Computer Support Forum

Desktop Virus

Question: Desktop Virus

Hi...I have a problem...i think a desktop virus/hijacker has hit my network. Basically the infected workstation's wallpaper is reduced to the left of the screen and the remainder of the screen is white. The icons are also placed on the left of the screen. Did a system scan with Norton but nothing came up. Any ideas??

Thanks
MSN14

Relevance 100%
Preferred Solution: Desktop Virus

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: Desktop Virus

Hello msn14. follow this link to check for virus's.
http://www.pandasoftware.co.uk/2007/newindex2.htm
then check this site out which may help you.
http://www.kellys-korner-xp.com/xp_tweaks.htm

1 more replies
Relevance 45.92%

So far I've managed to contract a couple different types of viruses (half of them from antivirus programs or cleaners), failed miserably at a system restore (Backup just threw everything in with no rhyme or reason-unrelated files together in same folder and some even in a folder, files and folders put in places they don't belong, duplicates, etc. The COMPUTER doesn't even know where it put them), deleted vital files and folders, restored the registry to the last good, which happened to be a day when I had the Avira desktop virus AND my keyboard didn't work due to IDVault, and restored the registry to around the time dinosaurs roamed the earth.Last night, after a failed installation of installer files, most of my drivers stopped working. I'm getting Errors 3, 31,0x80004005 and some I can't remember and when I go into Microsoft Defrag, the bar is almost completely red. My CPU's are at 100%. . I tried lowering priority of winlogon and csrss, but it says "access denied." It also says that when I try to do anything with Avira in Services. I can't find any form of the word "Avira" when I search, but you see on the log that it's there's a file called "avgio" and a couple others. I tried to run system restore again this morning, but it kept saying nothing was changed when I logged back on. My computer has been very slow, files are missing, in the wrong place or corrupt, several drives and msiexec won't work, ... Read more

Answer:Google Redirect, Antivir Desktop Virus, Windows Update Virus, Lost Desktop, Failed System Restore (twice), Drivers/ Installer N...

Someone is helping me go through all the neccessary steps to remove whatever is infecting my IS. I will update when the issue has been resolved. Thank you

3 more replies
Relevance 45.92%

 Attach.txt   11.47KB
  0 downloads
 ark.txt   3.01KB
  0 downloadsSo far I've managed to contract a couple different types of viruses (half of them from antivirus programs or cleaners), failed miserably at a system restore (Backup just threw everything in with no rhyme or reason-unrelated files together in same folder and some even in a folder, files and folders put in places they don't belong, duplicates, etc. The COMPUTER doesn't even know where it put them), deleted vital files and folders, restored the registry to the last good, which happened to be a day when I had the Avira desktop virus AND my keyboard didn't work due to IDVault, and restored the registry to around the time dinosaurs roamed the earth.Last night, after a failed installation of installer files, most of my drivers stopped working. I'm getting Errors 3, 31,0x80004005 and some I can't remember and when I go into Microsoft Defrag, the bar is almost completely red. My CPU's are at 100%. . I tried lowering priority of winlogon and csrss, but it says "access denied." It also says that when I try to do anything with Avira in Services. I can't find any form of the word "Avira" when I search, but you see on the log that it's there's a file called "avgio" and a couple others. I tried to run system restore again this morning, but it kept saying nothing was changed when I logged back on. My compu... Read more

Answer:Google Redirect, Antivir Desktop Virus, Windows Update Virus, Lost Desktop, Failed System Restore (twice), Drivers/ Installer N...

There was a glitch when I was posting this so it doubled. How do I delete a post?

2 more replies
Relevance 39.77%

Hello friends, just to confirm: Do desktop.ini files in the desktop folder and perhaps elsewhere on the hard drive signify a virus infection? If so how do I get rid of the infection? My MS Vista Basic laptop runs AVAST Free antivirus and is on internet and hence receives constant virus definition updates. There is a blurred desktop.ini file on the desktop which is like a shadow of the real desktop.ini file also on the desktop. What action to take friends? thanks.

Answer:Does a desktop.ini file in the desktop folder signify virus infection?

"Does a desktop.ini file in the desktop folder signify virus infection?"
No, it's completely normal.
"What action to take friends? "
Go to Control Panel -> Folder Options -> "View" tab and tick the Hide protected operating system files (recommended) option. Those icons will then vanish from view.

4 more replies
Relevance 38.54%

Hello. Here's the problem:

When I log on, I have no desktop or start menu. All I have is a black blank screen. I can only access programs through the task menu by pressing Ctrl, Alt, Delete.
I know there something lurking in my computer, does anyone have any suggestions. I need help pinpointing the exact problem. Any help would be great.
Oh I have arealy tried: sfc /scannow; restore; and windows repair.
I will post my hijack log underneath.
Thanks for any help!
 

Answer:Desktop Virus, No Desktop or Start Menu

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 07:40, on 2008-02-23
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\netdde.exe
C:\WINDOWS\system32\msdtc.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\HPQ\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Trend Micro\Antivirus\pccguide.exe
C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
C:\Program Files\Trend Micro\Antivirus\PCClient.exe
C:\Program Files\Trend Micro\Antivirus\TMOAgent.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\BearShare\BearShare.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\Program Files\Lexmark 4... Read more

2 more replies
Relevance 38.13%

Accidental double post.  Here is the link to my real thread: http://www.bleepingcomputer.com/forums/t/524143/virus-possibly-paladin-virus-avoids-all-scanners-and-crashes-desktop-on-start/Edit: Merged two topics for continuity of context and MR Team topic management.~ Animal

Answer:Virus (possibly Paladin virus) avoids all scanners and crashes desktop on start

Computer: Windows Vista 64 bit / / Dell XPS 420
 
Problems started occurring out of the blue when I tried to resume my computer from sleep mode and it froze. I had not downloaded anything recently, not anything I was aware of anyway. My computer has had several corrupted files that contained error messages on start up. I have been able to fix these but my computer freezes soon after I start up. I am only able to access safe mode. 
 
I have been able to remove 42 entries of malware via Spybot. And 1 virus via Avast. The virus was called Paladin. However, in my virus chest there are multiple entries each named unknown, all with the same date of quarantine. Despite my quarantining of this virus, a [Paladin] program still pops up very briefly in normal mode in my start-up tray. 
 
I have been able to install and update a number of anti-virus and malware removal programs despite being infected. Although initially, the virus had somehow removed Adwcleaner, I was able to reinstall it and scan my registry. The problem, however, was not fixed. For some reason, despite downloading them, I have been unable to fully install Avira Anti-virus and am unable to get AVG to run.
 
Everything else comes up with zero results despite continuing problems. MRT says I have 1 infected file on a Full Scan, however, it always locks up when attempting to scan: D:\dell\Image\Factory.wim\Windows\Help\Windows\en-US\mail.wmv
Custom and quick scans yield no results.
 
... Read more

41 more replies
Relevance 38.13%

i have xp sp2 installed on the machine...
the problem started since 10 days back..
copy paste is also disabled in the applications...

i managed to solve the task manager and regedit error..
help me out with it..
i m hunting for sp3 if i get i'll install this also....
=================================

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:42:58 PM, on 09/03/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\McAfee\VirusScan Enterprise\engineserver.exe
C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe
C:\Program Files\Microsoft SQL Server\MSSQL10.MSSQLSERVER2008\MSSQL\Binn\sqlservr.exe
c:\oraclexe\app\oracle\product\10.2.0\server\bin\ORACLE.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\System32\ICO.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\McAfee\Common Framework\McTray.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\System32\WgaTray.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HK... Read more

More replies
Relevance 38.13%

I recently was browsing yahoo, when my computer screen went blank and shut off. When I restarted it, I kept getting a virus alert from an antivirus program I did not have loaded on my computer. This was anti-virus pro, or anti-virus 2010, something to that effect. I ran AVG and it found sheur trojan and other viruses. AVG could not remove all the infections. I tried other virus removers, and they could not even finish a scan. I tried numerous ways to remove the virus, and now I have a screen saver and nothing else-no desktop icons or start menu. I was initially not able to even get the task manager to run, but now can at least use that. I tried to run the dds, and got to the black screen, but then it disappears with no report. The rootrepeal does the same, but I do have the following report that was saved.

ROOTREPEAL CRASH REPORT
-------------------------
Windows Version: Windows XP SP3
Exception Code: 0xc0000005
Exception Address: 0x00422bf2
Attempt to read from address: 0x00000004

Any help would be greatly appreciated at this point. Also, I tried to boot in safe mode, but no luck there either, as it stayed on a black screen. Thanks in advance.

Jason

Answer:anti virus pro virus, no desktop icons or startup menu

Welcome to BCLet's see if we can get a log to postTry this one firstPlease download Win32kDiag.exe by AD and save it to your desktop.alternate download 1alternate download 2This tool will create a diagnostic report for me to review.Double-click on Win32kDiag.exe to run and let it finish. When it states Finished! Press any key to exit..., press any key on your keyboard to close the program. A file called Win32kDiag.txt should be created on your Desktop.Open that file in Notepad and copy/paste the entire contents (from Starting up... to Finished! Press any key to exit...) in your next reply.

--------------------------------------Go to > Run..., then copy and paste this command into the open box: cmdClick OK.At the command prompt C:\>, copy and paste the following command and press Enter:DIR /a/s %windir%\scecli.dll %windir%\netlogon.dll %windir%\eventlog.dll >Log.txt & START notepad Log.txtA file called log.txt should be created on your Desktop.Open that file and copy/paste the contents in your next reply.

3 more replies
Relevance 36.9%

I have one Windows 7 machine where the process UI0Detect.exe pops up with the following suspicious message:
 

A program running on this computer is trying to display a message.

Show program details, gives the following (translated from Norwegian):
 

Message tittle: Java Setup - Welcome
Program path: C:iWindows\TEMP\jdsXXXXX.tmp\jre-8u101-windows-i586.exe

XXXX = numbers, varies after removal and when showing up again after restart.
When installing the latest Java, and restarting the machine, Java is gone in the Control Panel list of installations.
There is also a desktop background picture, which I cannot completely remove. Downloaded by the user from somewhere he cannot remember.
Both the folder and this picture reappears after permanently deleting them (SHIFT + DELETE) when running computer in Safe Mode.
The same picture reappears after removal, but located in different folders and with different names:
 

C:\Users\USER NAME\AppData\Roaming\Microsoft\Windows Photo Viewer\Bakgrunn for Windows Fotovisning.jpg

 

C:\Users\ USER NAME\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

I have scanned with Microsoft Removal Tool (MRT), Windows Defender (only scanned the Windows folder) and the Anti Virus software, but there is nothing there.

More replies
Relevance 33.62%

How this virus came to my computer i do not know i let a friend use my computer and shortly after my desktop changed to a message: "Warning! Spyware detected on your computer! Install anti virus or spy ware remover to clean your computer" along with pop upsI cleared my cookiesI tried several removal softwaresPC tools registry mechanicPC tools anti virusMalwarebytes' Anti-MalwareMalwarebytes' Anti-Malware removed the "virus" from my desktop and none of the above listed programs pick up any errors At this time, But i am left with the same pop up problems i had before i got the desktop to return to normal. The pop ups are coming through internet explorer although i us firefox as my primary browser. Any and all help would be great i was pointed towards these forums from a fellow gamers who said you guys are the best.Edit: Moved topic from XP to the more appropriate forum. ~ Animal

Answer:Desktop Virus And Pop Ups

I think i may have fixed it
I'll know in a few hours if i don't get anymore pop ups they weren't fast they were very slow

6 more replies
Relevance 33.62%
Question: DESKTOP VIRUS?

