Computer Hope
Software => Computer viruses and spyware => Topic started by: C-Good on September 08, 2009, 06:45:53 PM
-
Running through windows XP and i downloaded an update that contained a virus...not sure what the virus is but it completely wiped out my desktop. I can reach everything through Windows Task Manager or using Ctrl+Alt+Delete and bringing up programs through there, but my desktop shows nothing but my background the mouse works but when left or right clicked nothing happens. I have read a few thread about similar problems and most say you have to do something with the registry and log file but i need someone to explain this more in detail on what to do.
Also ive tried system restore and booting in safe mode neither works
Please Help!!!!! >:( >:(
-
Try running EXPLORER.EXE from the task manager. It is a symptom fix, but it doesn't fix the source. Go to the READ THIS FIRST thread and post the required logs.
-
I've tried that explorer will not run not run i get windows cannot access that specified device, path, or file. You may not have the appropriate permissions to access the item
-
Ok...I'm afraid I really can't help you any more. This isn't really in my field of knowledge, Evilfantasy, our resident expert should be around shortly though. Sorry!
-
Thanks for the taking the time though
-
Wait, are you accessing this site via the infected computer? (by running iexplore.exe or whatever browser you have). If so, I can still tell you what to do next.
-
yes i had to open it through windows task bar but i have firefox im on it now
-
Ok, go to the READ THIS BEFORE REQUESTING MALWARE REMOVAL thread and try and run as many of the scans as possible and post the logs here.
-
ok will do and post asap
-
ran the ccleaner nothin happened how do i get the logs so i can post them as i go?
-
Try getting the logs from the other programs. If none of them cab retrieve the logs we'll need an expert big time.
-
i dont know how to get the logs thats what im asking
-
The instructions to obtain the logs is explained clearly here...
http://www.computerhope.com/forum/index.php/topic,46313.msg290095.html#msg290095
Steps 3, 4, and 6.....Follow the instructions.
-
ok im running superantispyware right now ill post the log when its completed the scan
-
next run hijackthis and post the log
do not let hjt fix anything till you post the log
-
HijackThis will be the last scan you do.
-
im following directions ill will paste the log from the superantispyware scan then i will run the malwarebytes anti-malware please stay with me Karnac and Helpmeh as you know the scans take time but i am staying right by the computer and will post logs as soon as completed
-
we all have this topic monitered
dont worry
-
30 mins into the complete scan from the superantispyware program an error notification popped up any clue what might of happened?
-
I assume the scan has stopped....if so proceed to the next step....you may have to run these in safe mode and/or change their names when you save them in order to get them to run....
-
yeah the scan just stopped after the error popped up ill procede to the malware program and update again soon
-
rebooted in safe mode switched the names of both the malware and superantispyware the malware opens up but as soon as i click scan its scans for 2-3 seconds then closes the superantispyware wont open anymore
-
See if you can run the HJT scan, the process tool may be able to clean enough to get the other programs running.
-
Same thing as the malware program got all the way to where i clicked scan started up then closed
-
ok i just tried to uninstall and redownload and run the programs and now its saying the system administrator has set policies to prevent this installation geeze this thing is taking over
-
create a new user account on your computer
and then run as soon as pos before the virus takes over that account
-
how can i create the accont through the windows task bar???
-
start->run type "control" and press ok
or in task manager
file->new task type "control" and press ok
-
tried that and i get a message that says windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the file
-
CRAP!
try it from safe mode
-
i am in safe mode now
-
if you are using vista this wont work:
try running
RUNDLL32.EXE SHELL32.DLL,Control_RunDLL nusrmgr.cpl,,0
it might work on vista if you use:
RUNDLL32.EXE SHELL32.DLL,Control_RunDLL C:\i386\nusrmgr.cpl,,0
-
i was able to do that and create a new user logged on and hijackthis opened started and quit just like on the other accounts
-
Ran a program called Dr. Web Cureit this morning it actually went all the way through with the scan only detected one bad file tho?? anyways after the scan tried to go back and run some of the other programs but still same result as before
-
Evilfantasy will have to assist you, it's pretty obvious that something has a hold of your pc that the regular tools can't fix.
-
Evilfantasy can you help me???
-
forum member
-
do what?
-
C-Good , give this a try...
http://evilfantasy.wordpress.com/2009/05/06/rescue-cds/
-
the same thing is happening to me i havnt tryed to run those scans but i just reformatted computer and downlaoded 1 thing from Microsoft and then i restarted and when i restarted this problem occured. Should i try to run those scans?