Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

No Start Menu Or Desktop Icons. Please Assist.


  • Please log in to reply
27 replies to this topic

#1 ChicagosOnlyPunk

ChicagosOnlyPunk

  • Members
  • 20 posts
  • OFFLINE
  •  
  • Local time:11:52 AM

Posted 30 June 2008 - 11:18 AM

Today I had restarted my computer after it had frozen while browsing the internet. After restarting there is no longer a start menu available or any desktop icons. I can still run programs from Ctrl-Alt-Del. Has anyone had a similar issue? Please assist. Thank you.

Edited by TMacK, 30 June 2008 - 12:32 PM.


BC AdBot (Login to Remove)

 


#2 PropagandaPanda

PropagandaPanda


  • Malware Response Team
  • 10,433 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:52 PM

Posted 30 June 2008 - 12:31 PM

Hello ChicagoesOnlyPunk.

To restore your desktop, type
explorer.exe
into the Task Manager run box.

If you get an error message, please copy it back exactly as you saw it.

If you could give me a dump of your Event Logs, that would help diagnose the problem.
  • Please download dumpel.exe by Microsoft and save it to your desktop.
  • Double click dumpel and install it.
  • Copy the following into a notepad. Do not copy the word "Code".
    @ECHO OFF
    ECHO Please wait.
    ECHO Logs Dumped at Date:%date% Time:%time%>EventLogDump.txt
    dumpel -l system -c -format tdTISus >systemlogdumptemp.txt
    find /v ",4," systemlogdumptemp.txt>>EventLogDump.txt
    del systemlogdumptemp.txt
    dumpel -l application -c -format tdTISus>applogdumptemp.txt
    find /v ",4," applogdumptemp.txt>>EventLogDump.txt
    del applogdumptemp.txt
    start EventLogDump.txt
    del %0
  • Click File, then Save As... .
  • Click Desktop on the left.
  • Under the Save as type dropdown, select All Files.
  • In the box File Name, input logdump.bat.
  • Hit OK.
Double click logdump.bat. The script should take only a moment to run. When it is finished, a text file named EventLogDump.txt (saved on your desktop) will open.

Reply back with EventLogDump.txt attached or copied into your post.

With Regards,
The Panda

#3 ChicagosOnlyPunk

ChicagosOnlyPunk
  • Topic Starter

  • Members
  • 20 posts
  • OFFLINE
  •  
  • Local time:11:52 AM

Posted 30 June 2008 - 12:47 PM

I went ahead and ran explorer.exe which did restore the desktop icons but not the start menu. I ran the program asked and recieved this. Also, since the start menu has left I can no longer copy and paste. I can click copy but the paste is never available afterwards. Please assist.

Logs dumped at Date:Mon 06/30/2008 Time:10:44:15.70

---------- SYSTEMLOGDUMPTEMP.TXT

---------- APPLOGDUMPTEMP.TXT

#4 ChicagosOnlyPunk

ChicagosOnlyPunk
  • Topic Starter

  • Members
  • 20 posts
  • OFFLINE
  •  
  • Local time:11:52 AM

Posted 30 June 2008 - 12:53 PM

Okay, I tried to download and install the dumpel.exe. Above, i didnt realize I had to install the dumpel.exe before running the log. It advised that windows could not install the program due to windows installer not being available. I tried to install it through the windows website but i am getting this error during installation. "Setup could not verify the integrity of the file update.if. Make sure the Cryptographic service is running on this computer." Now i am getting scared. Nothing out the ordinary happened. Firefox just froze. Please assist.

Edited by ChicagosOnlyPunk, 30 June 2008 - 12:54 PM.


#5 PropagandaPanda

PropagandaPanda


  • Malware Response Team
  • 10,433 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:52 PM

Posted 30 June 2008 - 01:08 PM

Hello.

I don't see how the copy and paste would be affected.

Open your command prompt by typing cmd into the run box.

Then copy in
msiexec.exe /unregister
msiexec.exe /regserver
sc config cryptsvc start= auto
sc start cryptsvc

(the first two will probably show anything)

Take note of any error messages you recieve.

Now try to install dumpel and run the script again. This will give a complete dump of the logs.

But if you cannot install it, open your Event Viewer and manually copy over any errors you see.

With Regards,
The Panda

#6 ChicagosOnlyPunk

ChicagosOnlyPunk
  • Topic Starter

  • Members
  • 20 posts
  • OFFLINE
  •  
  • Local time:11:52 AM

Posted 30 June 2008 - 01:18 PM

after typing in the last line in the command. I recieved a error 1068: The dependency service or group failed to start. Also, i dont understand the part with the Event Viewer you want me to do. Thank you!

#7 PropagandaPanda

PropagandaPanda


  • Malware Response Team
  • 10,433 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:52 PM

Posted 30 June 2008 - 01:36 PM

Hello.

I'm not sure how this happened. If the service it depended on didn't start, your computer probably wouldn't be starting either.