Help! When I turned on my computer today, a new icon (a red circle with a white X ) appeared on my lower right task bar and it continously pops out a bubble saying: Warning! Security report Your computer is infected! It is recommended to start spyware cleaner tool.At first I didn't mind it and right clicked it closed, but it kept on popping up every 10 seconds!Then my desktop turned black and in the middle was a flashing WARNING and saying how I have a virus,, blahblabhlabhI can't change my wallpaper anymore. When I right click my desktop to go to my disply properties, under 'Desktop', the 'Browse', 'Position' and the background list is grayed out so I can't click on anything. Just now, my wallpaper changed again and this time it said: Active Desktop Recovery and a 'Restore my Active Desktop' button but nothing happens when i click on it...Anyone who can help please??

Answer:DESKTOP VIRUS?

Hello lets try some things..This may not work until after the second item to do but you can try it first.Desktop:Go to Start > Control Panel > Display. Click on the "Desktop" tab, then the "Customize Desktop..." button. Click on the "Web" tab, then under Web Pages, uncheck and delete everything you find (except "My Current Home page").These are some common malware related entries you may see:Security InfoWarning MessageSecurity DesktopWarning HomepagePrivacy ProtectionDesktop UninstallIf present, select each entry and click the Delete button. Also, make sure the Lock desktop items box is unchecked. Click "Ok", then "Apply" and "Ok".When done, go back into your Desktop Settings and you should be able to change the color/theme to whatever you want.NEXT:run an MBAm scan...Please download Malwarebytes Anti-Malware (v1.32) and save it to your desktop.alternate download link 1alternate download link 2If you have a previous version of MBAM, remove it via Add/Remove Programs and download a fresh copy.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program ... Read more

7 more replies
Relevance 33.62%
Question: Desktop virus

Hi folks.My desktop changed to a black screen and an ad that say's something about everthing on my hard drive can be seen and to remove to click on the ad.I cant seem to get rid of it!.Please help!J.R.

Answer:Desktop virus

Try Alt-F4 to close the screen.

2 more replies
Relevance 33.62%
Question: desktop.exe virus

I am having trouble with the desktop.exe and it's associated viruses, ie ffiserch.exe. I've used ad-aware and hijack this to try and delete these viruses however I have had no luck. I've posted the hijack this file log below. Any help will be appreciated. Thanks. CjastrzebskiLogfile of HijackThis v1.99.1Scan saved at 3:46:25 PM, on 6/2/2005Platform: Windows XP (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 (6.00.2600.0000)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exec:\PROGRA~1\mcafee.com\vso\mcvsrte.exec:\PROGRA~1\mcafee.com\vso\mcshield.exeC:\Program Files\DIGStream\digstream.exeC:\Program Files\ESPNRunTime\DIGServices.exeC:\PROGRA~1\mcafee.com\vso\mcvsshld.exeC:\PROGRA~1\mcafee.com\agent\mcagent.exec:\progra~1\mcafee.com\vso\mcvsescn.exeC:\spywarevanisher-free\FreeScanner.exeC:\WINDOWS\System32\devldr32.exeC:\WINDOWS\explorer.exeC:\Program Files\Internet Explorer\iexplor... Read more

Answer:desktop.exe virus

Hi cjastrzebski and welcome to the BC forums. It appears that we have a couple of different infections to deal with here. Let's start with the worst one and then we can see what is left in the next log.Please perform the following steps:Download Cwshredder.exe and save it to a folder of its own. Start the program and click on the Check for Update button. If an update is available then download and install it. Close the program (do not run it yet).Download SpSeHjfix.zip and unzip it to it's own folder. Do not run it yet.Download CleanUp! and install it. Start CleanUp! and click on the CleanUp! button. Let it run to completion. It may take a few minutes depending on the size of your hard drive so be patient.Start in Safe Mode Using the F8 method:Restart the computer.As soon as the BIOS is loaded begin tapping the F8 key until the boot menu appears.Use the arrow keys to select the Safe Mode menu item.Press the Enter key.Disconnect from the net and Close ALL OPEN PROGRAMS.Run SpSeHjfix and click on Start Disinfection.
When it's finished it will reboot your machine to finish the cleaning process.
The tool creates a log of the fix which will appear in the folder that SpSeHjfix is located in.Now run CWShredder and click on the Fix -> button.Reboot and repeat the above process.Reboot and post a fresh HijackThis log and the log that was created by SpSeHjfix.Cheers.OT

5 more replies
Relevance 33.62%

I Turned On My Computer Yesterday To Find A Black Background With Writing Concerning Possible Threats And Danger To My Computer!
Down The Bottom Of This Message Is A A Tab Labeled "removal Instruction"....i Click On The Link And It Takes Me To Some Virus Removal Program Site Where You Have To Purchase This.
Its Obviously Adware Or Spyware But I Have Taken Every Avenue To Getting Rid Of It...
The Program Is Called Eraser If This Helps Anyone!
Nothing Is Working!!!! Please Help Me!!!!!
 

Answer:I Need Help! Seems To Be Desktop Virus!

SpywareBlaster http://www.javacoolsoftware.com/spywareblaster.html
AdAware SE http://www.majorgeeks.com/download506.html
SpyBot S&D http://www.safer-networking.org/en/download/

DL them (they are free), install them, check each for their definition updates and then run AdAware and Spybot, fixing anything they say.

If no help..........

Then get HiJack This http://www.majorgeeks.com/download3155.html, put it in a permanent folder, run it , DO NOT fix anything, post the log here.
 

1 more replies
Relevance 33.62%
Question: Desktop has virus

I need help with my Dell Precision running on windows XP Pro. I brought this computer from home and put it on my home network (cable modem and wired router). I removed some unused programs with the add/remove program. Started getting BSOD. I repaired using the XP installation disk. Started getting redirects on IE (google searching). The computer freezes at times when I try to open task manger. Sometimes IE shuts down when in use and not getting redirects. Computer will also freeze randomly. When not using task manager or IE.

Have completed all actions for non-malware issues (chksdk, defrag, scannow, etc.)

Have only made one change to registry. CD Rom stopped working due to bad driver. I deleted upper and lower filters, as recommended by Microsoft and cd rom driver reinstalled on next boot and appears to be working correctly.
I did a Kapersky security scan online and it founds issues. Could not print out the report. I have run dds, posted below and the attach file. Any help would be appreciated.
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 8.0.6001.18702
Run by Administrator at 9:46:46 on 2013-01-09
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.403 [GMT -6:00]
.
.
============== Running Processes ================
.
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\basfipm.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Intel\Intel Application Accelerator\iaa... Read more

Answer:Desktop has virus

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your malware problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the top o... Read more

31 more replies
Relevance 33.62%
Question: desktop tmp virus

I have a nasty virus which i think is attached to my desktop. The desktop image has been changed to a bright geometric pattern which is an explorer file called ~tmp. I am unable to delete it or change the desktop to anything else. I have tried running AVG, Superantispyware etc but it has not been fixed. I have also tried starting my pc in safemode to run my antivirus programmes but it just hangs and will not start. The virus seems to open unwanted web pages at random intervals.
Help please!
an HJT log is attached

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:32:09, on 16/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTSvcCDA.EXE
C:\WINDOWS\system32\MsPMSPSv.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\odb.exe
C:\WINDOWS\vlc.exe
C:\WINDOWS\svx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDO... Read more

Answer:desktop tmp virus

14 more replies
Relevance 33.62%

Was having problems with a virus about a couple weeks ago that put up a warning on my desktop that said my computer was infected. It kept coming back even after deleting the virus on my computer with avast. After getting multiple anti virus programs (don't remember all but main one was spyware doctor) the amount of viruses found each day went down. Most viruses that kept coming back came back in my temp folder so i tried deleting the folder altogether. This actually seemed to work but after rebooting the desktop would load, restarted again and it loaded fine. But a few times after that the same thing happened.I'm pretty worried the infection might still be there and i found this site so thought maybe someone could help. The only viruses Spyware doctor finds now are Adware.Advertising, and Application.TrackingCookies, but wanted to make sure.Thank you much!Here is my hijackthis log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 6:19:04 PM, on 10/4/2008Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16705)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeC:\Program Files\Alwil Software\Avast... Read more

Answer:Virus Took Over Desktop, Think It's Gone...

to BleepingComputer.comI want to apologise that it has taken so long to get back to you. We on the HJT Team are working as fast as possible to get your log answered.If you do not still need help, please let me know, so that I can move on to other users who still need help.Please take note of the following:While a HJT Team member is working with you, please refrain from making any changes to your computer.Also, even if things appear to be running better, there is no guarantee that everything is finished. Please continue to check this forum post in order to ensure we get your system completely clean. We do not want to clean you part-way up, only to have the system re-infect itself. If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.Please reply using the button in the lower left hand corner of your screen.Old topics are closed after 3 days with no reply, and working topics are closed after 5 days. If for any reason you cannot complete instructions within that time, that's fine, just put a post here so that I know you're still here. We get a lot of people who simply leave, and if there is no contact for that amount of time I will have to assume you have "vanished" .If you would still like help, please follow the instructions below:We need to create an OTViewIt ReportPlease download OTViewIt by OldTimer.Save it to your d... Read more

16 more replies
Relevance 33.62%

I was removing a virus from a friend's computer which was a pain since almost no tools I have run in a 64 bit environment. But anyway, I got it completely disinfected but there must still be a bad registry entry somewhere or something because every time I log in, the desktop icons are all hidden. The virus was apparently that one that hides them on purpose. If I right click on the desktop and do view or whatever then uncheck "show desktop icons" then right click again and re-check it, they all show back up but every time I restart the computer, they're gone again. It's really annoying! So does anyone know where to reset that? I've heard making a new user account will handle it but I don't really want to do that. This is Vista Premium 64 bit Sp2 btw.

More replies
Relevance 33.62%
Question: Desktop ~tmp virus

I have a nasty virus which i think is attached to my desktop. The desktop image has been changed to a bright geometric pattern which is an explorer file called ~tmp. I am unable to delete it or change the desktop to anything else. I have tried running AVG, Superantispyware etc but it has not been fixed. I have also tried starting my pc in safemode to run my antivirus programmes but it just hangs and will not start. The virus seems to open unwanted web pages at random intervals.Help please!an HJT log is attachedLogfile of Trend Micro HijackThis v2.0.2Scan saved at 09:32:09, on 16/12/2008Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16762)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\Ati2evxx.exeC:\PROGRA~1\AVG\AVG8\avgwdsvc.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\WINDOWS\system32\CTSvcCDA.EXEC:\WINDOWS\system32\MsPMSPSv.exeC:\PROGRA~1\AVG\AVG8\avgrsx.exeC:\Program Files\Java\jre1.6.0_07�... Read more

Answer:Desktop ~tmp virus

Hello ming-1Welcome to BleepingComputer ========================Download random's system information tool (RSIT) by random/random from here and save it to your desktop.Double click on RSIT.exe to run RSIT.Click Continue at the disclaimer screen.Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)

3 more replies
Relevance 33.62%
Question: Virus on desktop

I have a virus on my desktop. Iv run scans with superantispyware and avast and both have removed everything they found. Hijackthis log:Logfile of Trend Micro HijackThis v2.0.4Scan saved at 1:55:51 PM, on 1/8/2011Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Alwil Software\Avast5\AvastSvc.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Intel\Modem Event Monitor\IntelMEM.exeC:\WINDOWS\system32\hkcmd.exeC:\PROGRA~1\ALWILS~1\Avast5\avastUI.exeC:\Program Files\Common Files\Real\Update_OB\realsched.exeC:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exeC:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exeC:\Program Files\LimeWire\LimeWire.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEC:\Program Files\Common Files\AOL\ACS\AOLAcsd.exeC:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exeC:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeC:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exeC:\Program Files\Common Files\LogiShrd\LVMVFM\... Read more

Answer:Virus on desktop

Please follow the instructions in the following link and post your logs: http://www.computerhope.com/forum/index.php/topic,46313.0.html

5 more replies
Relevance 33.62%
Question: Red desktop virus

im not good in computers

i got a red colour desktop saying that my com is infected and that i must install softwares and that my com had being hacked and it will retrieving information.
i ran antispyware and found some virus - trojan ace-x if im not wrong.
( was in a hurry to work).i told my wife to delete it and to switch off the com.
im oversea right now will be back on the 20th (GMT +8) 1PM. I do not know what to do
n where to post this or even how to post (sorry to be such a computer idiot).pls tell n direct me what to do .


thanks a million

chris

Answer:Red desktop virus

Hello and Welcome. Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. Ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

---------------------------------------------------------------------------------------------


Download Deckard's System Scanner (DSS) to your Desktop. Note: You must be logged onto an account with administrator privileges.

