PDA

View Full Version : from Start>Run > window opens for 1 sec then closes


Fulke Greville
December 6th 03, 01:36 PM
Hi,
Got a bit of a wierd one which after looking around trying to see if
anyone or MS have anything on it couldnt find anything so am asking on this
list.

When I select START >Run
then either of following
> msconfig
OR
> regedit
the window opens up andstays for about 1 second then closes, repaeting the
command gives same result.
If I try "sysedit" at run line in lieu , it stays open as it should.
Also
If I hit CTRL + ALT + DEL when I want to end a task the window only stays
open for 1 -2 seconds and closes

Any one know oif this problem and a possible fix or a url to g o to to read
about it?
regards
Fulke
***NOTE return address is ficticious please reply to newsgroup

Will Denny
December 6th 03, 01:36 PM
Hi

This is a posting from MVP Kelly:

**This worm disables NAV, Msconfig, Regedit and Task Manager:
http://www.bitdefender.com/bd/site/virusinfo.php?menu_id=3D1&v_id=3D114

And this one:
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.h=
tml

Rename regedit.exe to regedit.com then:

Download then Merge the edit on line 251 then delete all the files =
mentioned
in the above link. http://www.kellys-korner-xp.com/xp_tweaks.htm

--=20
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows=AE XP]**

Will

"Fulke Greville" > wrote in message =
...
> Hi,
> Got a bit of a wierd one which after looking around trying to see if
> anyone or MS have anything on it couldnt find anything so am asking on =
this
> list.
>=20
> When I select START >Run
> then either of following
> > msconfig
> OR
> > regedit
> the window opens up andstays for about 1 second then closes, repaeting =
the
> command gives same result.
> If I try "sysedit" at run line in lieu , it stays open as it should.
> Also
> If I hit CTRL + ALT + DEL when I want to end a task the window only =
stays
> open for 1 -2 seconds and closes
>=20
> Any one know oif this problem and a possible fix or a url to g o to to =
read
> about it?
> regards
> Fulke
> ***NOTE return address is ficticious please reply to newsgroup
>=20
>=20


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.506 / Virus Database: 303 - Release Date: 01/08/2003

Fulke Greville
December 6th 03, 01:36 PM
Thanks Will ....that was fast 15 minutes flat ...great service.
Fulke
"Will Denny" > wrote in message
...
Hi

This is a posting from MVP Kelly:

**This worm disables NAV, Msconfig, Regedit and Task Manager:
http://www.bitdefender.com/bd/site/virusinfo.php?menu_id=1&v_id=114

And this one:
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html

Rename regedit.exe to regedit.com then:

Download then Merge the edit on line 251 then delete all the files mentioned
in the above link. http://www.kellys-korner-xp.com/xp_tweaks.htm

--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]**

Will

"Fulke Greville" > wrote in message
...
> Hi,
> Got a bit of a wierd one which after looking around trying to see if
> anyone or MS have anything on it couldnt find anything so am asking on
this
> list.
>
> When I select START >Run
> then either of following
> > msconfig
> OR
> > regedit
> the window opens up andstays for about 1 second then closes, repaeting the
> command gives same result.
> If I try "sysedit" at run line in lieu , it stays open as it should.
> Also
> If I hit CTRL + ALT + DEL when I want to end a task the window only stays
> open for 1 -2 seconds and closes
>
> Any one know oif this problem and a possible fix or a url to g o to to
read
> about it?
> regards
> Fulke
> ***NOTE return address is ficticious please reply to newsgroup
>
>


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.506 / Virus Database: 303 - Release Date: 01/08/2003

Will Denny
December 6th 03, 01:36 PM
Glad to help, Fulke.

