Spyware Attack

Personally, I would take out the hard drive and mount it in an external case, or as a slave drive in another system.

Then, run a full scan of the drive with both anti-virus and anti-spyware programs.

Then, while I had the drive loose, I would make back up copies of the users files as best you can.
Make sure you get the mail and address book files.

After cleaning and backing up the drive, I would mount it back in the system and see if it now boots.

If not, wipe the drive and start over.

Sometimes, it is just not worth the time to try and clean up a system.

Make sure to install an anti-spyware app as part of the rebuild.

Chas

If she has had this problem for more than a week or two, the spyware will have become so entrenched in the system that the only timely solution is to save the needed data to another pc and completely wipe and reload the system.

No icons?? Sounds like the spyware has taken
root.. literally. Be sure the LAN cable is
connected, as the spyware wants to call home, and is what is blocking boot-up.

I had something similar eecnetly though not as bad as this as I had olny lost the Start Bar and I got it the next day. Even then removing all the infections allowed me to save the data but I couldn't restore the Start Bar and I ended up saving all of the data and doing a Wipe and reload to get the system running properly again.

I wasted several hours trying to fix the problem and then I spent less time reloading the entire system with all her Software and I even returned it with the same Desktop picture which was a personal one of hers. Then I got the good news that the other computer in the place was doing exactly the same thing seems that the infection spred over the single Network Cable and took down both machines so instead of being able to go back to bed I had another machine that needed it'[s data saving and wiping and reloading. Of course this small company had lost all the Install Cd's so it made things so much easier to perform the reinstall.

Col

Here's what I'd try: Press windows|R and type cmd.exe; then use command-line interface to save important user files as best as possible to flash drives or other media (if the system will even recognize external devices).

At that point, I'd do a full reinstall and educate the user on how to avoid reinfection. Any "pain" the user may experience in having to restore her preferred settings, etc. could actually be a good thing if it motivates her to be more careful/suspicious/whatever. HTH!

This question was closed by the author