Note:

DSS automatically runs HijackThis for you, but it will also install and place a shortcut to HijackThis on your desktop if you do not already have HijackThis installed.

Close all applications and windows.
Double-click on dss.exe to run it, and follow the prompts


If the following message from DSS appears, please click on "Yes" to allow it to download HijackThis, if you don't already have it.



Allow DSS through your firewall to download HijackThis by clicking ... Read more

19 more replies
Relevance 33.62%

I posted this in the XP forum first, then I read elsewhere that this some sort of virus. First I had Thumbs.dl files somehow show up in some of my picture folders. I deleted those. I also had Desktop.ini show up in some of my picture folders. So I did a file search and found 191 Desktop.ini files. What are they and how did they get here, and is it o.k to delete them? .........Thanks.
 

Answer:Is desktop.ini a virus?

7 more replies
Relevance 33.62%

I had some problems w/ viruses and ran some cleanup programs and rebooted--now i can't see my desktop at all and have to alt-ctrl-del just to connect to here?

Help??
 

Answer:Can't see desktop after trying to fix virus!!

16 more replies
Relevance 33.62%
Question: Virus on Desktop

Hey
About 2 weeks ago when i booted up my PC my desktop was disabled no background i couldnt right click and no icons it was blank. Also me system tray icons are disabled and no longer showing up. In control panel clicking many options does nothing it dosen't load. I didn't really mind until my internet explorer started to be really slow and sometimes cause my PC to freeze. Im not sure if its a virus, I have ran AVG and Avast virus scanner and neither of them have detected anything. I could use some help on this one! :D

Thanks

Answer:Virus on Desktop

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

1 more replies
Relevance 33.62%
Question: Virus on Desktop

I have a virus on my desktop that won't let me access any files. When I power up the windows xp operating system shuts down. Please help! It has disabled AVG and I can not fix it.

Answer:Virus on Desktop

Hello and welcome to TSF.

Open notepad and copy/paste the text in the quotebox below into it:


Code:

@shutdown -a
Save this as fix.bat Choose to "Save type as - All Files"
It should look like this:

Each time your machine threatens to shutdown, double click on fix.bat & it shall abort the shutdown procedure. That should give you some time to run our tools.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

1 more replies
Relevance 33.62%
Question: Desktop.ini virus

hello everyone
 
Today I saw Two destop.ini icons on my desktop...
 
I read on the internet, well in some places, that this is linked to a virus, or is a virus. (I know perfectly well what desktop.ini is, but before you say the obvious, it just doesn't make sense for TWO icons to randomly appear at the same time on my desktop at the same time)
 
I think I have a rootkit infection, but I am not sure...
 

Answer:Desktop.ini virus

Desktop.ini is a text file used by Windows for configuration settings that allows you to specify how folder will be viewed, displayed and handled. This file can be added to any Windows folder to store information about customized folders. Desktop.ini allows programmers and advanced users to customize the properties, attributes and appearance of a folder.
What Are These desktop.ini Files I Keep Seeing
Why Are There Two Desktop.ini Files On My Desktop & What Do They Do?
What is the Windows desktop.ini file and can I delete it?
The most common use of the desktop.ini file is to assign a custom icon to a folder. File system folders are commonly displayed with a standard icon and have a set of properties that describe the folder, such as whether or not the folder is shared. Therefore, if you have customized the display of a folder in any way, such as changing its icon or manner of display, Windows will save those settings in a desktop.ini file. Since Desktop.ini is a system file, it is normally hidden unless Windows is configured to show hidden/protected operating system files in Explorer's Folder Options.
Customizing Folders with Desktop.ini
How to use desktop.ini to customize folder icons
Desktop.ini Documentation
If you searched for information about .ini on the Internet you may have read that it is a virus. The .ini file is not malicious, however there have been some malware which exploit the capabilities of the desktop.ini file. There is a lot of useless and misinformation... Read more

4 more replies
Relevance 33.62%

Hey guise, I've noticed a few posts saying this including myself on my home account post found here -http://www.bleepingcomputer.com/forums/t/510719/weird-greyblack-screen-after-log-on-windows-7/
Is this a new virus varient? seems likely doesn't it?

Answer:Desktop not available. new virus?

If the issue is related to malware, it is not something new. We have seen similar symptoms with blank desktops, black screens, white screns, etc for years but the issue is not always related to an infection. To eliminate malware as a possible cause, you would need to investigate and perform security scans. If you need assistance with doing that, please start a new topic in the Am I infected? What do I do? forum.

1 more replies
Relevance 33.62%
Question: Desktop virus

Hey
About 2 weeks ago when i booted up my PC my desktop was disabled no background i couldnt right click and no icons it was blank. Also me system tray icons are disabled and no longer showing up. In control panel clicking many options does nothing it dosen't load. I didn't really mind until my internet explorer started to be really slow and sometimes cause my PC to freeze. Im not sure if its a virus, I have ran AVG and Avast virus scanner and neither of them have detected anything. I could use some help on this one! :D


DDS.txt Below


DDS (Ver_10-10-10.03) - NTFSx86
Run by Sanney at 17:34:27.78 on Sun 10/10/2010
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.2046.1189 [GMT 10:00]


============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe
C:\Windows\system32\PnkBstr... Read more

Answer:Desktop virus

Bump, please.

1 more replies
Relevance 33.62%
Question: Desktop Virus

Hey
About 2 weeks ago when i booted up my PC my desktop was disabled no background i couldnt right click and no icons it was blank. Also me system tray icons are disabled and no longer showing up. In control panel clicking many options does nothing it dosen't load. Im not sure if this is a virus or something. Logs attached below, the root repeal tool did not work therefore no log.

Thank You.
 

Answer:Desktop Virus

Hi there and welcome. I am currently reviewing your logs and will get back to you with a set of instructions in the next post I make to you.
 

13 more replies
Relevance 33.62%

Thanks to your website, I've rid my computer of about:blank and qoologic. Both my start ups and log ons to internet appear normal. However, there is still an icon for TAG (TagASaurus) on the desktop.

I ran a search for Tagasaurus using your search feature and came up with zero. Any advice?

Thank you!

My computer info:
HP Pavilion
2.60 Intel Pentium 4
Windows XP SvPk 1
Using Internet Explorer
 

Answer:TAG still on desktop but virus seems gone

Please attach a current HJT log along with the logs from the online scans listed in the READ ME so we can confirm your clean. The icon on the desktop you can simply right click and delete it.

READ & RUN ME FIRST Before Asking for Support

 

1 more replies
Relevance 33.62%

i think my desktop has a virus or something.....everytime i go to youtube it has ad's every other video or so and same thing on other sites but ya....i hope i can get rid of all the virus or whatever i got gone

Answer:need help with my desktop it has a virus or something

some stuff i kinda forgot to put in this post was when i click like links and like on this site when i click to read a post it take me to a new diff site and sometimes like a few i seen i been gettin that flashplayer fake install ad whatever u call it

27 more replies
Relevance 33.62%

Hi
I noticed a guy on here had the same problem as me where a huge add took over the desktop so nothing can be done properly. Now my computer has a virus that i cannot shift and probebly trojans. The virus i beleive is called Bloodhound.W32.EP. my computer is just runnign terribly. Heres a hijackThis log as of this morning. Please help if you can itll be much apprieciated.

p.s. I use XP Pro and i have attached a getservice.txt file

Logfile of HijackThis v1.97.7
Scan saved at 11:20:31, on 20/11/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\RUNDLL32.EXE
C:\PROGRA~1\NORTON~1\NORTON~1\navapw32.exe
C:\WINDOWS\System32\RunDll32.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
... Read more

Answer:Virus taken over my desktop

6 more replies
Relevance 33.62%
Question: Desktop virus

Hello everone, this is my first time on any forum. I?ll try to be brief but informational. I have an HP 64bit laptop with windows 7 home premium. I was doing automatic updates and changing to Kaspersky antivirus trial and zonealarm. I always use winpatrol, but heard a lot about zonealarm. Anyway after a little while my computer got real slow and my internet connection kept dieing. Then all of a sudden i couldn?t open,close,right click, nothing. I went to the start menu and it was white. I did a system restore of the day before but didnt seem to help. when I started up my computer ran the windows logo ore of the welcome screen but there are no account icons and some weird characters come up then go away. I have to take the battery out to start my computer up again. I can only do a system restore with F8 but says that the settings or files werent changed. If startup in normal mode it is good for a couple minutes then locks up again and I take the battery out. However each time I do a system restore it deletes the restore point. I did a memory,chkdsk,hard drive,sfc scannow,and startup repair.All say everthing is working good.If I dont do a system restore from the F8 screen it won?t even load to safe mode.just background with no user account icons. Now the system restore doesn?t work in safe mode or normal and the system protection tab is missing so can?t create new restore points.Ran several scans with bunch of programs even Malware Bytes.Why can I do a restore with F8 and it wo... Read more

Answer:Desktop virus

Forgot to put I am using Internet Explorer 8, I believe. Also forgot to put that I found Kaspersky removed the desktoppwz.exe file from my laptop, but I think the damage was already done. Later I found out it is a virus.

3 more replies
Relevance 33.62%

Hello,

I did about two hours of research on this virus and it lend me to this great site. I belive the problem is in the desktop.exe? Was surfing the net two nights ago and a lot happened really fast and before I knew what was going on.. I was hyjacked. Here is my log, can someone please tell me what I need to do to get this thing under control. I will gladly, paypal a donation for this site if someone can help me. Thank you very much.

Logfile of HijackThis v1.99.1
Scan saved at 9:06:00 PM, on 2/18/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\McAfee\McAfee VirusScan\Avsynmgr.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\WINDOWS\System32\RioMSC.exe
C:\WINDOWS\System32\ScsiAccess.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\McAfee\McAfee VirusScan\VsStat.exe
C:\Program Files\McAfee\McAfee VirusScan\Vshwin32.exe
C:\Program Files\McAfee\McAfee VirusScan\Avconsol.exe
C:\Program Files\McAfee\McAfee VirusScan\Webscanx.exe
C:\Program Files\McAfee\McAfee Firewall\CPD.EXE
C:\Program Files\Common Files\Network Associates\McShield\Mcshield.exe
C:\WINDOWS\system32\winlogon.exe
C:\Program Files\McAfee\McAfee VirusScan\VsStat.exe
C:\Program Files\McAfee\McAfee VirusScan\AvConsol.e... Read more

Answer:Help please!! DESKTOP.EXE virus. See log

10 more replies
Relevance 33.62%

Hello,
my wallpaper changed into this red background with a biohazard sign saying: "your privacy is in danger" + i get pop ups saying that my computer is infected and saying people want to hijack my computer.

