Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Desk Top Problem!


  • Please log in to reply
10 replies to this topic

#1 paco84

paco84

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:01:26 AM

Posted 20 November 2005 - 01:11 AM

Well the thing is that my computer kinda froze on me so i restarted it and then it would only go as so far as to showing my wallpaper and nothing else. Looks as if everyloading fine couase i can still hit CTRL+ALT+DELETE and get to firefox to still be on the internet. But how would i go about fixing this prpblem. I mean nothing shows at all only my wallpaper. NO SHORTCUTS, not even the bottom bar, no time, not even the START. If anyone can figure this out please put i rather learn and fix this problem myself then going to somewhere to pay to fix this little issue.

BC AdBot (Login to Remove)

 


#2 windowsxp550

windowsxp550

  • Members
  • 133 posts
  • OFFLINE
  •  
  • Location:Maplewood, Minnesota
  • Local time:01:26 AM

Posted 20 November 2005 - 03:06 AM

Sounds to me like windows explorer is not opening. First, to make things easier, start windows explorer manually (CNTRL + ALT + DEL then browse to the C:/windows/system32/ folder, and look for Explorer.exe, when you find it open it).

Then I would run a spyware scan, and a virus scan. If you don't have a spyware scanner, you can download Ad Aware, http://www.lavasoftusa.com/software/adaware/ , it's free. Also for a virus scan, if you don't have one, you can use, Trend Micro's Free online scan, located here: http://housecall.trendmicro.com/.
Free PC Help: At FixMyXP.com, our Speciality is Windows XP.
Got An XP Problem or Question? Get expert help, all free Check it out!
Click Here to go to FixMyXP's Windows XP Help Forum

#3 paco84

paco84
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:01:26 AM

Posted 20 November 2005 - 11:20 AM

Sounds to me like windows explorer is not opening. First, to make things easier, start windows explorer manually (CNTRL + ALT + DEL then browse to the C:/windows/system32/ folder, and look for Explorer.exe, when you find it open it).

Then I would run a spyware scan, and a virus scan. If you don't have a spyware scanner, you can download Ad Aware, http://www.lavasoftusa.com/software/adaware/ , it's free. Also for a virus scan, if you don't have one, you can use, Trend Micro's Free online scan, located here: http://housecall.trendmicro.com/.


Well i tried to find the EXPLORER.EXE file but i can't seem to find it. Could it be anywhere else? Or would u happen to know if i can perform a search? Hope u can help thanks in advance.. :thumbsup:

#4 hamluis

hamluis

    Moderator


  • Moderator
  • 55,902 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:01:26 AM

Posted 20 November 2005 - 11:29 AM

I suggest running chkdsk.

Running Chkdsk from My Computer or Windows Explorer - http://www.microsoft.com/resources/documen...kd_tro_tvlq.asp AND Running Chkdsk to Repair File Systems - http://www.microsoft.com/resources/documen...kd_tro_xudm.asp

Chkdsk Explained, Understanding What Chkdsk Does - http://support.microsoft.com/kb/314835/EN-US/

It probably would not hurt to defrag after running chkdsk.

Louis

Edited by hamluis, 20 November 2005 - 11:30 AM.


#5 paco84

paco84
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:01:26 AM

Posted 20 November 2005 - 11:37 AM

I suggest running chkdsk.

Running Chkdsk from My Computer or Windows Explorer - http://www.microsoft.com/resources/documen...kd_tro_tvlq.asp AND Running Chkdsk to Repair File Systems - http://www.microsoft.com/resources/documen...kd_tro_xudm.asp

Chkdsk Explained, Understanding What Chkdsk Does - http://support.microsoft.com/kb/314835/EN-US/

It probably would not hurt to defrag after running chkdsk.

Louis

How wouyld i go about running CHKDSK when i my only way is to go through (ALT+CTRL+DELETE) since nothing else pops up when i start my computer. Thanks for the help...;)

#6 hamluis

hamluis

    Moderator


  • Moderator
  • 55,902 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:01:26 AM

Posted 20 November 2005 - 11:42 AM


I suggest running chkdsk.

Running Chkdsk from My Computer or Windows Explorer - http://www.microsoft.com/resources/documen...kd_tro_tvlq.asp AND Running Chkdsk to Repair File Systems - http://www.microsoft.com/resources/documen...kd_tro_xudm.asp

Chkdsk Explained, Understanding What Chkdsk Does - http://support.microsoft.com/kb/314835/EN-US/

It probably would not hurt to defrag after running chkdsk.

