CDROM-Guide forums

Go Back   CDROM-Guide forums > Operating System Forums > Windows XP
FAQ Calendar Mark Forums Read
Open   CSec   Data   DevDrv   CoOp   Audio   CDRW   CDG   VCD   DVD   HD DVD   Mac   VGB   PS2   DC   Xbox  


 
 
Thread Tools Display Modes
  #1  
Old Nov 23, 2003, 09:28 AM
crichton crichton is offline
Junior Member
 
Join Date: May 2002
Posts: 31
Default programs load then disappear [; ; winXP]

sponsored links

 
Help
I think ive caught a virus but I am unable to run my antivirous software.
When I log on it takes a bit longer than usual to stop loading.
My anti virus icon is in the try on the bottom right but with a red x on it.
After a few seconds both Norton AV and zone alarm icons in the bottom right tray disappear.
If I try to get to the net I get, can not connect or in MSN’s case can not connect because you are behind a firewall.
If zone alarm is running then this is true as zone alarm is set to ask each time something wants to connect to the net.
But there is no icon in the tray.

If I go to start-programs-zonealarn and start zone alarm, it comes up but the window only stays on the screen for a few seconds then disappears as soon as I move the mouse towards it.
The same thing happens to Norton.
I have even tried 'start run msconfig’, but after I click on the start tab the window disappears.
Same with regedit the window does not stay on the screen long enough to do any thing.

I read other posts, and downloaded cleaner and spybot.

The same thing happens to cleaner, the window comes on the screen but disappears before I can click on start.

spybot works ok and found 22 items. But not solved the problem.

I was able to run Norton under safe mode, but it did not find anything.

I tried a restore and found that there were NO restore points.
But there should have been as I made some last month.

I have been able to get on the net by uninstalling zone alarm.
But with out a filewall I have only logged on to send this post.


It seams that all my vital programs loads then are hidden so I have no access to them.

I can play games and run other programs ok, e.g. power dvd, nero, word, age of empires, ect.

When I do a 'ctrl alt del' windows task manger says 24 processes running at 100% CPU usage.
svchost.exe seams to be using most of the cpu. This is present several times but only the system version is using the CPU.

What process MUST I leave running so I can close the rest?

thanks

I am running xp pro and i do let it do updates now and again.
  #2  
Old Nov 23, 2003, 10:59 AM
gooner gooner is offline
Veteran
 
Join Date: Jan 2002
Location: London, UK
Posts: 1,795
Default

Down load Hijack This and then run it and post your log back on here - ***********.spywareinfo.com/~merijn/files/hijackthis.zip
  #3  
Old Nov 23, 2003, 11:50 AM
Harry O Harry O is offline
Veteran
 
Join Date: May 2000
Posts: 2,620
Default

Turning off services at this point is unlikely to solve your problem. This indeed sounds like a virus. Can you get here ********security.symantec.com/sscv6/vc_scan.asp?langid=ie&venid=sym&plfid=23&pkj=DHFIK PGFRHUUEOLULNP&vc_scanstate=2 and run a scan?
  #4  
Old Nov 23, 2003, 11:50 AM
crichton crichton is offline
Junior Member
 
Join Date: May 2002
Posts: 31
Default

Logfile of HijackThis v1.97.7
Scan saved at 16:40:14, on 23/11/2003
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\winmur32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe
C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Microsoft Office\Office\WINWORD.EXE
C:\Program Files\Netscape\Netscape 6\netscp6.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\m\My Documents\CLEANERS\HijackThis.exe

Last edited by crichton; Nov 27, 2003 at 05:54 PM.
  #5  
Old Nov 23, 2003, 04:36 PM
catkin catkin is offline
Member
 
Join Date: Oct 2001
Location: Bristol, UK
Posts: 73
Default

C:\WINDOWS\System32\winmur32.exe


Could be the WORM_AGOBOT.AR Virus

Info here:

***********.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_AGOBOT.AR&VSect=T

Last edited by catkin; Nov 23, 2003 at 05:06 PM.
  #6  
Old Nov 23, 2003, 04:49 PM
gooner gooner is offline
Veteran
 
Join Date: Jan 2002
Location: London, UK
Posts: 1,795
Default

catkin - you've hit the nail on the head there - looking at the write up as well it would explain the difficulties chrichton has been having


Good Find m8
 

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Cannot delete programs!!! [; ; winXP] Capcomshimaz Windows XP 2 Nov 24, 2003 01:50 PM
Cant run some programs..have to run as Admin ?? [; ; winXP] Psx_gamer Windows XP 1 Oct 02, 2003 02:35 AM
XP Pro: Remove program from Add/Remove Programs.... [; ; winXP] wigwam salesman Windows XP 7 Sep 12, 2003 03:24 AM
where are this programs located in windows XP? [; ; winXP] marimo Windows XP 2 Sep 08, 2002 07:58 AM
cant load saved games on gta 3 [; ; winXP] x_ecutioners Windows XP 8 Jul 21, 2002 03:07 AM


All times are GMT -5. The time now is 01:54 AM.



Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2018, Jelsoft Enterprises Ltd.
Copyright © 1996-2009 CDROM-Guide.com. All rights reserved