This is the Hijack log i saved....

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:42: VIRUS ALERT!, on 9/12/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe
C:\Program Files\NETGEAR\WG311v3\WinDomainlogon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\McAfee.com\VSO\mcvsshld.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\PROGRA~1\mcafee.com\vso\mcvsescn.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\mcafee.com\mps\mscifapp.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MSKAgent.exe
C:\WINDOWS\system32\... Read more

Answer:Need Help with desktop virus!!!!

Hi Welcome to TSG!!
Please visit this webpage for instructions for downloading and running ComboFix.

Post the log from ComboFix when you've accomplished that, along with a new HijackThis log.
 

1 more replies
Relevance 33.62%

hi!
my boyfriend got himself a virus JSB. and after he removed it, his destop dosen't show. he has to work everything from taskmanager, and it's really going horribly bad. :cry

He can't access really anything, nor can he start explorer.exe since he don't know where it is. something is really ****ed up with his system, and I have no idea how to help him. he can't access any anti-virus programs, nor anything to check for virus/remove virus with, since more of those programs are on his desktop.. wich is black and dosen't show squat. there is no start menu, nothing.

how can i help him without getting my own computer infected?
is re-installing win XP our only chance at this point? I wish I could transfer hijack-this to him so we could check att his processes. But he don't seem so keen on the idea, for chance if my comp. gets infected..

could someone preatty please with sugar on give us a hand?

best regards
Liz. :heart
 

Answer:JSB virus and now no desktop!?

Welcome to Major Geeks!

Are you sure that you really had the JSB infection?
Are you sure that is the only infection you had? This infection is not known to infect EXE files. Explorer.exe is located in C:\Windows Thus if you run C:\Windows\explorer.exe from Task Manager, the Windows shell should run unless something else is blocking it or the file has been deleted or corrupted.

If you do have a JSB infection, it will spread to your PC if you connect the PCs via a network, or if you use any writeable media in your PC after using it in the infected PC. Using a write once CD ( a CDR ) is the only safe way to copy files from your PC to your boyfriends PC.

HijackThis is not going to help you with an infection like JSB. You need to run an uninfected antivirus program that can specifically scan for and disinfected all .COM files that may have been infected.
 

4 more replies
Relevance 33.62%

HI friends,

I have a windows Xp desktop. My computer started acting funny then my AVG popped up and said there is a virus that hit my computer and where do I want it. I put it in the vault and I am running Malwarebytes.

Can you all HELP ME PLEASE! This has not bee a good day for me.
 

Answer:Help a virus hit my desktop!

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 4:28:22 PM, on 12/13/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\PROGRA~1\AVG\AVG10\avgchsvx.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVG\AVG10\avgtray.exe
C:\Program Files\MSN Toolbar\Platform\5.0.1449.0\mswinext.exe
C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Hisbeauty\Application Data\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\AVG\AVG10\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Logitech\LWS\Webcam Software\CameraHelperShell.exe
C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchos... Read more

2 more replies
Relevance 33.21%

A new virus appeared on my computer and I can not remove. Clicking on any icon on the screen, immediately opens a window asking if I want to actually send alixeira and the virus multiplies automatically, unless it is not possible to cancel the message that appears. The only alternative is to turn off the computer and try to reconnect not click shortcuts screen. Normally you can only work using the start menu.
Please, help!!!!
[e-mail removed to protect from spam bots.]
Jorge [personal information removed for security purposes. ~ OB]

Answer:Virus at desktop scren

Hello,And welcome to BleepingComputer.com, before we can assist you with your question of: Am I infected? You will need to perform the following tasks and post the logs of each if you can.Malwarebytes Anti-Malware Please download Malwarebytes Anti-Malwareand save it to your desktop.Download Link 1Download Link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Full Scan" option is selected.Then click o... Read more

1 more replies
Relevance 33.21%
Question: Win7 Desktop virus

I am using Mozzila Firefox as my internet browser and have an addon named NoScript which blocks untrusted scripts from running when i enter a website. Today (9/6/2012 10.54) i followed a link from a website and there was a pdf file. I could not see it because it was blocked by NoScript. 5 seconds after i unblocked it Windows automatically logs me off and returns me to the log in screen. I enter my password and log in(took about 10 seconds through the Welcome screen, ussually takes 3 or 5 seconds). The first 3 seconds i can see everything normal but suddenly everything disappears and i am left with the mouse pointer and my wallpaper.No Taskbar, no icons, nothing when i right click . when i press Ctrl + Alt + Delete i go to the blue screen when i can select the task manager and after i select it the task manager shows up for half a second and then disappears. This happens every time i log in. I went to safe mode(where i am writing this now), i opened msconfig to see the processes on startup and there was an unknown process which i disabled. But it did not fix. I also ran Spybot S&D and it detected and cleared 105 problems(lol 105...). But still when i log in there is no taskbar and no icons. just the wallpaper and the mouse. The orange indicator on my unit does not turn off(that indicates that a process is running but i guess you already know that...). I even ran the Windows Recovery Service.I don't know what to do. I have been searching all over Google and haven't foun... Read more

Answer:Win7 Desktop virus

Hi and welcome to TSF please follow the instructions here NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum
gather as much info as you can and make a note of those things you cannot do then make a new thread here Virus/Trojan/Spyware Help - Tech Support Forum post all your info there not here and mention the things you could not do

3 more replies
Relevance 33.21%

Hello-

My desktop icons have disappeared and I have to use the taskbar to use any programs. I purchased Trend Micro Internet Security to help remove any viruses but once installed, my computer shuts down and reboots. I have done a system restore and also tried Malware, but I still can't get the icons to appear on my Main user account.

I am not a computer guru just a little saavy and need a layman's explanation on how to fix my computer. Please help!

DDS (Ver_10-03-17.01) - NTFSx86
Run by Main User at 21:17:04.83 on Tue 04/27/2010
Internet Explorer: 6.0.2900.2180
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.382.109 [GMT -4:00]


============== Running Processes ===============

svchost.exe
svchost.exe
svchost.exe
svchost.exe
svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Digital Media Reader\shwiconem.exe
C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Yahoo!\browser\ybrwicon.exe
C:\Program Files\Visual Networks\Visual IP InSight\SBC\IPClient.exe
C:\Program Files\Visual Networks\Visual IP InSight\SBC\IPMon32.exe
C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\Program Files\BigFix\BigFix.exe
C:\Program Files\SBC Self Support Tool\bin\mad.exe
C:\Program Files\SBC Self Suppo... Read more

Answer:Desktop Icons gone/Possible virus

I ran the GMER and received an error message that I did not have the ability to save to my desktop. Everything locked up and I was unable to connect to the internet.

3 more replies
Relevance 33.21%

My daughters desktop has a virus and we have no way of deleting it because we are unable to get to the internet. Is there a way to find out what is infected or do I have to go buy some type of software because I am unable to download?
 

More replies
Relevance 33.21%

I am trying to help a senior citizen friend who has the FBI virus on her desktop running XP. Every time its starts, the FBI virus comes up and locks the coumper up. I cannot boot from the safe mode or any other mode. When I try to boot in any mode it justs goes into a loop. It lets me pick a mode and then choose the operating system and then just starts over again asking to select the boot mode. I do not have the XP software disk. I have tried several sites to get information to remove this problem but they want money and she doesn't have the resources to pay.

O yes, there is no virus protection on the computer.
 

More replies
Relevance 33.21%

Hello,

I have a new desktop computer (3 months old). It's a HP Pavilion (P7-1247C) and it runs Windows 7. It's been working fine, but in the last few days it caught "something."

The problems are:

1)I can't access the internet (I'm using another computer right now). The internet browser (firefox) will open, but when I attempt to go to a website it "freezes up". The round wheel icons shows up, like it is trying to access a site, but then it just keeps spinning and never connects. I am also not able to close the internet window or access the start menu. The mouse works fine, but I can't navigate away from the open home-internet screen. I've attempted to use Ctrl alt delete (soft boot?), and in one out of the three tries this worked. Otherwise I had to force close (hard reboot?) by pressing the power button.

2)I attempted to not use the internet and pulled up a normal word processing program. Initially this worked (opened a file, allowed me to type and save). But within two minutes it started to have similar symptoms as the internet. I would type and there would be a delay. Or the wheel icon would show up and I couldn't do anything for a few minutes. I can still navigate (slowly) around the computer (save a file, open the start menu, close the program), but everything was really really slow.

The last thing I did before these issues showed up was surf the internet, reading articles and watching some videos, in case that relates ... Read more

More replies
Relevance 33.21%

I have a Dell XPS laptop with windows XP. I had some sort of McAafee scan on demand program that the IT guy at UW installed on my computer. Symptoms: A few days ago the computer started acting strange with pop-ups and an icon at the bottom informing me that I have a virus and need to download some anti virus software. I didn't of course. When I used the scan tool, one time it found maybe 15 or 20 viruses. Other times it would be the exact same virus even after it removed it and I disconnected the computer from the internet. Then it erased my WEP key for my wireless internet so I had to re-type it any time I wanted to connect to the internet.I started to transfer school files onto my desktop, but this morning when I turned on my laptop, the log-on screen popped up (which it never did before). I don't have a password for the Windows log on, so I just hit enter. The desktop flashes and then it reverts to the log-on screen. I tried starting it Safe Mode, but it does the exact same thing.I would like to just copy my school files and photos to my other computer and then just reinstall windows, but I don't know how to do that.Any help would be much appreciated!!-Matt

Answer:Virus not allowing me into desktop

Quote from: Mattdm on February 18, 2009, 11:17:48 PMpop-ups and an icon at the bottom informing me that I have a virus and need to download some anti virus software. I didn't of course. When I used the scan tool, one time it found maybe 15 or 20 viruses.pop-ups and an icon at the bottom informing me that I have a virus and need to download some anti virus software Was that Perfect Defender 2009?

5 more replies
Relevance 33.21%

HI , McAFEE has detected virus NTOSKRNL-HOOK, quarantined but did not remove and still having issues. I read throught he forums and downloaded and ran ComboFix.exeI had to run it a couple of times before I was able to see the log file. Here is the log file. Any assistance would greatly be appreciated. Thank you so much.ComboFix 09-09-18.02 - Larry McCain 09/19/2009 16:36.3.2 - NTFSx86Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.714 [GMT -4:00]Running from: c:\documents and settings\Larry McCain\Desktop\ComboFix.exeFW: Norton Internet Worm Protection *disabled* {990F9400-4CEE-43EA-A83A-D013ADD8EA6E}.((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))).c:\documents and settings\Larry McCain\iexplore.exec:\documents and settings\Larry McCain\naesiax.exec:\windows\system32\drivers\gasfkyfdkkyacw.sysc:\windows\system32\drivers\gasfkymitbwxil.sysc:\windows\system32\gasfkyberfvpiq.dllc:\windows\system32\gasfkytpuxaavh.dllc:\windows\system32\gasfkyxyxvdqjc.dat.---- Previous Run -------.c:\documents and settings\Larry McCain\yioubo.exec:\windows\msa.exec:\windows\system32\drivers\gasfkycvoydftu.sysc:\windows\system32\gasfkybarumnad.datc:\windows\system32\gasfkyooyuuhyi.dllc:\windows\syste... Read more

Answer:Trojan virus on desktop

I see lots of views on my posting but no replies. PLEASE PLEASE I need help!Viruses have returned...===========Hello View counts include everyone that looks at the topic: guests, folks looking for a solution etc.While we understand your frustration at having to wait, please note that Bleeping Computer deals with several hundred requests for assistance such as yours on a daily basis. As a result, our backlog is quite large as are other comparable sites that help others with malware issues. Although our HJT Team members work on hundreds of requests each day, they are all volunteers who work logs when they can and are able to do so. No one is paid by Bleeping Computer for their assistance to our members.Further, our malware removal staff is comprised of team members with various levels of skill and expertise to deal with thousands of malware variants, some more complex than others. Although we try to take DDS/HJT logs in order (starting with the oldest), it is often the skill level of the particular helper and sometimes the operating system that dictates which logs get selected first. Some infections are more complicated than others and require a higher skill level to remove. Without that skill level attempted removal could result in disastrous results. In other instances, the helper may not be familiar with the operating system that you are using, since they use another. In either case, neither of us want someone to assist you who is not familiar with your issue and attemp... Read more

3 more replies
Relevance 33.21%

Guys, have an issue where my CEO caught something from a .pdf it looks like.