Louis

How wouyld i go about running CHKDSK when i my only way is to go through (ALT+CTRL+DELETE) since nothing else pops up when i start my computer. Thanks for the help...;)


Chkdsk can be run from the XP CD, it's on the Recovery Console.

Recovering Windows XP Using RC (Screens) - http://www.wown.com/j_helmig/wxprcons.htm

You want to use the CHKDSK /R command (rather than the command shown in the link above).

Louis

#7 windowsxp550

windowsxp550

  • Members
  • 133 posts
  • OFFLINE
  •  
  • Location:Maplewood, Minnesota
  • Local time:01:26 AM

Posted 20 November 2005 - 11:57 AM

hamluis,

This isn't good advice. Recovery Console is useful when the system is NOT booting into windows. This person is already in windows, so it makes more sense to debug the problem from within windows.

Quote from Microsoft:
"This article describes the functionality and limitations of the Windows Recovery Console. If your Microsoft Windows XP-based computer does not start correctly or if it does not start at all, you can use the Windows Recovery Console to help you recover your system software. "

http://support.microsoft.com/default.aspx?...kb;EN-US;314058

Edited by windowsxp550, 20 November 2005 - 12:01 PM.

Free PC Help: At FixMyXP.com, our Speciality is Windows XP.
Got An XP Problem or Question? Get expert help, all free Check it out!
Click Here to go to FixMyXP's Windows XP Help Forum

#8 windowsxp550

windowsxp550

  • Members
  • 133 posts
  • OFFLINE
  •  
  • Location:Maplewood, Minnesota
  • Local time:01:26 AM

Posted 20 November 2005 - 12:04 PM

paco,

I would suggest running the spyware checker/virus scan. I have seen this same thing that was caused by a malware infestation grover121.

If the scans turn up nothing, then Run HiJackThis.

I did a Google search and found someone with almost the same problem, see this:
http://www.experts-exchange.com/Operating_...Q_21257068.html

So I really think this is Spyware/Maleware that is causing this...

Edited by windowsxp550, 20 November 2005 - 12:06 PM.

Free PC Help: At FixMyXP.com, our Speciality is Windows XP.
Got An XP Problem or Question? Get expert help, all free Check it out!
Click Here to go to FixMyXP's Windows XP Help Forum

#9 paco84

paco84
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:01:26 AM

Posted 20 November 2005 - 12:25 PM

paco,

I would suggest running the spyware checker/virus scan. I have seen this same thing that was caused by a malware infestation grover121.

If the scans turn up nothing, then Run HiJackThis.

I did a Google search and found someone with almost the same problem, see this:
http://www.experts-exchange.com/Operating_...Q_21257068.html

So I really think this is Spyware/Maleware that is causing this...


Well i ran HIJACK program and notice that my little brother friend somehow installed the google toolbar yesterday .......so far i took it fixed it from the HIJACK program....and ran the program just to show u. Maybe it may help. Also note that i have ran adware, and spybot, and Microsoft Antispyware, program. And nothing new has poped up. The thing i know i do have and had for a while is the WINFIXER POP AD.....but i was going to take it to a shop to fix it cause i've already tried to fix and had no luck buy besides that this i believe is a different issue due to my brother friend. HERE's my HIJACK log i just did...thanks in ADVANCE>>;)



Logfile of HijackThis v1.99.1
Scan saved at 12:17:41 PM, on 11/20/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Documents and Settings\Pacoloco\Desktop\Paco\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/mywaybiz
O1 - Hosts: 216.19.0.250 idenupdate.motorola.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: MSEvents Object - {52B1DFC7-AAFC-4362-B103-868B0683C697} - C:\WINDOWS\system32\vturs.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/viewers/ipixx.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab
O16 - DPF: {3C648A72-C49A-48EF-9F90-68EF13293F97} (Cacher Class) - http://midhudsonmls.com/XMLSearch/XMLCache.CAB
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by3fd.bay3.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1120684333601
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1124552761265
O16 - DPF: {94B82441-A413-4E43-8422-D49930E69764} (TLIEFlashObj Class) - https://echat.us.dell.com/Media/VisitorChatENU/TLIEFlash.CAB
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab
O16 - DPF: {D06A22B4-6087-4D3D-B7AF-82B113E9ABD4} (CPostLaunch Object) - http://www2.verizon.net/update/msnwebinsta...es/vzWebIns.CAB
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: vturs - C:\WINDOWS\system32\vturs.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