Could I get a list of services on your computer?
  • Copy the following into a notepad. Do not copy the word "Code".
    @ECHO OFF
    sc query type= service>report.txt
    report.txt
    del %0
  • Click File, then Save As... .
  • Click Desktop on the left.
  • Under the Save as type dropdown, select All Files.
  • In the box File Name, input list.bat.
  • Hit OK.
When done properly, the icon should look like Posted Image for a .bat file or Posted Image for a .reg.

Double click list.bat to run it. You will see a notepad open after with a list of services. Copy that back into your post.

Also, i dont understand the part with the Event Viewer you want me to do.

No worries, I'll guide you through :thumbsup: .

Type into the run box:
eventvwr.msc
to open the Event Viewer.

Click on Event Viewer (local) to expand it. Click on Applications.

Look down the Type column for red X's. For any that you find double click them. A box will open. Copy down the description.

Repeat for the System category.

With Regards,
The Panda

#8 extremeboy

extremeboy

  • Malware Response Team
  • 12,975 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:52 PM

Posted 30 June 2008 - 01:40 PM

The dependency service or group failed to start. Also, i dont understand the part with the Event Viewer you want me to do. Thank you!

You can go to Event Viewer by going to Start>Run>"eventvwr.msc"(without quotes)
Under the system catogory copy and paste any error messages that occured when this promblem occured.
Any help on Event Viewer can be found here: http://www.bleepingcomputer.com/forums/t/40108/how-to-use-event-viewer/
Note: Please do not PM me asking for help, instead please post it in the correct forum requesting for help. Help requests via the PM system will be ignored.

If I'm helping you and I don't reply within 48 hours please feel free to send me a PM.

The help you receive here is always free but if you wish to show your appreciation, you may wish to Posted Image.

#9 ChicagosOnlyPunk

ChicagosOnlyPunk
  • Topic Starter

  • Members
  • 20 posts
  • OFFLINE
  •  
  • Local time:11:52 AM

Posted 30 June 2008 - 01:44 PM

Okay, it will not open any box when i double click on the errors. There are TONS of red X's in applications but in system there are 2 that show right when everything started. It says source "W32time". I tried click on properties but still nothing is popping up. I attached the exported file also.

Attached Files


Edited by ChicagosOnlyPunk, 30 June 2008 - 01:47 PM.


#10 PropagandaPanda

PropagandaPanda


  • Malware Response Team
  • 10,433 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:52 PM

Posted 30 June 2008 - 01:49 PM

Hello.

W32time is your windows time sycning service. You can disable that by typing
sc stop w32time
sc config w32time start= disabled


This one is unrelated.

Can you copy over the other ones you see? They should popup when you double click them.

With Regards,
The Panda

#11 extremeboy

extremeboy

  • Malware Response Team
  • 12,975 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:52 PM

Posted 30 June 2008 - 01:50 PM

There are TONS of red X's in applications but in system there are 2 that show right when everything started.

If nothing pops up when you click Properties,just double click on the event where the error occured.See if that works.
Since there is alot of X's in the application, copy and paste the most recent errors and see if there is any pattern that you see.

Edit: strange....Didn't see you attach any files until I posted...

Edited by extremeboy, 30 June 2008 - 01:50 PM.

Note: Please do not PM me asking for help, instead please post it in the correct forum requesting for help. Help requests via the PM system will be ignored.

If I'm helping you and I don't reply within 48 hours please feel free to send me a PM.

The help you receive here is always free but if you wish to show your appreciation, you may wish to Posted Image.

#12 PropagandaPanda

PropagandaPanda


  • Malware Response Team
  • 10,433 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:52 PM

Posted 30 June 2008 - 01:56 PM

Hello.

Well I didn't mean for the whole log to be exported. But since you did, could you export the application log too?

EDIT: Could you get the service list as per this post please?

With Regards,
The Panda

Edited by PropagandaPanda, 30 June 2008 - 01:58 PM.


#13 ChicagosOnlyPunk

ChicagosOnlyPunk
  • Topic Starter

  • Members
  • 20 posts
  • OFFLINE
  •  
  • Local time:11:52 AM

Posted 30 June 2008 - 01:58 PM

There was nothing else that really pops out during the timeframe. It was about 7-8pm last night when it from. The application errors are all from days before. I also ran spybot which found 248 items and removed them all. It still did not help. I have attached the applications also. Its still not letting me bring up the properties on either. I have no idea why.

Attached Files


Edited by ChicagosOnlyPunk, 30 June 2008 - 01:59 PM.


#14 PropagandaPanda

PropagandaPanda


  • Malware Response Team
  • 10,433 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:52 PM

Posted 30 June 2008 - 02:08 PM

Hello.

Your applications log is SWAMPED with errors from a Cisco errors.

Try disabling that service and see if it gets better. If this is essential to you, you will need to reinstall that program.

Type into the command prompt:
sc stop STCAgent
sc config STCAgent start= disabled


Restart your computer and see if the problem gets any better.

With Regards,
The Panda

#15 ChicagosOnlyPunk

ChicagosOnlyPunk
  • Topic Starter

  • Members
  • 20 posts
  • OFFLINE
  •  
  • Local time:11:52 AM

Posted 30 June 2008 - 02:09 PM

Service report has been attached.

Attached Files






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users