Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

taskbar and desktop icon gone, cannot right click


  • Please log in to reply
16 replies to this topic

#1 kwaidaan_gurl

kwaidaan_gurl

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:06:35 AM

Posted 01 March 2009 - 01:32 PM

hello guys im newbie here...

just now, i installed avira and did the update.. then i did the fullscan.. found trojan... and my avg 8.0 didnt detect it at all...

then i shut down.. when i start my laptop again and open the avira.. it cannot be access.. and it says

the application module cannot be found....
due to the avconfig.exe..
then when i used add/remove program.. it says cannot be remove.. this may caused by a virus... i already tried the avira removal tools.. it says no malware found..

i scan with superantispyware.. it also says no spyware/malware found... an avg tooo.....

this is when i try to open the avira

Posted Image
[IMG]h

this is when i try to remove the avira

[img]http://img216.imageshack.us/img216/8997/32280076.png[/img]
[url="http://g.imageshack.us/img216/32280076.png/1/"][img]http://img216.imageshack.us/img216/32280076.png/1/w800.png[/img]

BC AdBot (Login to Remove)

 


#2 kwaidaan_gurl

kwaidaan_gurl
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:06:35 AM

Posted 01 March 2009 - 01:35 PM

hello guys.....

i need ur help regarding to my dekstop and taskbar menu which is missing... and cannot right click also.. only my wallpaper is left here...

to view my dekstop and start menu again i have to ctrl+alt+del to open my taks manager..
new task...explorer.exe and i have type it twice since there are pop up windows come out...
data execution prevention...run dll as a program...
and i dont what the hell it iss...

i already run the superantispyware and ad-ware.. and there is no spyware...
i run the avg 8.0 and there is no virus also...

i already try the system restore also.. and it is still the same...
what is happening... omg....

actually it happen after i uninstall the avg since my avg cannot update...and i want to reinstall it...
after restart.. walla....there is nothing left at my dekstop..

and i have to use task manager all the time...
when i go to the safe mode.. my dekstop is normal...

my taskbar and desktop is not hidden..


is it because of virus?? registry?? dep or dll??
and it sometimes when i open paint msword or any other application the data execution prevention come out.. seems like it treat my program as a thread or virus... and i have to open it twice...


this is what happened after i run explorer.exe twice

Posted Image

#3 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,220 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:07:35 AM

Posted 01 March 2009 - 02:32 PM

Hello and welcome. let's do a few things here and see if we can straighten this out.

First one more malware scan and psot the log.
Next run MBAM:
Please download Malwarebytes Anti-Malware (v1.32) and save it to your desktop.
alternate download link 1
alternate download link 2
If you have a previous version of MBAM, remove it via Add/Remove Programs and download a fresh copy.
  • Make sure you are connected to the Internet.
  • Double-click on mbam-setup.exe to install the application.
  • When the installation begins, follow the prompts and do not make any changes to default settings.
  • When installation has finished, make sure you leave both of these checked:
    • Update Malwarebytes' Anti-Malware
    • Launch Malwarebytes' Anti-Malware
  • Then click Finish.
MBAM will automatically start and you will be asked to update the program before performing a scan.
  • If an update is found, the program will automatically update itself.
  • Press the OK button to close that box and continue.
  • If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install. Alternatively, you can update through MBAM's interface from a clean computer, copy the definitions (rules.ref) located in C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware from that system to a usb stick or CD and then copy it to the infected machine.
On the Scanner tab:
  • Make sure the "Perform Quick Scan" option is selected.
  • Then click on the Scan button.
  • If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
  • The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
  • When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box and continue with the removal process.
Back at the main Scanner screen:
  • Click on the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked, and click Remove Selected.
  • When removal is completed, a log report will open in Notepad.
  • The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  • Copy and paste the contents of that report in your next reply and exit MBAM.
Note: If MBAM encounters a file that is difficult to remove, you may be asked to reboot your computer so it can proceed with the disinfection process. Regardless if prompted to restart the computer or not, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware. MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you after scanning with MBAM. Please temporarily disable such programs or permit them to allow the changes.


It is very possible that the malware changed or corrupted files.
Now for the desktop do this:
Go to Start > Control Panel > Display. Click on the "Desktop" tab, then the "Customize Desktop..." button.
Click on the "Web" tab, then under Web Pages, uncheck and delete everything you find (except "My Current Home page").
These are some common malware related entries you may see:

Security Info
Warning Message
Security Desktop
Warning Homepage
Privacy Protection
Desktop Uninstall


If present, select each entry and click the Delete button.
Also, make sure the Lock desktop items box is unchecked. Click "Ok", then "Apply" and "Ok".