Will

"Fulke Greville" > wrote in message =
...
> Thanks Will ....that was fast 15 minutes flat ...great service.
> Fulke
> "Will Denny" > wrote in message
> ...
> Hi
>=20
> This is a posting from MVP Kelly:
>=20
> **This worm disables NAV, Msconfig, Regedit and Task Manager:
> =
http://www.bitdefender.com/bd/site/virusinfo.php?menu_id=3D1&v_id=3D114
>=20
> And this one:
> =
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.h=
tml
>=20
> Rename regedit.exe to regedit.com then:
>=20
> Download then Merge the edit on line 251 then delete all the files =
mentioned
> in the above link. http://www.kellys-korner-xp.com/xp_tweaks.htm
>=20
> --=20
> All the Best,
> Kelly
>=20
> MS-MVP Win98/XP
> [AE-Windows=AE XP]**
>=20
> Will
>=20
> "Fulke Greville" > wrote in message
> ...
> > Hi,
> > Got a bit of a wierd one which after looking around trying to see if
> > anyone or MS have anything on it couldnt find anything so am asking =
on
> this
> > list.
> >
> > When I select START >Run
> > then either of following
> > > msconfig
> > OR
> > > regedit
> > the window opens up andstays for about 1 second then closes, =
repaeting the
> > command gives same result.
> > If I try "sysedit" at run line in lieu , it stays open as it =
should.
> > Also
> > If I hit CTRL + ALT + DEL when I want to end a task the window only =
stays
> > open for 1 -2 seconds and closes
> >
> > Any one know oif this problem and a possible fix or a url to g o to =
to
> read
> > about it?
> > regards
> > Fulke
> > ***NOTE return address is ficticious please reply to newsgroup
> >
> >
>=20
>=20
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.506 / Virus Database: 303 - Release Date: 01/08/2003
>=20
>=20


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.506 / Virus Database: 303 - Release Date: 01/08/2003

Fulke Greville
December 6th 03, 01:36 PM
Will
I am rather curious on this one.
I have had NAV2003 installed from 4/7/2003
(2 days after installing Win XP)
and have been auto updating my definitions
Now when I check , the last update is 23/7/2003
(I know there was another update on 30/7/2003 because my wifes PC shows
that).
So seems to suggest that my updater wasnt working after about 29/7/2003
Any ideas as to how this "naughty" would have got past NAV2003?
I dont have any of the files mentioned in the c:\windows\system folder
namely none of the .scr or exe or pif files, so is it as you suggested
(I have hidden files and known extensions showing)
As you could gather, I am not too amused about this "naughty" getting
in especially as I have NAV2003 installed and it was scanning emails in and
out.

"Will Denny" > wrote in message
...
Glad to help, Fulke.

Will

"Fulke Greville" > wrote in message
...
> Thanks Will ....that was fast 15 minutes flat ...great service.
> Fulke
> "Will Denny" > wrote in message
> ...
> Hi
>
> This is a posting from MVP Kelly:
>
> **This worm disables NAV, Msconfig, Regedit and Task Manager:
> http://www.bitdefender.com/bd/site/virusinfo.php?menu_id=1&v_id=114
>
> And this one:
>
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html
>
> Rename regedit.exe to regedit.com then:
>
> Download then Merge the edit on line 251 then delete all the files
mentioned
> in the above link. http://www.kellys-korner-xp.com/xp_tweaks.htm
>
> --
> All the Best,
> Kelly
>
> MS-MVP Win98/XP
> [AE-Windows® XP]**
>
> Will
>
> "Fulke Greville" > wrote in message
> ...
> > Hi,
> > Got a bit of a wierd one which after looking around trying to see if
> > anyone or MS have anything on it couldnt find anything so am asking on
> this
> > list.
> >
> > When I select START >Run
> > then either of following
> > > msconfig
> > OR
> > > regedit
> > the window opens up andstays for about 1 second then closes, repaeting
the
> > command gives same result.
> > If I try "sysedit" at run line in lieu , it stays open as it should.
> > Also
> > If I hit CTRL + ALT + DEL when I want to end a task the window only
stays
> > open for 1 -2 seconds and closes
> >
> > Any one know oif this problem and a possible fix or a url to g o to to
> read
> > about it?
> > regards
> > Fulke
> > ***NOTE return address is ficticious please reply to newsgroup
> >
> >
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.506 / Virus Database: 303 - Release Date: 01/08/2003
>
>


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.506 / Virus Database: 303 - Release Date: 01/08/2003

Will Denny
December 6th 03, 01:36 PM
Hi Fulke

I'm afraid I can't help you with NAV as I don't use it. I do believe =
that the 'naughty' may have disabled NAV, but I'm not certain. Have you =
tried contacting Norton to see if they can help you?

