Question about Microsoft Windows XP Professional for PC

1 Answer

Virus in windows Xp professional ........the virus infected ................... named sxs.exe, recycled and automatically spreading day by day .....what can i do sir? plz ans me.....

Posted by on

Ad

1 Answer

  • Level 3:

    An expert who has achieved level 3 by getting 1000 points

    All-Star:

    An expert that got 10 achievements.

    MVP:

    An expert that got 5 achievements.

    President:

    An expert whose answer got voted for 500 times.

  • Master
  • 2,961 Answers

Assuming you have an anti virus and spyware programme installed:- you need to turn off system restore first as it backs itself up and then run your anti virus programme, prefferably in safe mode, restart the pc and turn system restore back on.

Posted on Nov 19, 2007

Ad

1 Suggested Answer

6ya6ya
  • 2 Answers

SOURCE: I have freestanding Series 8 dishwasher. Lately during the filling cycle water hammer is occurring. How can this be resolved

Hi,
A 6ya expert can help you resolve that issue over the phone in a minute or two.
Best thing about this new service is that you are never placed on hold and get to talk to real repairmen in the US.
The service is completely free and covers almost anything you can think of (from cars to computers, handyman, and even drones).
click here to download the app (for users in the US for now) and get all the help you need.
Good luck!

Posted on Jan 02, 2017

Ad

Add Your Answer

Uploading: 0%

my-video-file.mp4

Complete. Click "Add" to insert your video. Add

×

Loading...
Loading...

Related Questions:

1 Answer

Kinds of computer virus


from your question, what are the kinds of computer viruses, here is the detailed explanation:

Computermag-glass_10x10.gif viruses are generally defined as a program inputted into a computer that allows replication of the program installed. As it replicates, the program intentionally infects the computer, typically without even the user knowing about the damage being done. A virus, unlike worms or Trojan horses, needs an aid to transfer them to computers. Viruses usually take a large amount of computer memory, resulting into system crashes. Viruses are categorized to several parts based on its features.
Macro Viruses A macro virus, often scripted into common application programs such as Word or Excel, is spread by infecting documents. Macro viruses are known to be platform-independent since the virus itself are written in language of the application and not the messagebox_info.png operating system. When the application is running, this allows the macro virus to spread amongst the operating systemsmag-glass_10x10.gif. There are thousands of macro viruses that exists, and each are considered major threats. Examples of these viruses are: Melissa.A and Bablas. pc.
Network Viruses Network viruses rapidly spreads through a Local Network Area ( messagebox_info.png LAN), and sometimes throughout the internet. Generally, network viruses multiply through shared resources, i.e., shared drives and folders. When the virus infects a computer, it searches through the network to attack its new potential prey. When the virus finishes infecting that computer, it moves on to the next and the cycle repeats itself. The most dangerous network viruses are Nimda and SQLSlammer.
Logic Bombs The messagebox_info.png logic bomb virus is a piece of code that are inputted into a software system. When a certain and specific condition is met, such as clicking on an internet browser or opening a particular file, the logic bomb virus is set off. Many programmers set the malicious virus off during days such as April Fools Day or Friday the 13th. When the virus is activated, then various activities will take place. For example, files are permanently deleted.
Companion Viruses Companion viruses takes advantage of MS- messagebox_info.png DOS. This virus creates a new file with typically the messagebox_info.png .COM extensions, but sometimes the .EXD extension as well. When a user manually types in a program they desire without adding .EXE or any other specific extention, DOS will make the assumption that the user want the file with the extension that comes first in alphabetical order, and thus running the virus. The companion virus is rare among Windows XP computers as this particular operating system does not use the MS-DOS.
Boot Sector Viruses messagebox_info.png Boot sector viruses generally hide in the boot sector, either in the bootable disk or the messagebox_info.png hard drive. Unlike most viruses, this virus does not harm the files in the hard disk, but harm the hard disk itself. Boot sector viruses are uncommon at this day and age because these viruses are spread rapidly by floppy disks and not on CD-ROMs.
Multipartite Viruses Multipartite viruses are spreaded through infected media and usually hides in the memory. Gradually, the virus moves to the boot sector of the hard drive and infects executable files on the hard drive and later across the computer system