#10 windowsxp550

windowsxp550

  • Members
  • 133 posts
  • OFFLINE
  •  
  • Location:Maplewood, Minnesota
  • Local time:01:26 AM

Posted 20 November 2005 - 02:34 PM

O1 (Hostsfile redirection) - Hosts: 216.19.0.250 idenupdate.motorola.com

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
O1 - What to do:
This hijack will redirect the address to the right to the IP address to the left. If the IP does not belong to the address, you will be redirected to a wrong site everytime you enter the address. You can always have HijackThis fix these, unless you knowingly put those lines in your Hosts file. The last item sometimes occurs on Windows 2000/XP with a Coolwebsearch infection. Always fix this item, or have CWShredder repair it automatically.

The location of the Hosts file can be changed by modifying the Registry key below for Windows NT/2000/XP.

Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\: DatabasePath

If you see entries like the above example, and they are not their for a specific reason that you know about, you can safely remove them.

If you see an entry Hosts file is located at C:\Windows\Help\hosts that means you are infected with the CoolWebSearch. If the Hosts file is located in a location that is not the default for your operating system, then you should have HijackThis fix this as it is most likely caused by an infection.

You can also download the program Hoster which gives you the ability to restore the default host file back onto your machine. To do so, download the Hoster program and run it. When it opens, click on the Restore Original Hosts button and then exit Hoster.

Hoster download URL: http://members.aol.com/toadbee/hoster.zip

What happens:
Nothing bad will really happen if you remove these entries. If there is a site that you put in there yourself, you may have to type it back in again. Nothing major.

___________________________________________________


As far as the Winfixer Pop Up Problem, Follow these directions:

http://www.techsupportforum.com/computer/topic/73759-1.html

Edited by windowsxp550, 20 November 2005 - 02:37 PM.

Free PC Help: At FixMyXP.com, our Speciality is Windows XP.
Got An XP Problem or Question? Get expert help, all free Check it out!
Click Here to go to FixMyXP's Windows XP Help Forum

#11 Papakid

Papakid

    Guru at being a Newbie


  • Malware Response Team
  • 6,618 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:26 AM

Posted 21 November 2005 - 11:30 AM

Hi paco84,

You've gotten some good advice and some that's not so good. Your main problem seems to be a vundo infection--it's a complex infection and WinFixer is just one part of it. Since you have been running your system for quite some time without an antivirus software installed, you most likely have a rootkit as well that is hiding other malicious files.

The VundoFix tool that is mentioned in the thread you were linked to usually works to fix Vundo. But it is not advisable to fix your system by looking at what is happening on someone else's system.

I've looked at your other threads and know you've been suffering from booting problems and WinFixer for quite some time. If you really want to get this resolved, post your HijackThis log in the HijackThis Logs and Analysis forum. There you will be guided thru getting your sytem back to normal, if possible, by specialists who are trained to know what malware does, how to fix as much as possible, and repair any damage caused by it. And it will be for your unique system in a one on one sesssion to avoid confusion and conflicting advice.

And yes, the malware is most likely causing your boot and other problems. The first step in troubleshooting is to eliminate any malware and then repair the damage, rather than trying first to repair the damage that the malware will redamage. That's why you should have taken acklan's advice in a previous thread and install an antivirus. It isn't a magic bullet, but it will eliminate some malware, but most importantly, will help to prevent some malware from getting on your system in the first place.

I recommend that you download one of these free AV's, then immediately boot into safe mode and run a full system scan to clean up as much as you can:

Antivir
Avast Free
AVG Free
Bitdefender Free

Then follow the instructions here and then post your HijackThis log in the appropriate forum and link to this thread.

The other folks who have posted advice in this thread are trying to help and I know you appreciate that. I do too. But we normally move HijackThis logs to its own forum to prevent those who aren't qualified from giving incomplete and sometimes erroneous advice. The result of which can sometimes make the problem worse or make your system completely unbootable. Because HijackThis deals with fixing registry entries and you should only take advice from someone who really knows what they are doing--not only in dealing with the registry, but the pitfalls of dealing with the complex malware that is out there now.

If you go thru this process (it may take several steps to resolve) I think you'll be pleased and we may be able to help you without you having to go to a shop that will probably just reformat your PC. But let me know what you have done since you last posted. I.E., if you have run the VundoFix tool or whatever. Then I will close this thread so you don't get any more potentially hazardous advice.

The thing about people

is they change

when they walk away.--Mipso





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users