Will

"Fulke Greville" > wrote in message =
...
> Will
> I am rather curious on this one.
> I have had NAV2003 installed from 4/7/2003
> (2 days after installing Win XP)
> and have been auto updating my definitions
> Now when I check , the last update is 23/7/2003
> (I know there was another update on 30/7/2003 because my wifes PC =
shows
> that).
> So seems to suggest that my updater wasnt working after about =
29/7/2003
> Any ideas as to how this "naughty" would have got past NAV2003?
> I dont have any of the files mentioned in the c:\windows\system folder
> namely none of the .scr or exe or pif files, so is it as you suggested
> (I have hidden files and known extensions showing)
> As you could gather, I am not too amused about this "naughty" getting
> in especially as I have NAV2003 installed and it was scanning emails =
in and
> out.
>=20
> "Will Denny" > wrote in message
> ...
> Glad to help, Fulke.
>=20
> Will
>=20
> "Fulke Greville" > wrote in message
> ...
> > Thanks Will ....that was fast 15 minutes flat ...great service.
> > Fulke
> > "Will Denny" > wrote in message
> > ...
> > Hi
> >
> > This is a posting from MVP Kelly:
> >
> > **This worm disables NAV, Msconfig, Regedit and Task Manager:
> > =
http://www.bitdefender.com/bd/site/virusinfo.php?menu_id=3D1&v_id=3D114
> >
> > And this one:
> >
> =
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.h=
tml
> >
> > Rename regedit.exe to regedit.com then:
> >
> > Download then Merge the edit on line 251 then delete all the files
> mentioned
> > in the above link. http://www.kellys-korner-xp.com/xp_tweaks.htm
> >
> > --=20
> > All the Best,
> > Kelly
> >
> > MS-MVP Win98/XP
> > [AE-Windows=AE XP]**
> >
> > Will
> >
> > "Fulke Greville" > wrote in message
> > ...
> > > Hi,
> > > Got a bit of a wierd one which after looking around trying to see =
if
> > > anyone or MS have anything on it couldnt find anything so am =
asking on
> > this
> > > list.
> > >
> > > When I select START >Run
> > > then either of following
> > > > msconfig
> > > OR
> > > > regedit
> > > the window opens up andstays for about 1 second then closes, =
repaeting
> the
> > > command gives same result.
> > > If I try "sysedit" at run line in lieu , it stays open as it =
should.
> > > Also
> > > If I hit CTRL + ALT + DEL when I want to end a task the window =
only
> stays
> > > open for 1 -2 seconds and closes
> > >
> > > Any one know oif this problem and a possible fix or a url to g o =
to to
> > read
> > > about it?
> > > regards
> > > Fulke
> > > ***NOTE return address is ficticious please reply to newsgroup
> > >
> > >
> >
> >
> > ---
> > Outgoing mail is certified Virus Free.
> > Checked by AVG anti-virus system (http://www.grisoft.com).
> > Version: 6.0.506 / Virus Database: 303 - Release Date: 01/08/2003
> >
> >
>=20
>=20
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.506 / Virus Database: 303 - Release Date: 01/08/2003
>=20
>=20


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.506 / Virus Database: 303 - Release Date: 01/08/2003

Fulke Greville
December 6th 03, 01:36 PM
Yes it did stuff up NAV.
I am still sorting it out.
I am having a hard time getting the reg change windows from
Kelly's site to stay on long enough to hit the yes button to actually
do the change. I think it has activated but is so quick not sure
Regedit appears to be working again but still not working on some
of the other things yet...like msconfig.
I have reinstalled NAV2003 and got that back and working.
Fulke
"Will Denny" > wrote in message
...
Hi Fulke

I'm afraid I can't help you with NAV as I don't use it. I do believe that
the 'naughty' may have disabled NAV, but I'm not certain. Have you tried
contacting Norton to see if they can help you?