Oct 04, 2010 | Computers & Internet

Tip

How to Reduce Spreading of Virus on the Hard Drive


<b><u>An insight in VIRUS INFECTION and VIRUS SPREADING</u></b><br /> <br /> In today's computing spreading of virus is fast and very common.<br /> Even with an up to dated antivirus software the spreading of the virus infection is fast.<br /> This is because, we are not aware of how the virus spreads in our system.<br /> Once we know how the virus infects and spreads in our system then we will definitely reduce the risk, time and money spent.<br /> <br /> <b><u>Here is a short insight about viruses:</u></b><br /> <br /> 1) Virus is a small program code enabling it to to mingle or merge with other program codes.<br /> <br /> 2) The Virus Program Code is written such that it deletes data, corrupts data, steals data send it to the maker of the code, etc.<br /> <br /> 3) The virus cannot run on its own. It has to be executed just like other exe program files. That is why the autorun.inf file is required.<br /> <br /> <b><u>Now for an insight how we get infected:</u></b><br /> <br /> 1) Thorugh the internet: Usually when we browse any web site files are downloaded from the web server to our temporary internet folder(in windows) Then our Browser software reads the files and executes them in the browser window for us to view the web site.( If you are a website Designer you would understand this for others get an insight how internet browsers work), So when we are in the internet Virus files attach themself to the downloading files and enter our system in the temporary folder, From here they are executed by our browser software or when any program accesses the temporary folder.<br /> <br /> 2) Another one is we download a lot of data from the internet, we should be careful on what we are downloading because if the data downloaded is infected with virus then we are downloading the virus to our system along with the data, Don't download the data unless you are sure you could trust the maker of the data, program,etc.<br /> <br /> 3) From other medias like Flash Drive, CD's, DVD,s,etc.:<br /> We copy a lot of data to our computer from our friends and relatives, so if the data is already infected with virus we copy the virus to our system also, when we run os use the data the virus is executed along with it.<br /> <br /> <b><u>Now for an insight how Virus Spreads:</u></b><br /> <b></b> <br /> Just like any other program code the virus code has to be executed.<br /> That is why the virus merges with other exe's which are executable and not with the data file.<br /> <br /> For eg: a file with .avi, .dat, .3gp, etc. all these files are data files they dont execute, but they are used by exe files like wmplayer.exe, winamp.exe, vlplayer.exe, etc. The .avi .dat .3gp files are data files, the wmplayer.exe, winamp.exe vlplayer.exe are program files. Thus mostly exe program file get infected with virus.<br /> <br /> Usually when our system gets infected and any antivirus program cleans our system you can notice that the windows media player or winamp player or vlc media player does'nt work because it is removed or deleted by the antivirus for virus infection but the songs or video you saved is unharmed in the harddisk.<br /> <br /> That is why the virus code hangs or merges or infects mostly exe program files, So that it is executed along with the program file.<br /> <br /> So when you run an infected windows media player to play a song the virus code is also run along with the windows media player. Thus the virus is run again and again.<br /> <br /> There are hundreds of program files in the os for doing various tasks.<br /> we are going to look into just one program which the virus uses to spread itself in our system.<br /> <br /> The Program is non other than explorer.exe in windows. This program is needed to view or browse the data files stored in the hard disk.<br /> When we double click the My Computer Icon on the desktop the explorer.exe is executed which show you a window on your screen with the hard disk drives and cd dvd drives in the windows Now you can imagine how frequently you use the explorer.exe. You use it to view any data on the computer, even our desktop uses explorer.exe. This program is executed right when windows logs us on.<br /> <br /> When this program file is infected, it keeps on executing the virus each time we use the program. by this method the virus spreads fast to every parts of the hard disk.<br /> <br /> Likely there is a method to avoid executing the virus along with the explorer.exe each time we use it.<br /> <br /> When we double click any icon or object on our windows screen we execute the default command in the right click menu. Usually it is the Run Command. for eg: when you double click word the word.exe runs, similarly when we double click the my computer icon the default right menu option is <b>Open</b> which run the explorer.exe program.<br /> <br /> Instead of using this method to view files and data in our system we could use an alternate method which is using the explorer menu option when we right click my computer or right click the windows start button or in fact the explorer option is there whenever you right click any object on the screen.<br /> <br /> By using this explorer option in the right click you get a window with two panes one to the left and one to the right. In the left pane you have the directory structure showing all the directories and folders in our hard disk and in the right pane the content of the directory or folder selected in the left pane.<br /> <br /> Thus in this process we dont execute any code or program command when viewing the data in our hard disk. because we do not execute the explorer.exe more than once.<br /> <br /> So, Imagine how we reduce the spreading of virus by using this method.<br /> <br /> Say you have a file saved in your hard disk in this location<br /> <br /> <b>C:\data\monday\20-11-2010\office\media\todaysjob.doc</b><br /> <br /> If you want to open the file with word we will double click my computer, then double click C Drive, then Double Click data folder,then double click monday folder, then double click 20-11-2010 folder, then double click till you come to the media folder then you double click the todaysjob.doc which will execute the word.exe program which reads the data in the todaysjob.doc file and displays the content as required. In this process see how many time you will execute the virus, You will run the virus Seven Times.<br /> <br /> In our Alternate method You will run the Explorer.exe only once, Then on you just navigate to the media folder then double click the todaysjob.doc file in the right panel. So you execute the virus only once. <br /> <br /> Hence you reduce the spreading of VIRUS to a great extend.<br /> <br /> Good Luck, If there are any mistake please bare with me, I am not a good writer. If you have any Question Keep Me Posted.

