Re: Weird Errors

Bill,

Reboot into Safe Mode a run a full system virus scan. Then run a full scan
with Ad-Aware while still in Safe Mode.

Some viruses and other malware like to conceal themselves in areas Windows
protects while using them. Safe mode will prevent those applications
access and therefore unprotect the viruses or other malware.

See this first before going into Safe Mode.

Robear Dyer explains...
HOW TO: Reconfigure Ad-aware for a Full Scan
http://forum.aumha.org/viewtopic.php?t=5877

How to start the computer in safe mode
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/boot_failsafe.mspx

I do not know what's wrong. Even if regedit.exe were running, trying to
start it again should not throw up an error. Same for Task Manager.

Another program normally cannot be using regedit.exe or taskmgr.exe, unless
you have some sort of malware or both of those files are borked.

There is nothing that I can think of that would add a svchost.exe start
shortcut to your start folder besides malware.

Maybe the reason that you cannot delete the svchost.exe that is in your
start folder is because it is an actual file and not a shortcut and the file
is running.

Go to Programs>Startup Group, right click svchost.exe, click Properties and
select the Find Target button under the Shortcut tab.

Is there a Shortcut tab?

What folder opens if there is a Shortcut tab and Find Target button?

Also if the problem is not fixed after running AntiVirus and Ad-Aware in
Safe Mode...

Run the System File Checker, sfc.exe. Sfc replaces bad files.

Load your XP CD in your CD drive.

Start | Run | Type or paste: sfc /scannow | Click OK

It should take a while to run.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In news:uvrCnuaOGHA.740@xxxxxxxxxxxxxxxxxxxx,
Willy <justask@xxxxxxxxxxx> hunted and pecked:
Wes, I'll answer your questions/comments below following each one.
--
Thanks.....Bill
Please reply to the Newsgroup ONLY

1--If I click Start>Run>REGEDIT, it tells me REGEDIT is being used by
another program????

What happens if you type: regedit.exe in Start | Run?--Nothing

What happens if you type: %windir%\regedit.exe in Start |
Run?--Nothing

Does regedit open?--No, just a window saying "another program is
currently using this file"

2--If I do a CTRL-ALT-DEL and click Task Manager, It does nothing.

To start the Task Manager...

Ctrl + Alt + Delete--I meant a CTRL+ALT+DEL, sorry for using the "-" in
between the keys.
or
Ctrl + Shift + Esc--Nothing
or
Right click the Taskbar | Task Manager--Nothing
or
Start | Run | Type: taskmgr | Click OK--Nothing but, "another
program is currently using this file"

Ctrl + Alt + Delete opens the Windows Security window if the Welcome
screen
is turned off.--It does but clicking Task Manager does nothing

When you open Task Manager, it flashes for a second and quits.--It's not

This symptom is caused by viruses.

Task Manager, MSCONFIG, or REGEDIT disappear while opening
http://www.mvps.org/sramesh2k/ToolsQuit.htm

If you get an error message: Task Manager has been disabled by your
administrator.--Don't get that error message and I'm the Adminisrator and
only user of PC.

Error Message: "Task Manager has been disabled by your administrator"
http://windowsxp.mvps.org/Taskmanager_error.htm

Enable/Disable Task Manager
http://www.dougknox.com/xp/utils/xp_taskmgrenab.htm

3--A svchost.exe was added to my Programs>Startup Group,

Go to Programs>Startup Group, right click svchost.exe, click Properties
and
select the Find Target button under the Shortcut tab. What folder
opens?--D:\Documents and Settings\All Users\Start Menu\Programs\Startup.
I've tried to Delete it but won't allow me to.

Do a Search on your machine for svchost.exe.

If you find svchost.exe any where but these two folders:
%windir%\system32 or C:\WINDOWS\system32
or
%windir%\system32\dllcache or C:\WINDOWS\system32\dllcache
then, chances are that you have malware.--It shows up in
D:\Windows\pcheath\errorrep\userdumps and D:\Windows\Prefetch and where I
noted above after doing a right click on Properties, dated 2/23/06.

Symantec Security Response - W32.Welchia.Worm

http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Assarm@mm

http://securityresponse.symantec.com/avcenter/venc/data/w32.assarm@xxxxxxx

Virus Profile: W32/Jeefo
http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=100277

How to Remove Welchia worm or MSBLAST.D worm virus
http://www.pchell.com/virus/welchia.shtml ---I don't see symtoms noted in
the above nor has Norton previously detcted any of the above noted
viruses. I ran daily full system scans and checked for def. updates
daily. Only thing I see in the above is they all mention svchost.exe
which in D:\Windows\System32 (and in dllcache) it is 14kb and dated
8/4/04.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In news:%23creCOYOGHA.516@xxxxxxxxxxxxxxxxxxxx,
Willy <justask@xxxxxxxxxxx> hunted and pecked:
I've got ZoneAlrm Security Suite, Microsoft AntiSpyware & AdAware. Have
updated all & ran them. Found some SpyWare that was deleted.
Restarted PC, same problems exist.
--
Thanks.....Bill
Please reply to the Newsgroup ONLY

.