When done, go back into your Desktop Settings and you should be able to change the color/theme to whatever you want.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,220 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:07:35 AM

Posted 01 March 2009 - 02:40 PM

Hi, I merged your 2 topics together.. For the Avira issue...
Its not unusual to receive such an error after using specialized fix tools.

A "Cannot find...", "Could not run...", "Error loading... or "specific module could not be found" message is usually related to malware that was set to run at startup but has been deleted. Windows is trying to load this file but cannot locate it since the file was mostly likely removed during an anti-virus or anti-malware scan. However, an associated orphaned registry entry remains and is telling Windows to load the file when you boot up. Since the file no longer exists, Windows will display an error message. You need to remove this registry entry so Windows stops searching for the file when it loads.

To resolve this, download Autoruns, search for the related entry and then delete it.

Create a new folder on your hard drive called AutoRuns (C:\AutoRuns) and extract (unzip) the file there. (click here if you're not sure how to do this.)
Open the folder and double-click on autoruns.exe to launch it.
Please be patient as it scans and populates the entries.
When done scanning, it will say Ready at the bottom.
Scroll through the list and look for a startup entry related to the file(s) in the error message.
Right-click on the entry and choose delete.
Reboot your computer and see if the startup error returns.

credit to quietman7 for these tools.

Edited by boopme, 01 March 2009 - 02:41 PM.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 kwaidaan_gurl

kwaidaan_gurl
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:06:35 AM

Posted 02 March 2009 - 12:16 PM

Hi, I merged your 2 topics together.. For the Avira issue...
Its not unusual to receive such an error after using specialized fix tools.

A "Cannot find...", "Could not run...", "Error loading... or "specific module could not be found" message is usually related to malware that was set to run at startup but has been deleted. Windows is trying to load this file but cannot locate it since the file was mostly likely removed during an anti-virus or anti-malware scan. However, an associated orphaned registry entry remains and is telling Windows to load the file when you boot up. Since the file no longer exists, Windows will display an error message. You need to remove this registry entry so Windows stops searching for the file when it loads.

To resolve this, download Autoruns, search for the related entry and then delete it.

Create a new folder on your hard drive called AutoRuns (C:\AutoRuns) and extract (unzip) the file there. (click here if you're not sure how to do this.)
Open the folder and double-click on autoruns.exe to launch it.
Please be patient as it scans and populates the entries.
When done scanning, it will say Ready at the bottom.
Scroll through the list and look for a startup entry related to the file(s) in the error message.
Right-click on the entry and choose delete.
Reboot your computer and see if the startup error returns.

credit to quietman7 for these tools.

well i try to click the (click here if you're not sure how to do this.) it doesnt direct me to the link....thanks
:thumbsup:

#6 kwaidaan_gurl

kwaidaan_gurl
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:06:35 AM

Posted 02 March 2009 - 01:03 PM

Hello and welcome. let's do a few things here and see if we can straighten this out.

First one more malware scan and psot the log.
Next run MBAM:
Please download Malwarebytes Anti-Malware (v1.32) and save it to your desktop.
alternate download link 1
alternate download link 2
If you have a previous version of MBAM, remove it via Add/Remove Programs and download a fresh copy.

  • Make sure you are connected to the Internet.
  • Double-click on mbam-setup.exe to install the application.
  • When the installation begins, follow the prompts and do not make any changes to default settings.
  • When installation has finished, make sure you leave both of these checked:
    • Update Malwarebytes' Anti-Malware
    • Launch Malwarebytes' Anti-Malware
  • Then click Finish.
MBAM will automatically start and you will be asked to update the program before performing a scan.
  • If an update is found, the program will automatically update itself.
  • Press the OK button to close that box and continue.
  • If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install. Alternatively, you can update through MBAM's interface from a clean computer, copy the definitions (rules.ref) located in C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware from that system to a usb stick or CD and then copy it to the infected machine.
On the Scanner tab:
  • Make sure the "Perform Quick Scan" option is selected.
  • Then click on the Scan button.
  • If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
  • The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
  • When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box and continue with the removal process.
Back at the main Scanner screen:
  • Click on the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked, and click Remove Selected.
  • When removal is completed, a log report will open in Notepad.
  • The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  • Copy and paste the contents of that report in your next reply and exit MBAM.
Note: If MBAM encounters a file that is difficult to remove, you may be asked to reboot your computer so it can proceed with the disinfection process. Regardless if prompted to restart the computer or not, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware. MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you after scanning with MBAM. Please temporarily disable such programs or permit them to allow the changes.