It is Windows Vista

His desktop icons and start menu items are gone, he tried to do a system restore and the first one did nothing, so he did another...I think thst negates the first, so an undo is impossible...maybe?

He tried to grab malwarebytes but stopzilla has a hijack out on goggle and then he got that on his drive.

I am pretty sure I got rid of stopzilla, but even after running Rkill>Malwarebytes>super anti spyware
His icons are still gone and I have an error stating his appdata\uverugug.dll cannot boot up...but that was a virus

Here is the Malwarebytes log

Thank you in advance for your help

Malwarebytes' Anti-Malware 1.51.0.1200
www.malwarebytes.org

Database version: 6976

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.19088

6/29/2011 11:26:52 AM
mbam-log-2011-06-29 (11-26-52).txt

Scan type: Quick scan
Objects scanned: 325897
Time elapsed: 6 minute(s), 6 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 1
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 9

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
c:\Users\davedevor\AppData\Local\uverugug.dll (Trojan.Hiloti) -> Delete on reboot.

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Micro... Read more

Answer:Virus hit, desktop icons gone

Hi imapotato, Can you please have a look at this self-help guide and pay special attention to points 3, 4, 5, and 18. Please walk through the entire guide but be sure to read the points I stated carefully.When complete, please post a new Malwarebytes Log. Please also be sure to update Malwarebytes before scanning.

2 more replies
Relevance 33.21%

Ok, Pc was running to slow, decided to do some investigating, and ran avg, ca antivirus, and nothing showed up. I got malwarebytes and a ton of things showed up. got rid of them, thought everything was good until I booted up my pc today. it loads, then goes directly to a black screen with my documents folder opened. nothing else, no desktop, no nothing. I can navigate easily through anything with this folder. but it will not run any programs. I ran task manager, and noticed these things running

Desot.exe
B.exe
C.exe

so I found out Desot.exe would start everytime I tried to run ca antivirus, or firefox, basically any program. looked it up and it's part of a windows antivirus rogue program. I followed some stuff I found to get rid of it. by deleting these files

Desot.exe
dddesot.dll
svchast.exe

svchast.exe was tough to find. but got it.

so now I'm having same problem, except when I try to run a program, it opens a folder asking me to choose a program to run it. I can't run regedit off a new task in taskmanger, it says it can't find it. this thing is a real mess, I have years of stuff on here I don't want to lose. but I can't burn anything or save anything if i'm not able to get on desktop, and use some programs.

b.exe and c.exe is still running, not sure what to do with those. I've had ca antivirus on my pc for years, always updated definitions, and had avg for about 3 months. can't understand why neither of them didn't fi... Read more

More replies
Relevance 33.21%

Hi,

I have just completed the 5 steps and here are the logs:

Deckard's System Scanner v20071014.68
Run by Sarah on 2008-05-24 16:44:19
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- Last 5 Restore Point(s) --
15: 2008-05-23 21:37:01 UTC - RP74 - Windows Update
14: 2008-05-23 18:21:54 UTC - RP73 - Windows Update
13: 2008-05-22 12:50:23 UTC - RP72 - Installed Microsoft .NET Framework 1.1
12: 2008-05-21 12:47:51 UTC - RP71 - Windows Update
11: 2008-05-20 21:28:39 UTC - RP70 - Device Driver Package Install: Garmin


-- First Restore Point --
1: 2008-05-14 18:15:24 UTC - RP58 - Installed Samsung PC Studio 3


Backed up registry hives.
Performed disk cleanup.



-- HijackThis Clone ------------------------------------------------------------


Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2008-05-24 16:47:17
Platform: Windows Vista (6.00.6000)
MSIE: Internet Explorer (7.00.6000.16386)
Boot mode: Normal

Running processes:
C:\Windows\System32\dwm.exe
C:\Windows\System32\taskeng.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Windows\System32\taskmgr.exe
C:\Windows\System32\conime.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Common Files\Symantec Shared\CCSVCHST.EXE
C:\Windows\System32\taskeng.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\U... Read more

Answer:desktop not loading-virus?

Hi, if you still need assistance, please post a fresh main.txt log

5 more replies
Relevance 33.21%

Please I need some help. I was browsing and suddenly got alerts that my system had threats. I use Microsoft security essentials. After my antivirus tried to do it's work it suggested I restart my system which I did. On restarting it I found out that all my desktop icons were gone as well as the start program list, my docuents, my downloads and even some files in the programs folder. I really need to get my files back as I was working on an assignment. Anyone's help with this matter would be greatly appreciated.

Answer:Virus wiped off my desktop. Need Help.

Hello and welcome to TSF.

Download this file and run it.

If necessary, you can run it straight from a USB drive.

This tool will make your desktop icons, and folders visible again.

Then, please follow our pre-posting process outlined below. Use a USB flash drive to download and transfer the tools to the affected machine, if necessary. You might like to run the Flash_Disinfector.exe on the clean machine and the flash drive first to protect against any possible transfer of infection via USB.


NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

1 more replies
Relevance 33.21%

I have been getting many redirects. I thought I fixed the problem with hitman pro a few days ago but now its back and there are many of them. hitman pro makes me restart to delete and when I run it again the same ones are there. Im fairly sure they are back door trojans and need help.

DDS (Ver_2011-09-30.01) - NTFS_AMD64
Internet Explorer: 8.0.7601.17514 BrowserJavaVersion: 1.6.0_29
Run by Ben at 18:47:54 on 2012-03-26
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.3003.1434 [GMT -5:00]
.
AV: Norton Internet Security *Enabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
SP: Spybot - Search & Destroy *Enabled/Updated* {1EAF1D03-5480-F3B2-EB14-11F0F5EE2699}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton Internet Security *Disabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
FW: Norton Internet Security *Disabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k Local... Read more

Answer:desktop.ini virus and redirects

computer now stuck in a boot loop safe mode and system recovery can not be accessed as well

3 more replies
Relevance 33.21%

I got a sceurity notice about having a virus. I tried windows security to fix it and it seems to have gotten worse. Then I tried stopzilla and that didn't work either. Now when I reboot I can only open a browser if I can click on t quick before the icon disappears.
I have only this open browser and nothing else. There were many "critical" things that came up on the stopzilla scan, TDSS is the only one I can remember. I did see antivirus 2009 on there too.
I don't even know where to begin.
 

Answer:Everything on desktop gone, virus infection

I've tried to get a hijack this log, but I can't install it. Not to the desktop not anywhere, it just doesn't work.
When I reboot everything is fine for a few seconds, and everything just disappears. All icons, toolbars, everything.
I tried safe mode but it did the same thing.
I don't know how to give better details.
 

1 more replies
Relevance 33.21%

I have been trying for weeks to get rid of the desktop security virus. I better mention that I am not very good with computers. I ran malaware bytes I don't know how many times! I then ran it in safe mode a ton more times. Every now and then it comes up with an infection in registry keys, I delete it.. But when I reboot, desktop security is still there. I was wondering wether reformatting would get rid of it? I have also run my anti virus software called norman, avast, and many many more.
I have followed several online guides telling me how to get rid of this, and none of them have worked. I am getting so so so frustrated. So, will reformatting work? I did system restore, that didn't work of course. I dunno. I'm a bit lost with this. Please help!

Answer:Desktop security virus

Please follow the instructions in ==>This Guide<==. If you cannot complete a step, skip it and continue.Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include a description of your computer issues and what you have done to resolve them.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.

4 more replies
Relevance 33.21%

Have just cleaned out tons of viruses on a friend's PC and run Ewido and Hijack this. He has a horrible adware on his desktop telling him he has nasties and should sign up to get rid of them etc ..
His Hijack log follows and any help would be much appreciated.
thanks
Michael

Logfile of HijackThis v1.99.1
Scan saved at 19:24:11, on 12/10/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
D:\Program Files\babylon\Babylon.exe
C:\Program Files\PTBSync\PTBSync.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Skype\Phone\Skype.exe
D:\Program Files\QuickDCF.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
d:\Program Files\ewido\security suite\ewidoctrl.exe
D:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\Program Files\Norton AntiVirus\navapsvc.ex... Read more

Answer:Desktop taken over by malware/virus

Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Before begining the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. Ensure that there aren't any opened browsers when you are carrying out the procedures below.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

---------------------------------------------------------------------------------------------

Please print out or copy these instructions/tutorial to Notepad as the internet will not (while in Safe Mode) be available to you at certain points of the removal process. Make sure to work through all the Steps in the exact order in which they are listed below. If there's anything that you don't understand, ask your question(s) before moving on with the fixes.

---------------------------------------------------------------------------------------------

Please download SmitfraudFix (by S!Ri)
Extract the content (a folder named SmitfraudFix) to your Desktop.

I see you have Ewido anti-spyware installed. Ewido has recently been purchased by Grisoft, makers of AVG Antivirus, and the program is now known as AVG Anti-Spyware. It is essentially the same program with a new paintjob; Ewido currently can stil... Read more

3 more replies
Relevance 33.21%

So, three days ago a little red circle appeared on my taskbar and my background was replaced with flashing words about having a Trojan. At that point I ran a full scan with AVG and super spyware scanner. This brought up SHeur2.QYN, Tiny.AC, and also mentioned userinit.exe. I had it clean what it could and, with much hesitation, rebooted. When it booted back up, it logged on, then off, then on, then off, etc. So, I used the ultimate bootdisk to boot and readd userinit.exe to the system32 directory. Now I could get in, but my access to the internet was blocked, and I could not change my desktop background (though it was just blue now). Also, I have WinPatrol installed, and that kept telling me that something was trying to change my background. So at this point I started shotgunning scanners at it. I ran:
ComboFix
MalwareBytes Anti-Malware
ATF Cleaner
SDFix
Spybot Search and Destory
Re-ran AVG scan
HijackThis (Only for the log, didn't have it change anything)
At some point in there, WinPatrol also caught a Frmwork32 trying to run, but I havn't seen that happen again. Now, I have my internet back, I can change my desktop picture, but WinPatrol still says something is trying to change my desktop. Specifically, it is using active desktop. When I look in web settings for the desktop, there is one blank page setup in the active desktop area. I keep deleting it and it comes back. I even added a line to the registry to disable active desktop, and it is still happening. So that'... Read more

Answer:Virus keeps trying to hijack my desktop

I may have found my own answer. I guess I will find out tonight. Digging through the hijackthis log I found this line:

O24 - Desktop Component 0: (no name) - (no file)

Since O24 relates to active desktop, and the page it keeps trying to load is blank...maybe that's all there is to it.