Will

"Fulke Greville" > wrote in message
...
> Will
> I am rather curious on this one.
> I have had NAV2003 installed from 4/7/2003
> (2 days after installing Win XP)
> and have been auto updating my definitions
> Now when I check , the last update is 23/7/2003
> (I know there was another update on 30/7/2003 because my wifes PC shows
> that).
> So seems to suggest that my updater wasnt working after about 29/7/2003
> Any ideas as to how this "naughty" would have got past NAV2003?
> I dont have any of the files mentioned in the c:\windows\system folder
> namely none of the .scr or exe or pif files, so is it as you suggested
> (I have hidden files and known extensions showing)
> As you could gather, I am not too amused about this "naughty" getting
> in especially as I have NAV2003 installed and it was scanning emails in
and
> out.
>
> "Will Denny" > wrote in message
> ...
> Glad to help, Fulke.
>
> Will
>
> "Fulke Greville" > wrote in message
> ...
> > Thanks Will ....that was fast 15 minutes flat ...great service.
> > Fulke
> > "Will Denny" > wrote in message
> > ...
> > Hi
> >
> > This is a posting from MVP Kelly:
> >
> > **This worm disables NAV, Msconfig, Regedit and Task Manager:
> > http://www.bitdefender.com/bd/site/virusinfo.php?menu_id=1&v_id=114
> >
> > And this one:
> >
>
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html
> >
> > Rename regedit.exe to regedit.com then:
> >
> > Download then Merge the edit on line 251 then delete all the files
> mentioned
> > in the above link. http://www.kellys-korner-xp.com/xp_tweaks.htm
> >
> > --
> > All the Best,
> > Kelly
> >
> > MS-MVP Win98/XP
> > [AE-Windows® XP]**
> >
> > Will
> >
> > "Fulke Greville" > wrote in message
> > ...
> > > Hi,
> > > Got a bit of a wierd one which after looking around trying to see if
> > > anyone or MS have anything on it couldnt find anything so am asking on
> > this
> > > list.
> > >
> > > When I select START >Run
> > > then either of following
> > > > msconfig
> > > OR
> > > > regedit
> > > the window opens up andstays for about 1 second then closes, repaeting
> the
> > > command gives same result.
> > > If I try "sysedit" at run line in lieu , it stays open as it should.
> > > Also
> > > If I hit CTRL + ALT + DEL when I want to end a task the window only
> stays
> > > open for 1 -2 seconds and closes
> > >
> > > Any one know oif this problem and a possible fix or a url to g o to to
> > read
> > > about it?
> > > regards
> > > Fulke
> > > ***NOTE return address is ficticious please reply to newsgroup
> > >
> > >
> >
> >
> > ---
> > Outgoing mail is certified Virus Free.
> > Checked by AVG anti-virus system (http://www.grisoft.com).
> > Version: 6.0.506 / Virus Database: 303 - Release Date: 01/08/2003
> >
> >
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.506 / Virus Database: 303 - Release Date: 01/08/2003
>
>


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.506 / Virus Database: 303 - Release Date: 01/08/2003

Will Denny
December 6th 03, 01:36 PM
I hope that you get the rest of your problems sorted out. Perhaps Kelly =
might pick up on this thread a bit later. She will be able to help you =
more than I can.

