Something Strange Happened Today ????

Question

Hello all,   Concerning my XP Home SP1 machine that has NAV 2005, Adaware SE 1.06, Spybot 1.4, and Zone Alarm with all defenitions up todate. All Microsoft Criticle Updates are up todate. I am the administrator of this computer and I am the only user of it:   Today out of the blue the computer acted up with out any warning.    1) I wasn't able to shut down, but now can. 2) I can't access userpasswords 2 3) In the System Configuration Utility the computer will not let me start in Diagnostic Mode. It returns an error message saying error returned, while attempting to change a service. 4) The Task Manager under the Services Tab no longer shows if the item is running or stopped. 5) The computer is acting like I am not the administrator, but it shows that I am?   Early today I did download 2 Microsoft Criticle Updates, which went well.  Since I noticed this all happening this afternoon I disabled System Restore and booted in Safe Mode. I ran a full System Virus scan, Adaware scan, Spybot scan and all of the them didn't return any problems. I rebooted to normal and still have all of the above issues.  I am not a new user and this really has me stumped.    Is it possible to have a worm or a virus after I did all of the scanning above?   Help would be appreciated.  Thanks............     Message Edited by BrickYard on 07-17-2005 09:03 PM

dunedin · Answer

Hi,

It is a pity you disabled System Restore as I think that should have been your first step.

Look for the 2 Updates you just installed in Add/Remove Programs and uninstall them there. (Tick the box at top "Show Updates")

Yes it is possible to have a worm/trojan after the checks you have run as non of these programs find them.

Here is a scan which does find them

Trojan Scan http://www.windowsecurity.com/trojanscan/

Also download and run MS Antispyware. It is pretty good

http://www.microsoft.com/athome/security/spyware/software/default.mspx

BrickYard · Answer

dunedin,

Thanks for the reply and links, appreciate it. I knew about System Restore but a thorough system scan can't be done with out it being disabled. It was a catch 22 deal so to speak.

I wouldn't want something bad on my PC any way, best I find it and deal with it.

With the things I mentioned that are wrong is there anything else that could have caused the problems?

Thanks...........

Message Edited by BrickYard on 07-18-2005 05:43 AM

dunedin · Answer

Hi,   Well I don`t agree with you about turning off System Restore as it can be a big help in reversing damage.   If a virus scanner finds an infection it will tell you where to find it and will report 'System Volume Information' folder if the virus is in a Restore Point.  That is the time to delete all your Restore Points. You should do it in any case but not until you know for sure that you have an infection.   If your machine had no problems before installing the Updates, one of them would be my first suspect. If you uninstall them and the problems persist you can always reinstall them. System Restore would have undone all the damage.   Otherwise the problems are symptomatic of a trojan/worm since you have checked for virus/malware. eg  Unable to 'access' or 'run' or system utilities not working   What was the 'Service' error you said you received? Both your Diagnostics and Task Manger problems are concerned with Services.  This is worth investigating.   Control Panel/Performance and Maintenance/Admin Tools/Services Check if that Service is running or stopped.

BrickYard · Answer

Hello dunedin,   System Restore does not reverse the damage, it just takes you to another point where the PC may have been running ok which will allow you to pick it up from there.   I did full system scans with of all my utilities first with System Restore Enabled. Not finding any I disabled System Restore in order to scan deeper with no errors being returned by any.   Since you replied last I did what you said and deleted the last two Criticle Updates, still the same. I also downloaded and ran Microsofts Spyware tool which picked up two additional threats which I deleted. I rechecked my issues and they still exsist.   I also went to the link you provided (thank you) and ran the on-line Trojan Checker, all was returned ok.   The problems that remain are:   1) While on the System Configuration Utility page it will not allow me to run in a diagnostic mode. I check the box click apply and it returns a message saying something like 'error returned while attempting to change system configuration' It seems like it was treating me as not being the Administrator of Windows?   2) While on the System Configuration Utility page if I select Normal Start-Up , apply, ok and reboot and then return to this page it shows that i am in a Selective Start-Up mode but all items are checked?   3) When I click on the Task Bar to bring up the pop-up list of choices and click on Task Manager the Task Manager opens but it does not show if the processes are running or stopped which it did a few days ago.   Thanks again, appreciate it.

jwdd · Answer

I am not sure if this applies to your problem but it might.   http://windowsxp.mvps.org/ToolsQuit.htm

BrickYard · Answer

jwdd, Thanks for the reply and the link.  No that does not apply to me.

Windows General

Was this post helpful?