on Oct 21, 2010 | Microsoft Windows XP Professional

1 Answer

I can't logon my toshiba portege m400 - s5032x a error message shows up saying Isass.exe application error the application failed to initialize properly (0xc0000005). Click on ok to terminate the...


Your system is infected by Sasser worm.The Sasser worm infects machines via network connections. It can attack entire networks of computers or one single computer connected to the Internet. The worm exploits a known windows vulnerability that is easily patched, however few systems seem to have this patch installed. It attacks Windows 2000 and Windows XP machines along with Windows NT and Windows Server 2003.


The patch from Microsoft known as the MS04-011 Security Update fixes the following vulnerabilities:
LSASS Vulnerability 
LDAP Vulnerability 
PCT Vulnerability 
Winlogon Vulnerability 
Metafile Vulnerability 
Help and Support Center Vulnerability 
Utility Manager Vulnerability 
Windows Management Vulnerability 
Local Descriptor Table Vulnerability 
H.323 Vulnerability 
Virtual DOS Machine Vulnerability 
Negotiate SSP Vulnerability 
SSL Vulnerability 
ASN.1 “Double-Free” Vulnerability 

Download the Windows patches for this vulnerability.Here is the link below:

http://www.microsoft.com/technet/security/bulletin/ms04-011.mspx



How Can I Remove the Sasser worm?

Follow these steps in removing the Sasser worm.

1) Disconnect your computer from the local area network or Internet

2) Terminate the running program
Open the Windows Task Manager by either pressing CTRL+ALT+DEL, selecting the Processes tab or selecting Task Manager and then the process tab on WinNT/2000/XP machines.
Locate one of the following programs (depending on variation), click on it and End Task or End Process

avserve.exe
avserve2.exe
skynetave.exe
any process running with the "_up.exe" suffix
Close Task Manager

3) Activate the Windows XP Firewall (if running Windows XP) or another firewall to prevent the worm from shutting your system down while downloading the patches. To activate the Windows XP firewall, follow these steps.
Click on Start, Control Panel
Double-click on Networking and Internet Connections, then click on Network Connnections
Right-click on the connection you use to access the Internet and choose Properties
Click on the Advanced Tab and check the box
"Protect my computer and network by limiting or preventing access to this computer from the Internet"
Click OK and close out of the Network and Control Panel

4) Remove the Registry entries
Click on Start, Run, Regedit
In the left panel go to 

HKEY_LOCAL_MACHINE>Software>Microsoft>Windows>Current Version>Run
In the right panel, right-click and delete the following entry

"avserve.exe"="%Windir%\avserve.exe"
"avserve2.exe"="%Windir%\avserve2.exe"
"skynetave.exe"= "%Windows%\skynetave.exe"
Close the Registry Editor

5) Delete the infected files (for Windows ME and XP remember to turn off System Restore before searching for and deleting these files to remove infected backed up files as well)
Click Start, point to Find or Search, and then click Files or Folders.
Make sure that "Look in" is set to (C:\WINDOWS).
In the "Named" or "Search for..." box, type, or copy and paste, the file names:

avserve.exe
avserve2.exe
skynetave.exe
C:\win2.log
Click Find Now or Search Now.
Delete the displayed files.
Empty the Recycle bin

6) Reboot the computer and update your antivirus software, and run a thorough virus scan using your favorite antivirus program.

For Automatic Removal of Sasser, download the Symantec removal tool, you'll still need to download the patches above and install them, however this removal tool will stop the Sasser worm from running, remove the items in the registry, and delete the infected files.

