Can someone help me please. When I startup Windows, a updmgr.exe open a window and then closes then System32 folder opens and remains there. After that, I can't run msconfig, regedit, and taskmanager, and who knows what else. I looked it up and I think I may have the Spybot worm or it could be a similar virus. But I already ran Spybot Search and Destroy and Ad-Aware even in Safe mode with my System Restore turned off and they found nothing. I also ran the lastest version of AVG in normal mode but it doesn't detect anything. I tried to run it in safe mode but AVG doesn't run in my Safe Mode. I tried the free Panda online scan Trendmicro Sysclean and still nothing found. I don't have money to buy other antivirus programs. I think I got the virus from MIRC. So can anyone help please.

hello before you check for virus or whatever you might think it is try booting from your xp disk 1.insert disk 2.reboot and select boot from cd rom in bios boot order (F8 or F2 key on boot up for bios settings not sure) 3. open command prompt and goto the C\: then type "sfc/scannow" (without the speechmarks) then this should open up system file checker and scan your system for any corrupt or missing system files and if it finds any it will ask you to click yes to replace them and it will replace them from your o/s disk that you put in moments ago. let me know how you got on ok mate?? ian

Hi there, I guess what ian mc was trying to say was to run "sfc /scannow" you can do that in normal mode, i'm almost positve that's not an option in recovery console anyhow. First off if you haven't done the update features in the spyware scans do that. If the problem still happens in safemode I would reccomend doing here is copying regedit.exe (in windows) and msconfig.exe (in windows\pchealth\helpctr\binaries) and copying them to the desktop, rename them and that should throw the virus off(assuming it is on). Honestly though if the problem is still happening in safemode I can't imagine how msconfig is going to help cuz that junk shouldn't be getting loaded anyway, worth a shot though I guess. Good luck

I tried the sfc/scannow but after scanning, it didn't say anything was wrong. By the way, I forgot to mention that everything is okay when it's in safe mode. But when I'm in safe mode, the removal tools I used didn't detect anything. They are all updated. When I'm in normal mode again, it still doesn't work, well, normally. I also tried renaming the msconfig and the regedit and put them in the desktop. I can run them now. However, I want to remove whatever is causing the problem in the first place. I can put my Hijack This log if anyone wants to look at it. I'd really appreciate any help. Thanks.