Will

"Fulke Greville" > wrote in message =
...
> Yes it did stuff up NAV.
> I am still sorting it out.
> I am having a hard time getting the reg change windows from
> Kelly's site to stay on long enough to hit the yes button to actually
> do the change. I think it has activated but is so quick not sure
> Regedit appears to be working again but still not working on some
> of the other things yet...like msconfig.
> I have reinstalled NAV2003 and got that back and working.
> Fulke
> "Will Denny" > wrote in message
> ...
> Hi Fulke
>=20
> I'm afraid I can't help you with NAV as I don't use it. I do believe =
that
> the 'naughty' may have disabled NAV, but I'm not certain. Have you =
tried
> contacting Norton to see if they can help you?
>=20
> Will
>=20
> "Fulke Greville" > wrote in message
> ...
> > Will
> > I am rather curious on this one.
> > I have had NAV2003 installed from 4/7/2003
> > (2 days after installing Win XP)
> > and have been auto updating my definitions
> > Now when I check , the last update is 23/7/2003
> > (I know there was another update on 30/7/2003 because my wifes PC =
shows
> > that).
> > So seems to suggest that my updater wasnt working after about =
29/7/2003
> > Any ideas as to how this "naughty" would have got past NAV2003?
> > I dont have any of the files mentioned in the c:\windows\system =
folder
> > namely none of the .scr or exe or pif files, so is it as you =
suggested
> > (I have hidden files and known extensions showing)
> > As you could gather, I am not too amused about this "naughty" =
getting
> > in especially as I have NAV2003 installed and it was scanning emails =
in
> and
> > out.
> >
> > "Will Denny" > wrote in message
> > ...
> > Glad to help, Fulke.
> >
> > Will
> >
> > "Fulke Greville" > wrote in message
> > ...
> > > Thanks Will ....that was fast 15 minutes flat ...great service.
> > > Fulke
> > > "Will Denny" > wrote in message
> > > ...
> > > Hi
> > >
> > > This is a posting from MVP Kelly:
> > >
> > > **This worm disables NAV, Msconfig, Regedit and Task Manager:
> > > =
http://www.bitdefender.com/bd/site/virusinfo.php?menu_id=3D1&v_id=3D114
> > >
> > > And this one:
> > >
> >
> =
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.h=
tml
> > >
> > > Rename regedit.exe to regedit.com then:
> > >
> > > Download then Merge the edit on line 251 then delete all the files
> > mentioned
> > > in the above link. http://www.kellys-korner-xp.com/xp_tweaks.htm
> > >
> > > --=20
> > > All the Best,
> > > Kelly
> > >
> > > MS-MVP Win98/XP
> > > [AE-Windows=AE XP]**
> > >
> > > Will
> > >
> > > "Fulke Greville" > wrote in message
> > > ...
> > > > Hi,
> > > > Got a bit of a wierd one which after looking around trying to =
see if
> > > > anyone or MS have anything on it couldnt find anything so am =
asking on
> > > this
> > > > list.
> > > >
> > > > When I select START >Run
> > > > then either of following
> > > > > msconfig
> > > > OR
> > > > > regedit
> > > > the window opens up andstays for about 1 second then closes, =
repaeting
> > the
> > > > command gives same result.
> > > > If I try "sysedit" at run line in lieu , it stays open as it =
should.
> > > > Also
> > > > If I hit CTRL + ALT + DEL when I want to end a task the window =
only
> > stays
> > > > open for 1 -2 seconds and closes
> > > >
> > > > Any one know oif this problem and a possible fix or a url to g o =
to to
> > > read
> > > > about it?
> > > > regards
> > > > Fulke
> > > > ***NOTE return address is ficticious please reply to newsgroup
> > > >
> > > >
> > >
> > >
> > > ---
> > > Outgoing mail is certified Virus Free.
> > > Checked by AVG anti-virus system (http://www.grisoft.com).
> > > Version: 6.0.506 / Virus Database: 303 - Release Date: 01/08/2003
> > >
> > >
> >
> >
> > ---
> > Outgoing mail is certified Virus Free.
> > Checked by AVG anti-virus system (http://www.grisoft.com).
> > Version: 6.0.506 / Virus Database: 303 - Release Date: 01/08/2003
> >
> >
>=20
>=20
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.506 / Virus Database: 303 - Release Date: 01/08/2003
>=20
>=20


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.506 / Virus Database: 303 - Release Date: 01/08/2003

Fulke Greville
December 6th 03, 01:37 PM
The culprit appears to have been (Symantecs name) W32.Spybot.worm
and virusworm was detected (after re-install of NAV2003) in a file called
PVNMOK.SCR
Does other reg entries etc like the other one.
Not sure , but appears to generally do similar things to what the one you
said.
Things have stabilised considerably after I got it detected.
Regards and thanks for your input(s)
Fulke
"Will Denny" > wrote in message
...
I hope that you get the rest of your problems sorted out. Perhaps Kelly
might pick up on this thread a bit later. She will be able to help you more
than I can.