1 more replies
Relevance 33.21%

I downloaded an avi file and went to burn it onto a DVD and boom I got a virus. Norton detected it but can not remove it. It says it is in my video.exe what ever that means. I also have tried Trend micro. They too say it failed to fix the problem but sees it. I am currently running Dr.Web boot disk. It has been scanning for over three hours so I guess I have a serious problem. Any ideas what to do next?

Answer:Virus can not be removed from hp desktop

Post #53FAULTING_IP:SYMEFA+d9666That is an Norton problem, uninstall it.https://support.norton.com/sp/en/au...I use Microsoft Security Essentials ( MSE )http://www.softpedia.com/get/Antivi...http://www.softpedia.com/progScreen...http://www.techsupportalert.com/bes...http://windows.microsoft.com/en-US/...System requirementshttp://www.microsoft.com/en-us/secu...Can Microsoft Security Essentials ( MSE ) protect me from online banking and shopping.http://answers.microsoft.com/en-us/...If you choose to use Security Essentials, please follow the steps in this thread first, especially the part about removing all existing realtime antimalware:http://kb.eset.com/esetkb/index?pag...

more replies
Relevance 33.21%

Hello,

I have this problem: When my PC boots (XP SP2), I get an error "application cannot load because WININET.DLL is missing or not found. Reinstalling may fix the problem." At this point, the desktop or icons are not visible, but I can gain access to applications and files through the task manager, but that is all.

Prior to this, I did have a virus that AGP picked up and fixed called "Trojan Horse Generic Law" and "Java/Byte Verify"

Any suggestions or help, please!?
 

Answer:Virus? Hijacked Desktop?

Hi tstr,

Welcome to TSG!

Please do not post multiple threads for the same problem. I have replied here:

http://forums.techguy.org/showthread.php?t=430982

Make all posts regarding this matter in that thread. This thread is closed.
 

1 more replies
Relevance 33.21%

I have a laptop that was infected probably over a year ago and has been sitting.
The desktop icons don't do anything.
The Programs folder is empty.
I can't run Malware bytes
It doesn't see wirless networks.
 
It has windows XP 5.1 SP2
If you can help, let me know,
Thx,
Carl
 
Mod Edit: Moved topic from Logs forum. No logs posted. ~bloopie

Answer:Old virus-Desktop Icons don't do anything

Hello try downloading these from another PC onto a Flash drive or CD and run of that.Please download Rkill by Grinler and save it to your desktop.Link 1Link 2Double-click on the Rkill desktop icon to run the tool.If using Vista, right-click on it and Run As Administrator.A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.If not, delete the file, then download and use the one provided in Link 2.If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.If the tool does not run from any of the links provided, please let me know.Do not reboot the computer, you will need to run the application again.Download TDSSKiller and save it to your desktop.Extract (unzip) its contents to your desktop.Open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.If an infected file is detected, the default action will be Cure, click on Continue.If a suspicious file is detected, the default action will be Skip, click on Continue.It may ask you to reboot the computer to complete the process. Click on Reboot Now.If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.If a reboot is required, the report can also be found in your root directory (usually C:\ folder) in the form of TDSSKiller_xxxx_log.txt. Please copy and paste the contents of that file here.ADW CleanerPlease download Ad... Read more

34 more replies
Relevance 33.21%

right heres the script guys, on my desktop background ive got a link that says

WARNING YOUR IN DANGER !!! and then some long message explaining the dangers of spyware

SECURE YOURSELF RIGHT NOW!
REMOVE ALL SPYWARE FROM YOUR PC

if i click on the link it takes my to some antivirusgold website.

this message takes up the whole of the desktop background and i keep clicking on it by mistake when clicking on my icons and its starting to annoy me as i cant get rid of it.

ive ran avg anti virus, spyware blaster, ad-aware se, spybot S&D, microsoft anti spyware, cws shredder and xsoftspy to no avail!!!!!!<<<< all updated with the newest definitions installed.

heres my hi jack this log:
Logfile of HijackThis v1.99.1
Scan saved at 10:43:04, on 5/28/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Yahoo!\Messenger\YPager.exe
C:\Program Files\Netscape\Netscape\Netscp.exe
C:\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe
C:\Program Files\Hijackthis\... Read more

Answer:cant get rid of desktop virus or spyware?? HELP!

8 more replies
Relevance 33.21%

 So when everytime i scan my external HDD this appears in the log
 G:\$RECYCLE.BIN\desktop.ini - error on opening   (error on opening may not be the actual message , bcs i've translated it from my laguage , but you get the point)
 
 How do i know if this is the infamous desktop.ini virus and how do i remove it if that's the case ?
 
Thanks in advance.
(Using NOD 32 BTW)

Answer:External HDD maybe desktop.ini virus ?

Did you recently make any changes in Folder Options?  Like remove the check in the Hide protected operating system files box.

1 more replies
Relevance 33.21%

http://www.bleepingcomputer.com/forums/topic463588.html

More replies
Relevance 33.21%

Mod Edit:MOVED to appropriate forum; Virus,Trojan and Malware Removal Logs ~~boopmeI'm currently running Windows Vista and have been fighting a ZeroAccess Rootkit virus. Which has started causing my desktop to be on restarting loop. Everytime I turn on the computer and let windows/explorer load,a box pops up saying "critical problem detected computer will restart after one minute" then it restarts and does it again. I've been trying for days to fix the problem but it seems like nothing is working. I ran FRST Scan this is what I got.Scan result of Farbar Recovery Scan Tool Version: 14-08-2012Ran by Brandon at 14-08-2012 23:18:24Running from L:\ Service Pack 2 (X64) OS Language: English(US) Attention: Could not load system hive.ERROR: The process cannot access the file because it is being used by another process.ATTENTION:=====> THE TOOL IS NOT RUN FROM RECOVERY ENVIRONMENT AND WILL NOT FUNCTION PROPERLY.============ One Month Created Files and Folders ==============2012-08-14 12:52 - 2012-08-14 13:53 - 09232584 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe2012-08-13 09:51 - 2012-08-13 09:51 - 00001945 ____A C:\Windows\epplauncher.mif2012-08-13 09:49 - 2012-08-13 09:49 - 00000000 ____D C:\Program Files\Microsoft Security Client2012-08-13 09:49 - 2012-08-13 09:49 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client2012-08-13 09:09 - 2012-08-13 09:19 - 00027256 _... Read more

Answer:ZeroAccess,Virus on my desktop

Greetings And Welcome To The Forums!!My name is Gringo and I'll be glad to help you with your malware problems. I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At... Read more

10 more replies
Relevance 33.21%

Hey when i start up my computer all my desktop dissappears. e.g The icons are there for a second and the task bar is too but then it dissappears and the only way i can do anything is through going ctrl+alt+del and running tasks that way. If i go run - explorer.exe the icons and task bar with come up for a second or two and then go again. My virus software kept picking up dll files in system32 but seemed to do nothing about it when i told it to clean them so i switched virus programs and thats when this happens. I've tried doing a system restore back to this morning but it says theres an error and cant do it. I dont want to reformat it as there is ALOT of files i need on it SOMEONE PLEASE HELP ME!!!!

Answer:Desktop Problem (Virus)

Hello and welcome. . .

1. Please further describe the error that you received while attempting a system restore.
2. Is the desktop (and restore) the only item(s) that you are having trouble with at this time? Are there any programs that are not executing properly?
3. What type of files are you interested in saving? i.e., are they personal files such as Documents, Excel, Pictures, etc... or are they programs that can be re-installed after an HDD re-format, should that occur?

Thanks. . .

jcgriff2

5 more replies
Relevance 33.21%

Is AntiVir Desktop a Virus? I have this on my system running all the time and i cannot seem to deactivate.

Answer:AntiVir Desktop -Virus? What is it?

It sounds like it's part of Avira. Did you install Avira?How do you know when a politician is lying? His mouth is moving.

8 more replies
Relevance 33.21%

$recycle.bin , desktop.ini ,and System Volume Infomation folder,anyone know how to delete it??? thanks...

Answer:$recycle.bin & desktop.ini virus

Hi. . .

You really do not want to delete these items - you can empty recycle bin; desktop.ini contain info for folders;l Sys Vol Info - is VSS - system restore points

Why do you want to do this?

Regards. . .

jcgriff2

.

6 more replies
Relevance 33.21%

I just removed the FBI Moneypak virus from a user's personal computer. When I do it at work, I can just move their local data somewhere and give them a new profile, but I'm trying to keep the main profile on this user's computer so nothing has to be done outside of removing the virus and the visible tracks that it was there.

After the virus was gone and I ran MB/CCleaner/etc, everything was back to normal except upon logging into her profile, a command prompt would automatically pop up before the desktop would load (similar to how the virus acts) with the following text in the prompt:

c:\users\christine\documents\31e36b34.exe is not recognized as an internal or external command, operable program or batch file.

c:\windows\system32>​
I'm guessing that 31e36b34.exe is what the virus used to refer to. From there, I can run "explorer.exe" and the desktop will start up fine, and then after exiting the command prompt, you would never know there was a virus on the computer.

Any suggestions on how to rid the computer of looking for this exe before loading the desktop?

Thanks in advance.
 

Answer:After virus: CMD loads before desktop

15 more replies
Relevance 33.21%

I have a virus in my PC(xp sp2) who changes desktop icons but Avast 4.8,ESET online scanner,SAS and Malwarebytes Antimalware didn't find anything.I even repair install and the virus is still in my PC.Please help me.

More replies
Relevance 33.21%
Question: Blue Desktop Virus

I have absolutly no idea why my account is telling me I can't post in somebody else's post but the guy with the blue screen warning is having the exact same issues i'm having. My computer randomly restarted it self and kept telling me it was infected. I downloaded the programs but NOTHING will run.

http://forums.majorgeeks.com/showthread.php?t=172324

I'm going to do what you guys have instructd him so far to do...

Okay so I just read everything but the problem with mine is that when I save the .exe files to my desktop, they won't install. If I try to run them, it tells me the admistrator will not allow this. I believe this spyware is known as the Internet Speed Monitor and i've been trying to find ways to delete this. And SpeedRunner is apparently another spyware thing and I can't get it to delete it for the life of me
 

Answer:Blue Desktop Virus

RE2LeonS said:





I have absolutly no idea why my account is telling me I can't post in somebody else's postClick to expand...

It has been like this for almost 4 years. You are only allowed to post in your own threads in the Malware Forum. Thread hijacking has never been allowed.


You need to do the same thing we asked that use to do and that is the below. The key is that YOU MUST try all steps. Just keep one idea in mind, without logs, we cannot help you. Thus you must make sure you try everything suggested. Your alternative is reinstall.


Please follow the instructions in the below link and attach the requested logs when you finish these instructions.



READ & RUN ME FIRST. Malware Removal Guide

If something does not run, write down the info to explain to us later but keep on going.

