Shahu
2006-12-30, 23:01
Thank you Tom K. I am re-posting here from Spybot-S&D. Since my last post, I uninstalled internet explorer 7 and reverted back to version 6. This has solved problem of message file "msvcrl.dll missing. But when I tried to re-install Internet Explorer 7 it crashes on reaching melawre removal tool during installation process. On-rebooting itself windows xp shows stop error problem with video device driver STOP 0x000000EA THREAD_STUCK_IN_DEVICE_DRIVER. http://support.microsoft.com/default.aspx?scid=kb;EN-US;q293078
My original post:
Hi,
My computer got infected last week. I had multiple problems.
1. On activating Task Manager, I was getting this message "Task Manager Has been disabled by your administrator." I fixed it by deleting "DisableTaskMgr=.." from registry. It solved problem as long as I did not re-boot my computer. Once computer is rebooted I had same message. Randomly computer was shuting down with message" ...NT AUTHOrity/SYSTEM... This shutdown was initiated by services.exe...". I figured out from process I had file "kernels88.exe" loaded. So I went into safe mode and deleted all entries for "kernels88.exe. So both these problem is solved.
2. On virus scanning my computer, it kept rebooting every time when it reached system32 folder. Even in safe command prompt mode, I could not go beyond certian files in system32 folder. In Normal Windows mode as soon as you hit system32 folder computer rebooted. I went through your site and read sticky notes. So I went to the Panda Activescan site. After activescan it disinfected four viruses:
c:\hhtiscb.exe (Trj/Mailbot.AW)
c:\windows\system32\msasvc.exe (Trj/Sinowal.DU)
c:\windows\system32\msvcrl.dll (Trj/Goldun.UI)
c:\windows\temp\$_2341234.tmp (Trj/torpig.a)
I also installed spybot and ran in Safe Mode. It cleaned some 35 files. Now starting Microsoft Explorer gives error message for missing msvcrl.dll. So I am using FirFox for now.
3. I still don't have any printer in my printer folder. On adding printer still get message "Operation could not be completed. The printspooler services is not running." I went into services.msc and checked that printspooler is set to automatic. Manually starting printspooler won't help.
Any and All help is greatly appreciated.
Thank you.
My original post:
Hi,
My computer got infected last week. I had multiple problems.
1. On activating Task Manager, I was getting this message "Task Manager Has been disabled by your administrator." I fixed it by deleting "DisableTaskMgr=.." from registry. It solved problem as long as I did not re-boot my computer. Once computer is rebooted I had same message. Randomly computer was shuting down with message" ...NT AUTHOrity/SYSTEM... This shutdown was initiated by services.exe...". I figured out from process I had file "kernels88.exe" loaded. So I went into safe mode and deleted all entries for "kernels88.exe. So both these problem is solved.
2. On virus scanning my computer, it kept rebooting every time when it reached system32 folder. Even in safe command prompt mode, I could not go beyond certian files in system32 folder. In Normal Windows mode as soon as you hit system32 folder computer rebooted. I went through your site and read sticky notes. So I went to the Panda Activescan site. After activescan it disinfected four viruses:
c:\hhtiscb.exe (Trj/Mailbot.AW)
c:\windows\system32\msasvc.exe (Trj/Sinowal.DU)
c:\windows\system32\msvcrl.dll (Trj/Goldun.UI)
c:\windows\temp\$_2341234.tmp (Trj/torpig.a)
I also installed spybot and ran in Safe Mode. It cleaned some 35 files. Now starting Microsoft Explorer gives error message for missing msvcrl.dll. So I am using FirFox for now.
3. I still don't have any printer in my printer folder. On adding printer still get message "Operation could not be completed. The printspooler services is not running." I went into services.msc and checked that printspooler is set to automatic. Manually starting printspooler won't help.
Any and All help is greatly appreciated.
Thank you.