It is very possible that the malware changed or corrupted files.
Now for the desktop do this:
Go to Start > Control Panel > Display. Click on the "Desktop" tab, then the "Customize Desktop..." button.
Click on the "Web" tab, then under Web Pages, uncheck and delete everything you find (except "My Current Home page").
These are some common malware related entries you may see:

Security Info
Warning Message
Security Desktop
Warning Homepage
Privacy Protection
Desktop Uninstall


If present, select each entry and click the Delete button.
Also, make sure the Lock desktop items box is unchecked. Click "Ok", then "Apply" and "Ok".

When done, go back into your Desktop Settings and you should be able to change the color/theme to whatever you want.

this is my malware log
Malwarebytes' Anti-Malware 1.34
Database version: 1814
Windows 5.1.2600 Service Pack 3

3/3/2009 2:03:20 AM
mbam-log-2009-03-03 (02-03-20).txt

Scan type: Full Scan (C:\|D:\|)
Objects scanned: 102078
Time elapsed: 19 minute(s), 57 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

#7 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,220 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:07:35 AM

Posted 02 March 2009 - 01:23 PM

sorry ..http://www.bleepingcomputer.com/tutorials/extract-zip-files-in-windows-me-xp-2003/
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#8 kwaidaan_gurl

kwaidaan_gurl
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:06:35 AM

Posted 02 March 2009 - 01:32 PM

thanks!!

#9 kwaidaan_gurl

kwaidaan_gurl
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:06:35 AM

Posted 02 March 2009 - 02:53 PM

sorry.... i forgot to ask... what will happen after i extract the autorun... and what is thin autorun link to my problem.. i want know as i know nothing about this stuff....

thank!!!

#10 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,220 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:07:35 AM

Posted 02 March 2009 - 03:26 PM

AutoRuns shows you what programs are configured to run during system bootup or login. These programs include ones in your startup folder, Services, Run, RunOnce, and other Registry keys. You can highlight an entry and click the "jump to" button to launch Regedit with the selected entry. In addition to startup programs, Autoruns also displays a list of Services, Scheduled Tasks, Winsock Providers, Internet Explorer BHOs and more - each of them can also be enabled/disabled.

IT will Create a new folder on your hard drive called AutoRuns (C:\AutoRuns)
Then you Scroll through the list and look for a startup entry related to the file(s){ avconfig.exe} in the error message.
Right-click on the entry and choose delete.

We wanted to stop the error message you had here. If this is no longer occurring then we don't need to peoceed wuth Autoruns.

the application module cannot be found....
due to the avconfig.exe..


How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#11 kwaidaan_gurl

kwaidaan_gurl
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:06:35 AM

Posted 02 March 2009 - 05:04 PM

hello again..

i did the autorun as u ask.. but i didnt found the avconfig.exe...

#12 kwaidaan_gurl

kwaidaan_gurl
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:06:35 AM

Posted 02 March 2009 - 05:14 PM

how about the avcenter.exe.......


Posted Image

Posted Image
Posted Image

do i have to remove it??

#13 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,220 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:07:35 AM

Posted 02 March 2009 - 05:48 PM

Hi,I thought it may have been a file chiding the malware but it is probably corrupted. I think if you uninstall then reinstall the Avg you should correct it.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#14 kwaidaan_gurl

kwaidaan_gurl
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:06:35 AM

Posted 02 March 2009 - 10:22 PM

hi..

i already removed the avira through safe mode.. but i still have problem on the desktop icon, taksbar menu and the right click....

every time i click any application... the data prevention execution message come out... help...

thanks..

#15 kwaidaan_gurl

kwaidaan_gurl
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:06:35 AM

Posted 02 March 2009 - 10:30 PM

hello there...

when i start my windows... it didnt start properly... there is no start menu, no dekstop icon and no right click.. i have to ctrl+del+alt everytime i want to run the esplorer.exe... and i have to run it twice...

then come out 2 dep-data execution prevention message... says that windows have to close this this program....

help... is my windows glitch or crashing?? seems like it treat any application i open as a thread...

i dont want to format my laptop..
thanksss




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users