HELP!! PC's gone crazy

[jessiemc12]

Here is a sample of what our window 2000 PC's are doing

1. Cut/Copy/Paste functionality is disabled in almost all applications. When I copy something and want to paste it, the Paste option is not enabled. It's like the data never made the clipboard.

2. I cannot drag and drop files across folders. I cannot even move the files around on my desktop. Even if I try copying a file and pasting it, it doesnt work.

3. Internet Explorer will not open a page in a new window. If there is a link which will open a page in a new window, it wont work.

4. Windows Media Player does not run. It says "Can't perform operation. Low Memory."

5. when trying to send in outlook, get "operation failed"


This is what we've done
Ran Norton
Adware
Hijack this
Spysweeper
Spybot

What fixed it was using
run SFC /SCANNOW, reinstalling IE and updating all the patches
I can't figure out what has caused this to start happening? Anyone else know?

Is there a spyware out there that can do this to our systems and what is it!!!??? It is running amuck on our systems. Started out with one, now it's about 15 and new case everyday

:banghead:

[Shorty]

This sounds more like a corporate network rather a couple of home PCs.

Anymore background on this?? Any servers/domain controllers/office workgroup servers??

Id be more inclined to think this is a virus.

[jessiemc12]

It is a corp network. It's not a virus, I've worked with Symantec on this and have not come up with anything.

we are a NW shop running 5.1, all Pc's log into this server. All Pc's are windows 2000 patched to the latest, all run norton and adware.
The only thing I could think of is we used ghost to push out media player 9, in the mix of things perhaps the workstation used to create the AVI package had a spyware or malware on it and it was pushed out to the workstations.

but what spyware would do this? so I know what to look for to fix it without having to do SFC/Scannow and repatch the systems. It's not on all PC's. Like I said it started in one, then about everyday for the past week we've had at least one do the same thing

thanks

[Shorty]

The thing with spyware (well unless something really new is out that no one is reporting) wouldn't transmit over the network. Hence why I thought this was more likely a virus.

IF the original imaged machine did have something on it, I would think "yeah.. that's infinitely possible" but as it's not happening on every machine in one go, then it's dubious.

SFC/Scannow is repairing damaged system files. With copy & paste not working.. it screams explorer.exe or a dependancy of.

Have you got any machines you haven't sent MP9 down to ? Just to be sure??

If Norton & AdAware aren't picking up anything then it could be a third party application that is installed on the imaged machine and missing on the clients.

Anything unique or different running on the original host?

Edit:: Clipboard and Outlook. Hmm...

Check the state of the imaging hosts install of office & other dependant windows apps. Could have taken a bad/damaged set of shared dll's into the image.. and they are overwriting non-corrupt ones.

[primesuspect]

Can you post a HJT log from one of the machines?