Will

"Fulke Greville" > wrote in message
...
> Yes it did stuff up NAV.
> I am still sorting it out.
> I am having a hard time getting the reg change windows from
> Kelly's site to stay on long enough to hit the yes button to actually
> do the change. I think it has activated but is so quick not sure
> Regedit appears to be working again but still not working on some
> of the other things yet...like msconfig.
> I have reinstalled NAV2003 and got that back and working.
> Fulke
> "Will Denny" > wrote in message
> ...
> Hi Fulke
>
> I'm afraid I can't help you with NAV as I don't use it. I do believe that
> the 'naughty' may have disabled NAV, but I'm not certain. Have you tried
> contacting Norton to see if they can help you?
>
> Will
>
> "Fulke Greville" > wrote in message
> ...
> > Will
> > I am rather curious on this one.
> > I have had NAV2003 installed from 4/7/2003
> > (2 days after installing Win XP)
> > and have been auto updating my definitions
> > Now when I check , the last update is 23/7/2003
> > (I know there was another update on 30/7/2003 because my wifes PC shows
> > that).
> > So seems to suggest that my updater wasnt working after about 29/7/2003
> > Any ideas as to how this "naughty" would have got past NAV2003?
> > I dont have any of the files mentioned in the c:\windows\system folder
> > namely none of the .scr or exe or pif files, so is it as you suggested
> > (I have hidden files and known extensions showing)
> > As you could gather, I am not too amused about this "naughty" getting
> > in especially as I have NAV2003 installed and it was scanning emails in
> and
> > out.
> >
> > "Will Denny" > wrote in message
> > ...
> > Glad to help, Fulke.
> >
> > Will
> >
> > "Fulke Greville" > wrote in message
> > ...
> > > Thanks Will ....that was fast 15 minutes flat ...great service.
> > > Fulke
> > > "Will Denny" > wrote in message
> > > ...
> > > Hi
> > >
> > > This is a posting from MVP Kelly:
> > >
> > > **This worm disables NAV, Msconfig, Regedit and Task Manager:
> > > http://www.bitdefender.com/bd/site/virusinfo.php?menu_id=1&v_id=114
> > >
> > > And this one:
> > >
> >
>
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html
> > >
> > > Rename regedit.exe to regedit.com then:
> > >
> > > Download then Merge the edit on line 251 then delete all the files
> > mentioned
> > > in the above link. http://www.kellys-korner-xp.com/xp_tweaks.htm
> > >
> > > --
> > > All the Best,
> > > Kelly
> > >
> > > MS-MVP Win98/XP
> > > [AE-Windows® XP]**
> > >
> > > Will
> > >
> > > "Fulke Greville" > wrote in message
> > > ...
> > > > Hi,
> > > > Got a bit of a wierd one which after looking around trying to see if
> > > > anyone or MS have anything on it couldnt find anything so am asking
on
> > > this
> > > > list.
> > > >
> > > > When I select START >Run
> > > > then either of following
> > > > > msconfig
> > > > OR
> > > > > regedit
> > > > the window opens up andstays for about 1 second then closes,
repaeting
> > the
> > > > command gives same result.
> > > > If I try "sysedit" at run line in lieu , it stays open as it
should.
> > > > Also
> > > > If I hit CTRL + ALT + DEL when I want to end a task the window only
> > stays
> > > > open for 1 -2 seconds and closes
> > > >
> > > > Any one know oif this problem and a possible fix or a url to g o to
to
> > > read
> > > > about it?
> > > > regards
> > > > Fulke
> > > > ***NOTE return address is ficticious please reply to newsgroup
> > > >
> > > >
> > >
> > >
> > > ---
> > > Outgoing mail is certified Virus Free.
> > > Checked by AVG anti-virus system (http://www.grisoft.com).
> > > Version: 6.0.506 / Virus Database: 303 - Release Date: 01/08/2003
> > >
> > >
> >
> >
> > ---
> > Outgoing mail is certified Virus Free.
> > Checked by AVG anti-virus system (http://www.grisoft.com).
> > Version: 6.0.506 / Virus Database: 303 - Release Date: 01/08/2003
> >
> >
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.506 / Virus Database: 303 - Release Date: 01/08/2003
>
>


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.506 / Virus Database: 303 - Release Date: 01/08/2003

Will Denny
December 6th 03, 01:37 PM
Glad you're sorted out now.