Do not assume that because one step does not work that they all will not.
Notes:
If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode. You can run steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

Starting your computer in Safe mode

If you have problems downloading on the problem PC, download the tools on another PC and burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a fla... Read more

5 more replies
Relevance 33.21%
Question: Desktop.html virus

Logfile of HijackThis v1.99.1
Scan saved at 10:27:05 PM, on 2/23/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\InterBase Corp\InterBase\bin\ibguard.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\InterBase Corp\InterBase\bin\ibserver.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Creative\WebCam Go Control\CAMTRAY.EXE
C:\WINDOWS\System32\csvhost.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Yahoo!\Messenger\ypager.exe
C:\Documents and Settings\Raymonden\My Documents\Spysubtract\SpySub.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Raymonden\Desktop\hijackthis.exe

R3 - URLSearchHook: HyperSearchHook - {A985CC89-3956-40A6-AEDF-F9822F9585D0} - C:\Program Files\Common Files\Hyperbar\HyperbarSS3.dll (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &... Read more

Answer:Desktop.html virus

6 more replies
Relevance 33.21%

can anyone tell me how to get rid of the desktop defender 2010 virus?im running win7.im sorry i cant give more info but it takes forever to get on my pc with this problem.attached is a hijackthis log file but i dont no if it will tell you much.Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:17:29 AM, on 5/16/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Windows\System32\rundll32.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Windows Live\Family Safety\fsui.exe
C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Windows\ehome\ehmsas.exe
C:\Program Files\HP\Digital Imaging\bin\hpq... Read more

More replies
Relevance 33.21%

How can i remove a virus that wont let any of my programs load nor my desk top. I have windows XP and the only thing it will do is load my desktop picture, no icons nor the tool bar at the bottom of the screen. I have to press ctrl alt delete to even get to my doucuments but nothing will run. I think antvirus 8 was installed but i cant find it anywhere in my registry. Could someone help me manually delete this virus. I cant access the internet either on that computer..Thanks...

Answer:Virus removal no desktop.

Install RKill, then run MBAM, Eset, kaspersky, unhackme, hitmanpro, combofix, SUPERAntiSpyware & ATF.Then finally start with clean Restore points.RKill Forum - What it does and What it Doesn't - A brief introduction to the programhttp://www.bleepingcomputer.com/for...RKill is a program developed at BleepingComputer.com that was originally designed for the use in our malware removal guides. It was created so that we could have an easy to use tool that kills known processes that stop the use of our normal anti-malware applications. Simple as that. Nothing fancy. Just kill known malware processes so that anti-malware programs can do their job.Malwarebytes' Anti-Malware ( MBAM )http://www.softpedia.com/get/Antivi...http://www.softpedia.com/progScreen...http://www.malwarebytes.org/mbam.phphttp://www.spywareinfoforum.com/ind...http://www.bleepingcomputer.com/vir...Forumhttp://www.malwarebytes.org/forums/Error codeshttp://forums.malwarebytes.org/inde...Common Issues, Questions, and their Solutions, Frequently Asked Questions.http://forums.malwarebytes.org/inde...http://www.spywareinfoforum.com/ind...VIPRE Rescue Programhttp://vipre.malwarebytes.org/http://live.sunbeltsoftware.com/Try it in Safe mode.If it won't run, rename the downloaded mbam-setup.exe file to mb.exe to help work around certain malware that will block it from being run.If it still will not run.1: Go to Control Panel > Programs and Features and uninstall Malwarebytes.Next redownload Malwarebytes but rename it before ... Read more

4 more replies
Relevance 33.21%

I have the w32.desktophijack virus on my computer. I have run Norton Anti Virus 2005 but it is not able to repair, quarantine, or delete the virus. I have read through the other threads on how to fix it, but none of the solutions have worked so far. Any help on how to fix this would be greatly appreciated! Here is my logfile:

Logfile of HijackThis v1.99.1
Scan saved at 3:35:15 PM, on 7/31/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Explorer.exe
c:\windows\system32\fgoyuoo.exe
C:\Program Files\Cas\Client\casclient.exe
C:\WINDOWS\System32\allbql.exe
C:\Documents and Settings\Jamie Stanley\Local Settings\Temp\Temporary Directory 2 for hijackthis.zip\HijackThis.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Jamie Stanley\Local Settings\Temp\Temporary Directory 3 for hijackthis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bellsouth.net
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bellsouth.net
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {02EE5B04-F1... Read more

Answer:PLEASE HELP!! w32.desktop hijack virus

Is there anyone who can help me or direct me to a place that can?
 

1 more replies
Relevance 33.21%

I went to some website and it detected a virus, and i thought it was gone. next time i started windows a fake windows xp recovery dialog box came up with steps to repair my pc...anyway i managed to get rid of this virus using avg in safe mode.

the problem now is, the desktop still does not show any icons and it does not respond at all. also there are no programs on start menu programs (however they are in program files)
all folders are also hidden, so is there an easy way to unhide them?

so my question is, how can i restore my pc back to a previous stable state.

Answer:HELP XP RECOVERY VIRUS! NO DESKTOP!

by the way, i cannot find a previous restore point

1 more replies
Relevance 33.21%

Hello,

This is my first post here so please excuse me if this is not post in the right section.

About 4 or 5 days ago I noticed a couple of new folders in both my HD They are called $recycle.bin and System Volume Infomation. These folders did not exist before and they are located on the "C" drive and the "D" drive (two seperate HD). Both of these files are protected and cannot be removed. When I check the property and I remove the read only from the $recycled .bin file I can delete it but it comes right back. I know it's related to a file called desktop.exe because, it ask me to delete this file whenever I delete the $recycle.bin file.

The $recyle.bin and desktop.exe also copy themselves automatically to anything I attach to the PC, (External drive or USB Key). The best I can figure is that those two files are Virus/Trojan/Worm

Sometime I also see a file called autorun.bin I just deleted 259 instance of these files but they keep on coming back.

Whatever I found so far on the net, is about XP but I'm running Vista ultimate. Don't know if that makes a huge difference.

I ran a series of spyware/adware software but nothing seam to work. I've tried in Safe mode as well as in regular mode,

Norton AV 2008
Ad/aware
Spyware doctor
Malwarebites
Window defender
Spybot SD

I also went into the registry and I cannot locate these files

System restore also didn't work, it gave me an error and would not revert back.

My PC has go... Read more

Answer:Help virus desktop.exe and $recycle.bin

I guess you guys/girls don't want to answer me. I've had this post for 3 days and no answer. Thanks anyway for your help.

CD

2 more replies
Relevance 33.21%

Hi,
HP pavilion desktop with Windows 7 os. A virus popped up on my computer and forced me to do a hard shutdown. I reopened in safe mode and the desktop reverted to default settings. I'm not sure where the virus went or how to remove it. Any suggestions are appreciated
(computer 2 years old)
Pavilion P6000 series

Answer:Virus help for HP pavilion desktop?

Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware to your desktop.NOTE. If you already have MBAM 2.0 installed scroll down.Double-click mbam-se... Read more

3 more replies
Relevance 33.21%

I am reparing a machine for a friend. After installing and updating Mcafee, I found and removed multiple viruses. However, the desktop still has a long message on a black background that reads: WARNING You Are In Danger All that you ever do on your computer...... Can anyone tell me how to get this off the Desktop? Thanks.
 

Answer:Desktop Virus Leftover

http://www.processlibrary.com/processscan/ this may help once you reach desktop,however i would run all the anti spy you have make sure you have spybot,adaware etc,download iobit v2 free install run then go to tools start up and look through the registry entries which are starting with windows,also microsoft malicious removal tool may be usefull
http://www.iobit.com/AdvancedWindowsCarePersonal/download.htm
http://www.microsoft.com/security/malwareremove/default.mspx
 

1 more replies
Relevance 33.21%

Yesterday my computer was working fine, now I fire it up today and it loads like normal, but after it says its loading my settings and the music comes on nothing on the desktop shows up. No icons, no taskbar, can't right click to get into settings yet I can still move around my mouse and alt-ctrl-del to task manager. I'm on the computer right now only because I opened the help topics in task manager and found an option to get on the net. If you have any idea what I can do to fix this or what is causing this to happen please reply, I'll be waiting for the next couple of hours while I download a virus scanner to check my files.

I have 512 DDR, GeForce 4 Ti4200, KT333 Dragon Lite, dual 300 power supplies, AMD 1800+, SB PCI 512.

Also the default screensaver comes on after one minute which is not what I set it to. Don't know if that has anything to do with it or not. I also noticed that when I go to some webpages I get this error:

"Warning: Failed opening '/export/http/forum/docs/languages/deleted/generic.php' for inclusion (include_path='/export/http/forum/include:.:/export/http/include:/export/http/docs') in /export/http/forum/docs/main.inc.php on line 41

Fatal error: Failed opening required 'languages//wwwthreads.php' (include_path='/export/http/forum/include:.:/export/http/include:/export/http/docs') in /export/http/forum/docs/wwwthreads.php on line 11"

Sound like any virus you all know about? I mean I don't feel like reinstalling windows for the 5th ... Read more

Answer:Help with possible virus on desktop (Win2k Pro)

I don't know that this is a virus, but since you can bring up task manager, try running explorer from the File/Run menu in Task Manager. This will allow you to copy any critical files to backups before anything happens to them.

After you backup critical files (you should do this before problems happen!), boot the CD and do a system repair, that may beat it into submission.

1 more replies
Relevance 33.21%

My dads computer is not working properly. Some times the start up will not work, it will show the desktop, the most will move and the keyboards lites will work but We cannot click on anything or open any programs. I tried to installed Kaspersky on it like I have on my home computer and this Laptop but it took alot of tries to get it installed but it will not scan or enable protection. It looks like the Restore points have been deleted as well. and at times the computer will keep running at 100% PC usage. Thanks in advance for your help of me and other.

Regards
Mike

DDS (Ver_09-03-16.01) - NTFSx86
Run by Algene Edwards at 12:27:38.31 on Sun 04/12/2009
Internet Explorer: 8.0.6001.18372
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.511.139 [GMT -4:00]

AV: Kaspersky Internet Security *On-access scanning disabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
D:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
C:\Program Files\Sony\... Read more

Answer:Desktop Infection, don't know virus name

Hi,I have bad news for you I see you're dealing with Virut on top of the other nasty malware you are dealing with. In that case, it's unfortunately a lost case - Game over situation and a format and reinstall is the fastest and especially the safest solution.You may want to read this why: Virut and other File infectors - Throwing in the Towel? So, I suggest you to start backup all of your valuable data/documents/pictures/movies/songs/etc.. Do NOT backup any applications/installers and Do NOT backup any .exe/.scr/.htm/.html/.xml/.zip/.rar files...This because these files may be infected as well. If you back them up and replace them afterwards, it will infect your computer again.Read here for instructions how to format and reinstall Windows: http://web.mit.edu/ist/products/winxp/adva...all-format.html

2 more replies
Relevance 33.21%

Hi,

I ran MSE as I usually do every month and it said I had a virus. It successfully removed it, but I always do a check with SUPERAntiSpyware and MBAM, and MBAM found more viruses. It deleted them and asked for a reboot. After rebooting, I now get no desktop at all even though explorer.exe is running. If
I close it then reopen it, it's fine but I don't get the sidebar or most of my other processes.

I'm running Windows Vista SP2 32 bit. MSE is my only AVP and I downloaded it straight from the Microsoft website so I know it's not the virus one.

Please find attached my SUPER and MBAM logs.

Lilly
 

Answer:No desktop after removing a virus

missrose1991 said:





If
I close it then reopen it, it's fine but I don't get the sidebar or most of my other processes.Click to expand...

What do you mean? If you go to task manager and close the explorer process and then reopen the process your desktop comes back? Please explain.

