Question

Locked

Desktop Problem!

By syed2pak ·
Hi guys
having weird problem in one of my office laptop, guy having a laptop running 2 antivirus, one expired and the other one NAV was running fine.
I just uninstalled the other one that was expired and restarted the laptop, when it comes to the desktop after rebooting , I can see only the wallpaper and no icons , nothing.

so now I use ctrl+alt+del to logoff from there and then login again and then everything looks fine.

sure one of you guys can tell me where to look around.

Cheers

This conversation is currently closed to new comments.

12 total posts (Page 1 of 2)   01 | 02   Next
| Thread display: Collapse - | Expand +

All Answers

Collapse -

See if this helps

by Jacky Howe In reply to Desktop Problem!

Presst ctrl+alt+del and end explorer.exe and then go to file, start process, and start explorer.exe and then your desktop should show up

Click Start, Run and type regedt32 and press Enter.

Navigate to: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\winlogon\

You will have to set the Shell variable in the right hand pane by right clicking and select Modify. It should = Explorer.exe

Collapse -

If the above doesn't help

by Jacky Howe In reply to See if this helps

try this.

http://techrepublic.com.com/5208-6230-0.html?forumID=101&threadID=283728&messageID=2683528

Collapse -

still having the same problem

by syed2pak In reply to If the above doesn't help

after trying both of the tweaks you provided but got no luck.

explorer.exe not found when I restart laptop and got no icons ,nothing. run a new task by ctrl+alt+del and type explorer.exe, desktop would come up and then I tried to make regedit as you mentioned but there is nothing missing or no error as I followeded your regedit.

am I missing sommething else??

Cheers

Collapse -

have you check the running processes?

by vashz In reply to still having the same pro ...

run task manager and sort the running processes by user, is there a running explorer.exe under your current user account or none?if none try to run explorer.exe again and the desktop should open. If there are more than one explorer.exe running, kill those first before running a new explorer.exe, after doing these without effect try to search explorer.exe on your system drive and make sure you're able to see it.. post update after doing the procedure..

Collapse -

already checked

by syed2pak In reply to have you check the runnin ...

all the running processes and did not found explorer.exe file.

?

Collapse -

Did you follow the instructions in

by Jacky Howe In reply to still having the same pro ...

all of the posts in that link. If you did try running sfc /scannow and have your XP CD ready.

If that fails try this.

Follow the steps below with the System started and restarted in Safe Mode with Networking. Running in Safe Mode loads a minimal set of drivers for the Operating System. You can use these options to start Windows so that you can modify the registry or load or remove drivers.

Removing malware from System Restore points
To remove the malware, you must first disable System Restore, then scan the system with up-to-date antivirus software - allowing it to clean, delete, or quarantine any viruses found. After the system has been disinfected, you may then re-enable System Restore. The steps for disabling System Restore vary, depending on whether the default Start Menu or the Classic Start Menu is being used.

Default Start Menu XP
If using the default Start Menu, click Start | Control Panel | Performance and Maintenance | System. Select the System Restore tab and check "Turn off System Restore".

Classic Start Menu XP
If using the Classic Start Menu, click Start | Settings | Control Panel and double-click the System icon. Select the System Restore tab and check "Turn off System Restore".

Vista
Start, right mouse click Computer and select Properties. Select Advanced System Properties, click contine and then System Protection. Untick the box nect to Local Disk C: and click on Turn System Restore off.


After scanning the system and removing the offending malware, re-enable System Restore by repeating the steps, this time removing the check from "Turn off System Restore".

Click Start, Run type msconfig and press Enter.

Now if you have the Configuration Utility open.
Configure selective startup options
In the System Configuration Utility dialog box, click the General tab, and then click Selective Startup.
Click to clear the Process SYSTEM.INI File check box.
Click to clear the Process WIN.INI File check box.
Click to clear the Load Startup Items check box. Verify that Load System Services and Use Original BOOT.INI are checked.
Click the Services tab.
Click to select the Hide All Microsoft Services check box.
Click Disable All, and then click OK.
When you are prompted, save the settings and restart the PC.
When the System is disinfected re-run the Configuration Utility and in the System Configuration Utility dialog box, click the General tab, and then click Normal Startup.