Will

"Fulke Greville" > wrote in message =
...
> The culprit appears to have been (Symantecs name) W32.Spybot.worm
> and virusworm was detected (after re-install of NAV2003) in a file =
called
> PVNMOK.SCR
> Does other reg entries etc like the other one.
> Not sure , but appears to generally do similar things to what the one =
you
> said.
> Things have stabilised considerably after I got it detected.
> Regards and thanks for your input(s)
> Fulke
> "Will Denny" > wrote in message
> ...
> I hope that you get the rest of your problems sorted out. Perhaps =
Kelly
> might pick up on this thread a bit later. She will be able to help =
you more
> than I can.
>=20
> Will
>=20
> "Fulke Greville" > wrote in message
> ...
> > Yes it did stuff up NAV.
> > I am still sorting it out.
> > I am having a hard time getting the reg change windows from
> > Kelly's site to stay on long enough to hit the yes button to =
actually
> > do the change. I think it has activated but is so quick not sure
> > Regedit appears to be working again but still not working on some
> > of the other things yet...like msconfig.
> > I have reinstalled NAV2003 and got that back and working.
> > Fulke
> > "Will Denny" > wrote in message
> > ...
> > Hi Fulke
> >
> > I'm afraid I can't help you with NAV as I don't use it. I do =
believe that
> > the 'naughty' may have disabled NAV, but I'm not certain. Have you =
tried
> > contacting Norton to see if they can help you?
> >
> > Will
> >
> > "Fulke Greville" > wrote in message
> > ...
> > > Will
> > > I am rather curious on this one.
> > > I have had NAV2003 installed from 4/7/2003
> > > (2 days after installing Win XP)
> > > and have been auto updating my definitions
> > > Now when I check , the last update is 23/7/2003
> > > (I know there was another update on 30/7/2003 because my wifes PC =
shows
> > > that).
> > > So seems to suggest that my updater wasnt working after about =
29/7/2003
> > > Any ideas as to how this "naughty" would have got past NAV2003?
> > > I dont have any of the files mentioned in the c:\windows\system =
folder
> > > namely none of the .scr or exe or pif files, so is it as you =
suggested
> > > (I have hidden files and known extensions showing)
> > > As you could gather, I am not too amused about this "naughty" =
getting
> > > in especially as I have NAV2003 installed and it was scanning =
emails in
> > and
> > > out.
> > >
> > > "Will Denny" > wrote in message
> > > ...
> > > Glad to help, Fulke.
> > >
> > > Will
> > >
> > > "Fulke Greville" > wrote in message
> > > ...
> > > > Thanks Will ....that was fast 15 minutes flat ...great service.
> > > > Fulke
> > > > "Will Denny" > wrote in message
> > > > ...
> > > > Hi
> > > >
> > > > This is a posting from MVP Kelly:
> > > >
> > > > **This worm disables NAV, Msconfig, Regedit and Task Manager:
> > > > =
http://www.bitdefender.com/bd/site/virusinfo.php?menu_id=3D1&v_id=3D114
> > > >
> > > > And this one:
> > > >
> > >
> >
> =
http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.h=
tml
> > > >
> > > > Rename regedit.exe to regedit.com then:
> > > >
> > > > Download then Merge the edit on line 251 then delete all the =
files
> > > mentioned
> > > > in the above link. =
http://www.kellys-korner-xp.com/xp_tweaks.htm
> > > >
> > > > --=20
> > > > All the Best,
> > > > Kelly
> > > >
> > > > MS-MVP Win98/XP
> > > > [AE-Windows=AE XP]**
> > > >
> > > > Will
> > > >
> > > > "Fulke Greville" > wrote in message
> > > > ...
> > > > > Hi,
> > > > > Got a bit of a wierd one which after looking around trying to =
see if
> > > > > anyone or MS have anything on it couldnt find anything so am =
asking
> on
> > > > this
> > > > > list.
> > > > >
> > > > > When I select START >Run
> > > > > then either of following
> > > > > > msconfig
> > > > > OR
> > > > > > regedit
> > > > > the window opens up andstays for about 1 second then closes,
> repaeting
> > > the
> > > > > command gives same result.
> > > > > If I try "sysedit" at run line in lieu , it stays open as it
> should.
> > > > > Also
> > > > > If I hit CTRL + ALT + DEL when I want to end a task the =
window only
> > > stays
> > > > > open for 1 -2 seconds and closes
> > > > >
> > > > > Any one know oif this problem and a possible fix or a url to g =
o to
> to
> > > > read
> > > > > about it?
> > > > > regards
> > > > > Fulke
> > > > > ***NOTE return address is ficticious please reply to =
newsgroup
> > > > >
> > > > >
> > > >
> > > >
> > > > ---
> > > > Outgoing mail is certified Virus Free.
> > > > Checked by AVG anti-virus system (http://www.grisoft.com).
> > > > Version: 6.0.506 / Virus Database: 303 - Release Date: =
01/08/2003
> > > >
> > > >
> > >
> > >
> > > ---
> > > Outgoing mail is certified Virus Free.
> > > Checked by AVG anti-virus system (http://www.grisoft.com).
> > > Version: 6.0.506 / Virus Database: 303 - Release Date: 01/08/2003
> > >
> > >
> >
> >
> > ---
> > Outgoing mail is certified Virus Free.
> > Checked by AVG anti-virus system (http://www.grisoft.com).
> > Version: 6.0.506 / Virus Database: 303 - Release Date: 01/08/2003
> >
> >
>=20
>=20
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.506 / Virus Database: 303 - Release Date: 01/08/2003
>=20
>=20


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.506 / Virus Database: 303 - Release Date: 01/08/2003

Google