it has for me after numerous reboots. It still recreates the trojan file, but no longer loads it. That is a good sign, but I have no clue why it still makes the file. This file does send information to computers accross the internet, and most likely spreads through email clients and file transfer. it also may spread accross networks and webpages. i'm not sure exactly how it spreads, but these all may be valid. [Reply or follow-up to this message] re: I dunno what it is, but click here for the solution! Tuesday, August 5, 2003 at 2:01 am Posted by Rellik (3 messages posted) I had this same problem, it started tonight and I went straight to google, this site was a life saver! I downloaded Process Viewer and used the method from knigitz, didn't have to restart in safe mode, just ran process viewer and found a file that followed the naming scheme, turned out to be msconfig32.exe, nasty little worm this one was, glad i'm rid of it though, thanks again. On Thursday, July 31, 2003 at 6:24 pm, Mark Weedon wrote: >Thx for the advice it worked for me,i didnt even need to go to my registry either,my >virus was the backdoor.litmus.203. The exe file was called wincfg.scr and was in >system32 folder,it appeared to be a quicktime file,thx again your a star!!!! > > [Reply or follow-up to this message] re: I dunno what it is, but click here for the solution! Tuesday, August 5, 2003 at 12:16 pm Posted by Edge (1 messages posted) This is getting irritating. You all have been a great help in finding te offending process using Process Viewer and all. I close msconfig32.exe (thats the one I found), everything works great. I then proceed to delete all traces of it from my registry and hardrive, but the file comes back every time I restart my computer and starts causing the same problems. On Tuesday, August 5, 2003 at 2:01 am, Rellik wrote: >I had this same problem, it started tonight and I went straight to google, this site >was a life saver! I downloaded Process Viewer and used the method from knigitz, >didn't have to restart in safe mode, just ran process viewer and found a file that >followed the naming scheme, turned out to be msconfig32.exe, nasty little worm this >one was, glad i'm rid of it though, thanks again. > > [Reply or follow-up to this message] re: I dunno what it is, but click here for the solution! Tuesday, August 5, 2003 at 3:43 pm Posted by Kevin (1 messages posted) I did everything I was supposed to do with safe mode, and process viewer, etc, and I even found what file was causing it (for me it was msconfig32.exe) but when I try to search for it, I find no results. Whats going on? Someone help, please! [Reply or follow-up to this message] re: re:FIX HERE Tuesday, August 5, 2003 at 6:52 pm Posted by Peter Nolen (1 messages posted) Another one: winconfig32 or something to that extent. Thanks for the help. On Sunday, July 13, 2003 at 12:23 pm, esotericsean wrote: >ok, i'm having the same problem. i've tried everything on this site, and lots of >stuff from other sites, and nothing seems to be working.. > > [Reply or follow-up to this message] Thanks to all of you who posted here! Thursday, August 7, 2003 at 1:27 am Posted by Ed J (1 messages posted) This virus is spreaidng quickly, hopefully it won't return to my system. I happened to pick it up from newsgroups. Anyway I just wanted to say thanks to you guys who posted here, it's been a life saver. This worm is really annoying. I had wincfg.scr, process viewer killed it and now i'm scanning my system. Again thanks guys! [Reply or follow-up to this message] bkdr_spybot.a Thursday, August 7, 2003 at 10:58 am Posted by Jack (1 messages posted) Hi, My process also was wincfg.scr but the virus is apparently bkdr_spybot.a. Remove references to WINCFG.SCR from the registry. Just my $.02 On Thursday, July 31, 2003 at 6:24 pm, Mark Weedon wrote: >Thx for the advice it worked for me,i didnt even need to go to my registry either,my >virus was the backdoor.litmus.203. The exe file was called wincfg.scr and was in >system32 folder,it appeared to be a quicktime file,thx again your a star!!!! > > [Reply or follow-up to this message] re: I dunno what it is, but click here for the solution! Thursday, August 7, 2003 at 9:20 pm Posted by Alvy (1 messages posted) Hey I had the same problem also but i figured it out for mine. I started off with the msconfig32 and had tried the first set of instructions people gave. Then restarted it was back but had changed names. Anyways the way i fixed it was by using Process Viewer Right click on the virus and go down to startup info in the command line there was the start up info for the virus plus a second command to another exe file. Find that second file and delete it first. Kill the running virus and then delete it also. Then finally clean out your registry. Hopefully that works for you too. On Tuesday, August 5, 2003 at 12:16 pm, Edge wrote: >This is getting irritating. You all have been a great help in finding te offending >process using Process Viewer and all. I close msconfig32.exe (thats the one I found), >everything works great. I then proceed to delete all traces of it from my registry >and hardrive, but