All programs crash/close when opened

Jeppebm · 08-20-2008, 10:42 AM

Hi,

I'm having a bit of a problem here...
In my office I have a win2k machine, and it's being used 14 hours a day, so it contains a lot of valuable information for us, for instance an SQL server with the company's own Wiki.

This morning when logging in, all startup programs crashed. I got the "XXX.exe has encountered an error and has to close.." for all the programs. When I try to start a program, it starts, but then closes after 1-2 seconds with no warning or anything. I'm able to browse the system with explorer, but that's it.

I suspect a virus, but I have no way of running a scan since I can't run programs. The computer has been completely protected with and updated Trend Micro officescan, and as late as 2 days ago, I installed Spybot S&D and deleted everything it could find.

The problem persists in fail-safe mode.

As mentioned, it's a win2k machine, fully updated with service packs and updates.

Any help would be greately appreciated!

Best Regards,
Jeppe B.

Stu_computer · 08-21-2008, 08:28 AM

try this...

hold down the shift key while the desktop is loading to cancel startup apps from loading (only works on the startup folder links-not registry).

download Avira AntiVir Removal Tool unzip it to a floppy and then run it from the floppy on the suspected pc.
it's self contained so it should do the scan okay.

Jeppebm · 08-22-2008, 02:05 AM

Thanks for replying!

Unfortunately I can't run the file, since it crashes upon opening it. I'm able to run some .exe files by running it through Run in the start menu, but not this one. I was able to run McAfees "Stinger", but apparently it didn't find anything.

Any work-around available to run it you think?

/ Jeppe

Stu_computer · 08-22-2008, 02:53 AM

Okay, the most expedient solution is to install another hard drive, put windows on it and the other apps you were using.
Next, put the infected drive in as a slave drive and run a virus scan on it, then copy the database folders (take only data-no programs!) to the new drive. This way you have your system up and running.

Note: disconnect any network cables till all finished.

When your sure you no longer need any data from the infected drive you can reformat it and clone the new one onto it-then you have a backup drive ready to use.

Trend Micro’s OfficeScan vulnerable http://www.heise-online.co.uk/securi...--/news/111211

I've been using Avira for years http://www.free-av.com/

You should also install a firewall, if you don't already have one.

Jeppebm · 08-22-2008, 06:37 AM

Hi again,

Thanks for your ideas, i've taken them down for later use if necessary...
Right now i've managed to corner the virus somehow. I ran Stinger as I said, and on the next reboot my (apparently vulnerable) officescan started and noticed the virus!

It wasn't able to completely identify it (it calls it TROJ_DLDR.BL), but it's keeping it in check, allowing me to operate normally. The only problem is that officescan can't clean or remove the infected file.

I was able to run an online scan that identified the virus as TrojanDownloader.Win32.Agent.abtf... Right now i'm trying to get a tool to remove this specifik virus.

I'll be back as soon as i've gotten further :)

Thanks for the tip on Officescan btw.

Arguro · 08-29-2008, 07:59 AM

I have this exacte same problem. I can't even get my antivirus to run. It crashes the second I open it. I tried using Stinger and it also crashes a second or two after opening. Anything that has an auto re-launch will open on the second attempt (Internet Explorer, Windows Music Player, uTorrent). If you found the solution, please let me know. I am getting very frustrated here. I can't even open the registry.

Jeppebm · 08-30-2008, 05:50 AM

I've been so busy, that I haven't completely killed my problem yet. Going to look into it now.

You should be able to run programs through Start > Run.

Try running the Avira antivir tool that Stu_computers mentioned, either that or Stinger got my antivirus running after a reebot.

Jeppebm · 08-30-2008, 07:52 AM

Actually, you might not be able to run it through the Run-prompt. Try through taskmanager instead, there's a button to execute a new application. You should be able to hit the button and paste a program path before the taskmanager shuts down :)

Furthermore, shift-rightclick allows you to choose "open as..". This will give you an option to open a program as another user. Somehow the malware won't shut down the program if you do it that way.

I've learned a lot of work-arounds fighting this devil :)

Jeppebm · 08-30-2008, 08:05 AM

Wupeee! I think i've managed to remove everything now.

With Spyware - Search and Destroy running in the background, I had Malwarebytes' Anti Malware do a complete scan of the system. I'm very impressed by Malwarebytes' scanner, it found everything and deleted it as well. It had to do a reboot of the system in order to remove some locked files, but it worked!

Just before deletion of the malware, Spyware S&D noticed the malware trying to change the registry, but luckilly it stopped it. I'm doing a new scan now to check that i'm clean, but it seems like it.

I was infected by Downloader.Agent, Zlob and Vundo. Geez!

Unfortunately I'm not sure how I was able to get my antivirus up and running, which was the biggest breaktrough. I think it was one of the antivirus tools that did the trick, but i'm not sure.

But i'm clean!

08-20-2008, 10:42 AM	#1 (permalink)
Jeppebm Registered User Join Date: Aug 2008 Posts: 6 OS: XP SP2	All programs crash/close when opened Hi, I'm having a bit of a problem here... In my office I have a win2k machine, and it's being used 14 hours a day, so it contains a lot of valuable information for us, for instance an SQL server with the company's own Wiki. This morning when logging in, all startup programs crashed. I got the "XXX.exe has encountered an error and has to close.." for all the programs. When I try to start a program, it starts, but then closes after 1-2 seconds with no warning or anything. I'm able to browse the system with explorer, but that's it. I suspect a virus, but I have no way of running a scan since I can't run programs. The computer has been completely protected with and updated Trend Micro officescan, and as late as 2 days ago, I installed Spybot S&D and deleted everything it could find. The problem persists in fail-safe mode. As mentioned, it's a win2k machine, fully updated with service packs and updates. Any help would be greately appreciated! Best Regards, Jeppe B.