We also still need these logs:
RootRepeal -- if it will run
ComboFix
C:\MGLogs.zip -- from running C:\MGTools.exe
 

9 more replies
Relevance 33.21%

Last week I had the Security 2012 virus. I did some research from my laptop and then installed Stopzilla while in safe mode. It took some time, but eventually Stopzilla was able to run and get rid of the virus. The computer, however, continued to get the same or similar viruses each time we used it and the list of them would show up in stopzilla and we would then have to stop what we were doing and run the long scan. So it happened again last night but after we ran the scan and chose the option to remove the items that Stopzilla had found, the computer became nonresponsive and my entire desktop was gone. Upon restarting, stopzilla popped up briefly but nothing else and then it was gone and I was left with a blank screen. The only thing I was able to use was the taskmanager. I was able to type firefox into taskmanager and bring that up but nothing else. I have no desktop in safe mode either. I am panicking. There are pictures and stories on that computer that the kids and I would be heartbroken to lose. Does this sound familiar at all to you? Do you have any suggestions for me? Thanks in advance for your help April
 

More replies
Relevance 33.21%

Recently my computer has been acting up, going a lot slower than usual, not loading certain websites, and the mouse keeps shooting off to different locations on the screen that I am not moving it to. I found a desktop.exe file on the startup which i've read is related to a virus. Here is a HiJackThis log:Can anyone help me?? I'd be so appreciative!Logfile of Trend Micro HijackThis v2.0.2Scan saved at 10:28:05 PM, on 5/5/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16827)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\Program Files\Intel\Wireless\Bin\WLKeeper.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\WINDOWS\system32\LEXPPS.EXEC:\WINDOWS\eHome\ehRecvr.exeC:\WINDOWS\eHome\ehSched.exeC:\Program Files\McAfee\SiteAdvisor\McSACore.... Read more

Answer:virus.. possibly desktop.exe?

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the resul... Read more

2 more replies
Relevance 33.21%

My dad home PC after booting up,displays no Icons on his desktop, also there is no mouse arroew either. I have tried do a ctrl-alt-del and get the error message that is has been disable by the administrator which he is not. He is using Windows XP, but has a dual OS PC meaning during the intial boot up he can choose Win 2000 or Win XP. It seems like he may have a virus on the XP side of his hard drive. The drive was partitioned with two seperate drive C: is Win 2000 and F: is XP. Does anyone know of a way to get into the XP side and retrieve some needed files. I have already built him a replacement PC, but he needs to pull some files off of the XP side
 

Answer:No Icons on XP desktop possible virus

AU_tech said:

My dad home PC after booting up,displays no Icons on his desktop, also there is no mouse arroew either. I have tried do a ctrl-alt-del and get the error message that is has been disable by the administrator which he is not. He is using Windows XP, but has a dual OS PC meaning during the intial boot up he can choose Win 2000 or Win XP. It seems like he may have a virus on the XP side of his hard drive. The drive was partitioned with two seperate drive C: is Win 2000 and F: is XP. Does anyone know of a way to get into the XP side and retrieve some needed files. I have already built him a replacement PC, but he needs to pull some files off of the XP sideClick to expand...

Can he log in under safemode?
can you login on the 2000 partition and access the other files?
 

3 more replies
Relevance 33.21%

I have some sort of virus that has changed my desktop to look like this:


And when I open up desktop properties, I cannot change my desktop to anything else.

I found a Malware removal software that i downloaded and ran. It found 15 infected objects and removed them.

Here is my HJT logfile now:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:35:53 PM, on 8/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
c:\program files\dell printers\Additional Color Laser Software\Status Monitor\DLSDBNT.EXE
C:\Program Files\Juniper Networks\Common Files\dsNcService.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Maxtor\Sync\SyncServices.exe
C:\Program Files\Common Files\Microsoft Sha... Read more

Answer:Solved: Desktop Virus

16 more replies
Relevance 33.21%

Hi again new system new problem, Can I follow "do this first rules, w/ out my desktop or from safe mode, which happens to be the only way to get into this system? Or is there another way to restore the desktop icons etc?
Thanks
Pappy
 

Answer:no desktop, after virus removal

symptoms that I've gleened, no desktop, taskbar, icons, black screen, other core programs not working right or not at all including device mang, add remove,, advanced system tools, seems all the major core functions are non responsive or maybe gone, seems a nephew got a hold of it and tried to transfer some of grandmas files, restore or back up partition is empty, system restore not working or no restore points. Yet the system boots reg, SAS and Malware did find some "rouge (x4) can not find log,,can boot into safe and the thing runs like a top, everything works as normal, desktop,icons, shortcuts etc,,?
 

8 more replies
Relevance 33.21%

Yesterday morning, I logged on to my computer (an HP Quad Core running 32 Bit Vista) and noticed a warning from Norton advising me that their program had blocked one instance of Downloader.Swif.C and two instances of Trojan.Vundo. I shut the machine all the way off while away at work, and when I booted it back up last night, my desktop had disappeared: no wallpaper, no icons, no task bar, and no start button--but, oddly, the My Documents folder was open in the middle of an otherwise coal black screen. The files inside My documents opened normally, and I was able to navigate to other files and folders through Windows Explorer. Right-clicking on the screen did nothing, and the windows key on the keyboard had no effect. Ctrl+Alt+Delete opened task manager. I clicked on "file", then "New Task" and typed "explorer.exe" into the box. Remarkably, the wallpaper and the icons and everything else came back, along with a warning telling me that windows could not open the file "y.exy", giving me the usual options for seeking or selecting a program to open said file, which is apparently a virus. I updated Norton, ran a full scan, and it came up clean--but I strongly suspected that Norton simply wasn't on to this bug quite yet, and my suspicion proved to be correct.

I've rebooted several times, and each time I do, it's the same: no desktop, no icons, etc. etc., and once I do the trick to restore my stuff, I get the "y.exy" m... Read more

More replies
Relevance 33.21%

Ok so this is what happened.

I have Windows 7 pro 64bit installed in this computer and I have two log ons, one for the family and one for just myself.

I was using the family log on, and I was browsing the internet. I then opened Microsoft Messenger and I had some random friend requests that I accepted.

Maybe like 2 minutes later, all my icons on my desktop started disappearing. All my MP3s, Pictures, Videos and some folders I had on my desktop. I do still have my main icons like Firefox and My Computer and the Recycle Bin.
I then got all these pop up boxes with erros. I dont remember what they were or said. I then rebooted the computer and everything is still missing.

Do you guys think I have some kind of virus ??? or someone hacked me ??

I am using my personal log on right now and if I go under the User folders in My Computer, I can go into the other log in name and see everything I had there.

Please help me out
 

Answer:All my desktop items are gone!! Do I have a virus ? Please help!

Sounds like you got the fake "System Recovery" malware. GoHere
 

6 more replies
Relevance 33.21%

Hello my name is Jeff and I need help. Recently my roommate contracted a virus on his Dad's computer that hijacked the desktop. His dad is out of town till tomorrow and he asked me to fix it before his ds got back cause he is completely "computer illiterate". I have run all kinds of different virus and spyware scans but can't seem to get rid of it. I search on the web and found this page and found out that the first thing I needed was the HijackThis program and to post the findings here so that is what I am doing. Now although I am not "computer illiterate", I do not know much about the Registry and those type of things, so if you could put any advice or solutions into the simplist form for me it would be greatly appriciated. Here is the Log:

Logfile of HijackThis v1.99.1
Scan saved at 2:16:53 PM, on 10/11/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton... Read more

Answer:Desktop Hijack Virus

16 more replies
Relevance 33.21%

When I start my computer the first thing that comes out is a control center windows that says "best pc health components" saying problems were detected and its asking to update my license key when I close it only my background picture comes out. No icons n my right and left clik don't work and if I put a cd in won't load it so I guess if I buy an anty virus won't help do to the problem that the computer does not load the cds so what can I do in this case? Please help me!

Answer:desktop and virus problem

Googlehttp://www.google.co.uk/search?hl=e...GB&ei=hX_oS47iL4f20wTusOXMBg&sa=X&oi=spell&resnum=0&ct=result&cd=1&ved=0CBwQBSgA&q=best+pc+health+components&spell=1

4 more replies
Relevance 33.21%

I've got some messed up virus on my computer and its driving me insane. when i start up my pc it logs in, but only the desktop wallpaper appears, and none of the icons.

i can start programs, open stuff by pressing ctrl alt delete and starting a new task. there's something called a.exe in the processes that ive looked up and seems to be some kind of worm.

i have installed a fair few anti virus, syware, malware programs like spybot s+d, hijackthis, ad aware, avira etc etc, but the virus blocks all of them from working properly. some of them will scan and then shut down before i can delete the problems, and some of them wont work because they are being blocked from accessing the internet for updates

and to top it all off, i cant even seem to start the pc in safe mode. when i try i get a screen full of white text, then it just resets back to the startup menu.

i see you are all using hijackthis. i dont think i can get this to wrk, although i will try again. i've been told about something called combifix, will this be abe to help me?
 

More replies
Relevance 33.21%

Hello, a torrent containing what I believe to be a bogus version of the XVid MPEG-4 Codec Pack was downloaded and installed on my computer. After I noticed my Microsoft Securty Essentials had been removed from the running programs tree, I followed the PC Issues balloon to find that "Windows Something Security Something" (Sorry I didn't write it down) was inactive; though it was clearly not meant to be, in the first place. I then manually started MSE and ran both a quick then a full scan that found no malicious files, followed by the same action and result with Malwarebytes. At this point, I tried to Revo-uninstall the XVid MPEG-4 Codec Pack, and during the target program's featured uninstall I received a pop box in the bottom right corner (completely unattached to the taskbar, as mine runs vertical along the left edge of my desktop) stating that "Windows Group Converter will no longer start[up (with windows??)] "grpconv.exe."" Sorry, it was very brief. At this point I opted for a system restore that rolled my PC back about 6 hours before this event took place. It finished with the restore but it reinstalled the XVid MPEG-4 Codec Pack; even though it was restored to a time in which this program/virus should not have existed. I then tried another full scan with MSE and MBAM and they both returned no results. At this point I was already running late for an event so I shut my PC down and left it await. When I returned home, I powered the PC u... Read more

Answer:Possible desktop.ini and/or grpconv.exe virus.

Do not run any other tools when you are being assistedDownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan resultsDownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results here.If you get crashes in normal mode,run it in safemode with networkingDownloadESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threatsExport the list to desktop,copy the contents of the text file in your reply

9 more replies
Relevance 33.21%

Hi Guys,

Bit confused/desparate really! Desktop has turned red with message "your privacy is at risk" across it. Also new icons have appeared: "error cleaner", "privacy protector" and "spyware and protection". Pop ups for those icons appear all the time. Computer is also running really slow. Can you help?? the computer is a compaq evo p4 running xp professional. Have attached hjt log. Thanx in advance for your help!
 

Answer:Solved: Desktop gone red, Virus? Help!

Please post the log in quick reply and not use attach

You should print out these instructions, or copy them to a NotePad file for reading while in Safe Mode, because you will not be able to connect to the Internet to read from this site.

Please download SmitfraudFix (by S!Ri)
Extract the content (a folder named SmitfraudFix) to your Desktop.

Next, please reboot your computer in Safe Mode by doing the following :
Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
Instead of Windows loading as normal, a menu with options should appear;
Select the first option, to run Windows in Safe Mode, then press "Enter".
Choose your usual account.
Once in Safe Mode, open the SmitfraudFix folder again and double-click smitfraudfix.cmd
Select option #2 - Clean by typing 2 and press "Enter" to delete infected files.

You will be prompted: "Registry cleaning - Do you want to clean the registry?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.

The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".

The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart it into Normal Windows.

A text file ... Read more

1 more replies
Relevance 33.21%

HiMy desktop had a bad virus! Now my laptop has some of the same problems. I was getting security alerts just like on my desktop. I have run some scans like Malware I couldn't even get on internet. Now I can get on internet but my laptop is extremely slow......How can I be sure Iam virus free?? Also when I start my laptop something comes up that says I have an update...How do I know what things I should update? and what I shouldnt?Please help

Answer:Can a virus spread from desktop to lap top?

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you... Read more

27 more replies