Dec 27, 2009 | Toshiba Portege M400-S5032X Tablet PC

1 Answer

Window can not find gphone.exe


Hi,
gphone.exe is nowadays one of the most dangerous virus spreading very fastly.Its a trojan and changes your IE homepage and sends tries to open gtalk and yahoo messenger.It even sends messages to gtalk contacts.Its icon is just like that of folder icon and people thinking of folder click on it get infected by the virus.
Gphone virus basically is a 260 kb .exe file which looks like a folder and it can take any name of any other folder if you have clicked on the virus folder which looks like a folder but it isnt.If you have a folder name “comptalks” in your D drive it will make a exe file in the folder named comptalks.exe and if you click on that exe file it too work as a virus.It makes .exe files in all the folders you have with the name of the folder.
To remove the gphone.exe virus you just need to follow simple steps:
Go to Task Manager ->Processes and then click on gphone.exe and click on end process.
After that manually go to folder where gphone.exe is present and simply delete it.
Or simply search for the exe file clicking which started sending messages through gtalk. If you clicked on 1.exe search for that file on task manager and then delete it.


Good luck.

Sep 02, 2009 | Microsoft Windows XP Professional With...

1 Answer

Svchost.exe application error


There is a very good chance that you are seeing the affects of a virus
infection,Please scan your system for infection with a good antivirus software (I recommend Quick Heal Total Security you can use a full featured 30 days trial version).
Hope this solves the issue

Jun 24, 2009 | Microsoft Windows XP Professional SP2 for...

2 Answers

Cannot install vista tranformation pack 9.0.1


Run antivirus on this machine clear out any viruses that may be infecting this file then proceed to install, if this information help you please rate it Fixya, thanks

Apr 26, 2009 | Microsoft Windows XP Professional

2 Answers

When i create a new folder in c:\


Your system is infected by virus.Scan your system with antivirus.

Apr 24, 2009 | Microsoft Windows XP Professional

5 Answers

RECYCLER FOLDER Virus or Malware in all drives.


If you remember when you got this virus or whatever it is. Try to restore to an earlier date, by going to Start, Programs, Accessories, System Tools, and System Restore. Choose roll back to eariler date and pick a date.

Mar 15, 2009 | Altec Lansing ADA995 Speaker

1 Answer

I couldn't view the hidden files when i apply show hidden files in my folder options in tools menu in menu bar.


Folder Options is removed from Tools in Windows by a virus. The virus is called W32.Rontokbro@mm OR W32/Rontokbro.gen@MM

The removal of this virus is slightly difficult. Antivirus can't remove it automatically. However detailed procedure to remove it is available at

http://coolexp.blogspot.com/2008/01/fold...

About this Virus/Worm:
What it does is creating new files which looked like a folder but its actually a .exe file. Unless you’ve enabled the view extensions in the folder options or else you won’t see the .exe extension of the file. The file is approximately 43.7Kb and normally people will click to open it because it looked like a folder. So after you’ve open it, the virus will run each time during startup and keep on spreading and spreading… into the harddrives.

More troubles coming up. Normally when you click “Tools” in explorer, there’s a “folder options” underneath it. Once the pc is infected with the virus, the Folder Options will be missing, which disabled you to change the options to view the extension of the files. So when you see a new folder appeared from nowhere and you clicked to open it out of curiousity, the virus spread more again. Moreover, the virus disabled the registry edit where you will see this message “Registry edit is disabled by the administrator” everytime you try to edit the registry.

So how to clean the virus then? I found some solution from the following link and have successfully cleaned it from my system.

http://coolexp.blogspot.com/2008/01/fold...

It will help you to get rid of this virus named W32.Rontokbro@mm aka brontok.a and to get back your hidden files. Source(s): http://coolexp.blogspot.com/2008/01/fold...

P.S.: If this information was helpful, please rate this solution.

Mar 14, 2009 | Microsoft Windows XP Professional

1 Answer

Windows cannot find GoogleUdate.exe


Are you using any of google package. If yes, try downloading full google package from following link.
http://pack.google.com/intl/en-gb/pack_installer.html?hl=en-gb

If you keeping that pop-up every time you turn on your computer there could be possible infection. Because there is a known virus these days which use googleupdate.exe file for spreading infections on your computer.

Dec 13, 2008 | Facebook Social Network

Not finding what you are looking for?
Microsoft Windows XP Professional for PC Logo

Related Topics:

141 people viewed this question

Ask a Question

Usually answered in minutes!

Top Microsoft Computers & Internet Experts

micky dee

Level 3 Expert

2986 Answers

Piyal Perera
Piyal Perera

Level 3 Expert

528 Answers

Les Dickinson
Les Dickinson

Level 3 Expert

18424 Answers

Are you a Microsoft Computer and Internet Expert? Answer questions, earn points and help others

Answer questions

Manuals & User Guides

Loading...