08-21-2008, 08:28 AM	#2 (permalink)
Stu_computer Tech Hardware Team Join Date: Jul 2005 Posts: 1,461 OS: Windows	Re: All programs crash/close when opened try this... hold down the shift key while the desktop is loading to cancel startup apps from loading (only works on the startup folder links-not registry). download Avira AntiVir Removal Tool unzip it to a floppy and then run it from the floppy on the suspected pc. it's self contained so it should do the scan okay. Last edited by Stu_computer; 08-21-2008 at 08:36 AM.

08-22-2008, 02:05 AM	#3 (permalink)
Jeppebm Registered User Join Date: Aug 2008 Posts: 6 OS: XP SP2	Re: All programs crash/close when opened Thanks for replying! Unfortunately I can't run the file, since it crashes upon opening it. I'm able to run some .exe files by running it through Run in the start menu, but not this one. I was able to run McAfees "Stinger", but apparently it didn't find anything. Any work-around available to run it you think? / Jeppe

08-22-2008, 02:53 AM	#4 (permalink)
Stu_computer Tech Hardware Team Join Date: Jul 2005 Posts: 1,461 OS: Windows	Re: All programs crash/close when opened Okay, the most expedient solution is to install another hard drive, put windows on it and the other apps you were using. Next, put the infected drive in as a slave drive and run a virus scan on it, then copy the database folders (take only data-no programs!) to the new drive. This way you have your system up and running. Note: disconnect any network cables till all finished. When your sure you no longer need any data from the infected drive you can reformat it and clone the new one onto it-then you have a backup drive ready to use. Trend Micro’s OfficeScan vulnerable http://www.heise-online.co.uk/securi...--/news/111211 I've been using Avira for years http://www.free-av.com/ You should also install a firewall, if you don't already have one. Last edited by Stu_computer; 08-22-2008 at 02:55 AM.

08-22-2008, 06:37 AM	#5 (permalink)
Jeppebm Registered User Join Date: Aug 2008 Posts: 6 OS: XP SP2	Re: All programs crash/close when opened Hi again, Thanks for your ideas, i've taken them down for later use if necessary... Right now i've managed to corner the virus somehow. I ran Stinger as I said, and on the next reboot my (apparently vulnerable) officescan started and noticed the virus! It wasn't able to completely identify it (it calls it TROJ_DLDR.BL), but it's keeping it in check, allowing me to operate normally. The only problem is that officescan can't clean or remove the infected file. I was able to run an online scan that identified the virus as TrojanDownloader.Win32.Agent.abtf... Right now i'm trying to get a tool to remove this specifik virus. I'll be back as soon as i've gotten further :) Thanks for the tip on Officescan btw.

08-29-2008, 07:59 AM	#6 (permalink)
Arguro Registered User Join Date: Aug 2008 Posts: 1 OS: Windows 2000 SP4	Re: All programs crash/close when opened I have this exacte same problem. I can't even get my antivirus to run. It crashes the second I open it. I tried using Stinger and it also crashes a second or two after opening. Anything that has an auto re-launch will open on the second attempt (Internet Explorer, Windows Music Player, uTorrent). If you found the solution, please let me know. I am getting very frustrated here. I can't even open the registry.

08-30-2008, 05:50 AM	#7 (permalink)
Jeppebm Registered User Join Date: Aug 2008 Posts: 6 OS: XP SP2	Re: All programs crash/close when opened I've been so busy, that I haven't completely killed my problem yet. Going to look into it now. You should be able to run programs through Start > Run. Try running the Avira antivir tool that Stu_computers mentioned, either that or Stinger got my antivirus running after a reebot.

08-30-2008, 07:52 AM	#8 (permalink)
Jeppebm Registered User Join Date: Aug 2008 Posts: 6 OS: XP SP2	Re: All programs crash/close when opened Actually, you might not be able to run it through the Run-prompt. Try through taskmanager instead, there's a button to execute a new application. You should be able to hit the button and paste a program path before the taskmanager shuts down :) Furthermore, shift-rightclick allows you to choose "open as..". This will give you an option to open a program as another user. Somehow the malware won't shut down the program if you do it that way. I've learned a lot of work-arounds fighting this devil :)

08-30-2008, 08:05 AM	#9 (permalink)
Jeppebm Registered User Join Date: Aug 2008 Posts: 6 OS: XP SP2	Re: All programs crash/close when opened Wupeee! I think i've managed to remove everything now. With Spyware - Search and Destroy running in the background, I had Malwarebytes' Anti Malware do a complete scan of the system. I'm very impressed by Malwarebytes' scanner, it found everything and deleted it as well. It had to do a reboot of the system in order to remove some locked files, but it worked! Just before deletion of the malware, Spyware S&D noticed the malware trying to change the registry, but luckilly it stopped it. I'm doing a new scan now to check that i'm clean, but it seems like it. I was infected by Downloader.Agent, Zlob and Vundo. Geez! Unfortunately I'm not sure how I was able to get my antivirus up and running, which was the biggest breaktrough. I think it was one of the antivirus tools that did the trick, but i'm not sure. But i'm clean!