the file comes back every time I restart my computer and starts >causing the same problems. > > [Reply or follow-up to this message] re: I dunno what it is, but click here for the solution! Friday, August 8, 2003 at 12:41 pm Posted by Pat (1 messages posted) Thanks to everybody who's posted here. I had the "msconfig32.exe" file version, which had me pulling my hair out for a few hours. It appears to be gone now, thank goodness! One thing I might add for those that may still be having problems - don't forget to DELETE the file from your system32 folder *after* "killing" it using process viewer. I know that might seem obvious to most people, but I kept thinking "kill" meant it was being deleted. Kill only stops it from running during that session. My bad. Anyhoo, thank you to everybody once again. You guys were awesome! [Reply or follow-up to this message] re: Thanks to all of you who posted here! Friday, August 8, 2003 at 2:59 pm Posted by d52 (1 messages posted) You could also make a quick check in the start menu's startup folder. Mine decided to install itself there. The executable filename started with a 'w'. I couldn't remember the rest, I was too anxious to finally get rid of it. [Reply or follow-up to this message] re: Nooo! Listen up! Saturday, August 9, 2003 at 6:39 am Posted by Mike (5 messages posted) I did what you said, But I am a computer guru so I could tell which one it was, and therefore didnt have to restart into safe mode, It was something with 35 attached to the filename. Apparently your way is definetly the right way. On Thursday, July 31, 2003 at 4:34 am, TagDaze wrote: >Nooo!!! > >The virus (if it is one) HAS NO COMMON NAME!!! It copies the name of one of your >system processes, AND CHANGES ONE LETTER OR PUTS 32 BEHIND IT!! > >It has NO COMMON NAME WHATSOEVER!!! > >Check my post! It has the REAL solution in it! The way to identify the file, how >to solve it, etc! Check it here! > > [Reply or follow-up to this message] 35 O_o Sunday, August 10, 2003 at 3:06 am Posted by TagDaze (29 messages posted) Gd... there was a 35 behind it? Does 35 mean anything, then, like 32? Groetjes uit Hillywood TagDaze ;-) On Saturday, August 9, 2003 at 6:39 am, Mike Haas wrote: >I did what you said, But I am a computer guru so I could tell which one it was, and >therefore didnt have to restart into safe mode, It was something with 35 attached >to the filename. Apparently your way is definetly the right way. > > [Reply or follow-up to this message] re: Windows task manager closes within seconds Sunday, August 10, 2003 at 12:25 pm Posted by JJ (1 messages posted) I had followed everyone's advice in this entire thread..but nothing helped (to rid the problems, i got rid of a lot of the spyware though), so i had to do a windows restore point..2 weeks earlier.. On Thursday, March 6, 2003 at 7:28 am, Nagaraj wrote: >When I try to open the Task Manager, it opens and closes within seconds and i cannot >stop any process or do anything with it. Do any others ahaving the same problem ? >And also whenever i reboot my machine ,In IE the default web site keeps changing,one >tiime it was hirosh.tk and other time was hackers.com..I think some virus is installed >on my machine.And i can't catch the damn thing as i can't even open my task manager >to detect what processes are running.Any idea what this is all about? > >Thanks in advance >Nagaraj. [Reply or follow-up to this message] re: 35 O_o Sunday, August 10, 2003 at 6:09 pm Posted by Mike (5 messages posted) I honestly dont know, but I figured out what is what and it did have the 35: MSCONFIG35.EXE On Sunday, August 10, 2003 at 3:06 am, TagDaze wrote: >Gd... there was a 35 behind it? Does 35 mean anything, then, like 32? > >Groetjes uit Hillywood > >TagDaze ;-) > > > [Reply or follow-up to this message] re: Windows task manager closes within seconds Wednesday, August 13, 2003 at 1:25 pm Posted by ko (1 messages posted) I recently came across same type of problem w/ Windows XP. Task manager and regedit close immedately. You can start Task Manager and regedit by copying the taskmgr.exe and regedit.exe to a new location and renaming them to progmgr.exe and progedit.exe. Then execute them from the new location with the new filenames. I found the problem to be a program random generated program running ... like jbsdfghtyz.exe. I looked this up in the registry and found the file listed under MSCONFIG in HKLM/Software/Windows/CurrentVersion/RunOnce/ and in HKCU/Software/Windows/CurrentVersion/RunOnce/. I deleted the entry and the problem went away. But then it came back with a different filename. I still do not know the cause but am working on it. On Thursday, March 6, 2003 at 7:48 am, Nagaraj wrote: >Thanks Ricer.No i am not using an anti-virus software at this time.I need to get >one.I will download SPYBOT and see if it eliminates the problem.Any more pointers >would be appreciated. > > > [Reply or follow-up to this message] Tip: Use one of the [Reply or follow-up to this message] links above to add a message to this thread Search this forum Start a new thread on a different subject Report abuse of the forum Return to the Windows XP Discussion Forum