SG Broadband Community

Hola.
I've been having weird problems with XP pro lately. First, McAfee VShield stopped running. It wouldn't start on startup, nor could I load it once in XP.
Then, certain programs started behaving funny. Like if I plug in my digicam, it recognizes it but then gives me some error message about "%1" or something (I forget right now).

Also, weird things are going on like when I choose the "Open With" list on right-click, one of my options is just "Program." Huh?

Anyway, I did a full system scan with updated virus definitions and McAfee found nothing. I uninstalled McAfee and reinstalled to see if I could get VShield to work again. Nope! When I go to certain McAfee options it tells me to reinstall. Tried that a couple times now.

Then I tried to install Norton AntiVirus Corporate Edition 7.6. When it gets to the end of the install, however, it says, "Error 1920.Service DefWatch (DefWatch) failed to start. Verify that you have sufficient privileges to start system services." My XP username has full administration priveleges so I know this isn't the problem.

Is there a diagnostics program I can run that can just tell me if XP is somehow missing components? Like maybe I don't have a virus but some harmful program deleted some needed files?

I would appreciate any help as this is really chapping my ass

Start|Run> sfc /scannow

That will scan your system files and replace any found corrupt or missing.
Have your XP CD handy, you'll be asked for it.

BUT, It sounds to me that you have the KLEZ virus. I would go to Nortons site and download the FIXKLEZ.COM file, boot to safe mode, and run it before attempting to replace system files.

FIXKLEZ.COM will not only remove the KLEZ virus, but will remove another virus that comes with it called KLERN, and fix any files that these viruses have corrupted or replaced.

If you're on a network, unplug all PC's and run FIXKLEZ.COM on each of them before plugging back in (Reboot your router as well if you have one). This virus jumps across network shares.

If FIXKLEZ.COM finds no instances of the klez virus, it will not harm your system. It also writes a log file in the same dir it is ran from so you can check what files were fixed, or virus files that were removed.

If you're system is ok, go ahead with
sfc /scannow
From the 'run' line.


BTW -The KLEZ virus disables anti virus software and eats exe files for lunch., that's why I believe you have it.

Thanks for the info. I ran FixKlez from Safe Mode and it found no instances of Klez or Klern. That's comforting but at the same time annoying since I still don't know what happened.

I'll try the scannow option now and see what happens.

Update -
Ran scannow. Some DLL's were replaced but still can't get Norton working. Rebooted, ran scannow again (didn't change anything this time), and ran FixKlez again to be safe. No Klez found. Still can't get Norton to work...
Any other ideas?

Another update-
A scan from Housecall of my entire HD turned up no virus.

Norm's right, it does sound an awful lot like a klez virus problem.

Klez can infect your AV program too. Try reinstaling Norton if possible. If worse comes to worse you allways have system restore.

Quick edit. If you have troubles installing under your username regardless of whether or not you have admin privlidges. You need to sign in as THE Administrator (The one that is default in XP-PRO).

I've tried reinstalling all programs mentioned.
Ran a scan off of Norton's site today. Still no virus found.

Signed in as THE administrator and still couldn't get it to work.

Tried system restore all the way back a month. No luck...

I don't know what I'll do next. Might back up my personal files and do a format/fresh OS install