Download Malwarebytes Anti-Malware, install it and update it.

<a href="http://download.bleepingcomputer.com/malwarebytes/mbam-setup.exe" target="_blank"><u>Malwarebytes</u></a>

* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform Quick Scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.

If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.
<a href="http://malwarebytes.gt500.org/mbam-rules.exe" target="_blank"><u>mbam-rules</u></a>

I would keep scanning with it until it is clean by closing out and rebooting and running it again.


From another PC download and install Spybot, update it and copy the the installed folders to a USB Stick.

Restart the PC in Safe Mode, navigate to the USB stick and run Spybot.

Download Spybot - Search & Destroy and install it. Update it. http://www.safer-networking.org/en/download/index.html

With the new strains of Virus that have been created you may find it necessary to rename the executable files so that they will work. Rename mbam-setup.exe and then navigate to the install folder and rename mbam.exe. Do not change the files extension from .exe. Do the same with Spybot.

Also run this Rootkit Revealer GMer
<a href="http://www.gmer.net/index.php" target="_blank"><u>Gmer</u></a>

FAQ
<a href="http://www.gmer.net/faq.php" target="_blank"><u>FAQ</u></a>

BleepingComputer
<a href="http://www.bleepingcomputer.com/malware-removal/" target="_blank"><u>bleepingcomputer</u></a>

How to check the Host file

Step 1: Click the Start button and select Run. Now type the following text in that Run box and press Enter:

notepad c:\WINDOWS\system32\drivers\etc\hosts

Step 2: You will see a new notepad window on your screen containing some information. You should have a single entry of 127.0.0.1 localhost. If there are any other entries in there it means that those sites are being blocked and it is probably due to an infection. Unless you made the extra entries delete them all but 127.0.0.1 localhost.

If it is the DNS changer fixwareout will remove this.

<a href="http://download.bleepingcomputer.com/lonny/Fixwareout.exe" target="_blank"><u>Fixwareout</u></a>

The DNSChanger trojan is usually a small file (about 1.5 kilobytes) that is designed to change the 'NameServer' Registry key value to a custom IP address. This IP address is usually encrypted in the body of a trojan. As a result of this change a victim's computer will contact the newly assigned DNS server to resolve names of different webservers. And some of the resolved names will not point to legitimate websites - they will point to fake websites that look like real ones, but are created to steal sensitive information (like credit card numbers, logins and passwords).

VARIANT: Trojan.Win32.DNSChanger.al

Update your Antivirus software.


If TaskManager has been disabled this will enable TaskManager to allow access to the Registry.

Command line removal
Click Start Run and type cmd and then press Enter.

Execute the following commands in the command line in order to activate the registry editor and Task Manager: answer ?y? and press Enter.

reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr

reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools

Just to be on the safe side when you finish do an online scan with Bitdefender. Or Google for an online scanner.

<a href="http://www.bitdefender.com/scan8/ie.html" target="_blank"><u>bitdefender</u></a>

<i>Keep us informed as to your progress if you require further assistance.
</i>

Collapse -

hi

by syed2pak In reply to Did you follow the instru ...

thanks mate for the detailed info you provide.
I'll check all of that. and will reply when I'll be done.
Cheers

Collapse -

Solved

by syed2pak In reply to Did you follow the instru ...

hey guys,
Thanks for everyone who respond to my query.
Jacky,before attempting anything from your long long reply, I ran a CCleaner and bingo...its all fixed.

Ccleaner fixed all the registry problems and now its all set.

Thanks once again. and Jacky I've saved your reply and will apply it on any other machine that ask for something more

Cheers

Collapse -

That's great

by Jacky Howe In reply to Solved

Ccleaner has another use.

Collapse -

yes but

by syed2pak In reply to That's great

ccleaner has done it fairly with registry cleaning.

Back to Software Forum
12 total posts (Page 1 of 2)   01 | 02   Next

Related Discussions

Related Forums