Windows Forum

Ask something
Question Locked

Missing Control Panel, Run and Search on Start Button

0 helpful
16 replies

by azudean

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Dear anyone expert.....

i got some problem here, that i also don know how to describe, some of my user pc lost this 3 thing(ctrl panel, run & search), is somebody there know y and what should i do on that? fyi, all my user using XP Pro,Please gv me some idea to solve it instead of system restore way, tq

16 replies

by seanferd

select Properties > Customize

Mark the check boxes for the appropriate items.

by azudean

hi seanferd......

thanks for the advice, i try already but that pc cannot allow u to do right click on start button, is there any way?? what i understand from my fren, he said that pc infected by trojan, is there any way also to remove that trojan using remover or antivirus .it like start spread to other pc, scare that will infect server to, advice pls...

by seanferd

Try the free version of MBAM
http://www.malwarebytes.org/mbam.php

GMER & catchme from this page
http://www.gmer.net/files.php

One or both of the online scanners from this page (there are others out there as well)
http://www.gmer.net/antivirus.php

Rootkit Revealer
http://technet.microsoft.com/en-us/sysinternals/bb897445.aspx

One or more of these should at least identify the problem, if not remove it. Please post the names of the suspicious files or confirmed malware, and we can go from there if the malware isn't entirely removed.

Note: Any flash drives you might use are probably infected as well, if they have been used in your computer since the time of infection. Do not connect them to any other computer.

Do you have a CD drive? Can someone with a clean system download and burn files to CD for you if necessary? Can you re-install Windows if necessary?

by rob miners

any domain policies as it sounds like restrictions have been put in place.

by azudean

hi jacky,

got few pc infected already, but more scary on server site, any advice to protect server rather than have antivirus?

by rob miners

that are infected. Have you got a name for it yet through your scans. Have you ran HiJackThis yet. If you have post the log file. It could be prnjobt.vbe VBS/AutoRun-IT is a script worm that spreads via removable drives. Don't use your USB sticks or drives as we will come to that later. Concentrate on the workstations first.

http://www.sophos.com/security/analyses/viruses-and-spyware/vbsautorunit.html

From another PC download and install these two programs and copy the the installed folders to a clean USB Stick or burn them to a rewriteable CD.

Restart the PC in Safe Mode and turn off System Restore, then run Sophos and then run Spybot.

Download Spybot - Search & Destroy and install it. Update it. http://www.safer-networking.org/en/download/index.html

Download Sophos and the latest IDE Files. Install it and extract the IDE files to the C:\SAV32CLI folder.

http://www.sophos.com/support/knowledgebase/article/13251.html

Copy and paste the below two lines into Notepad and save the file to the USB Stick as sophos.bat, it will scan and remove. When the Scan has finished check the log file to see what it hasn't removed.

===============================

CD SAV32CLI

SAV32CLI -REMOVE -P=C:\REMOVLOG.TXT

===============================

The Sophos SAV32CLI folder can be safely deleted after it is copied to USB.

Keep us informed as to your progress.

by azudean

hi sean.......

thanks for the advice, i will try to do based on ur advice.fyi, all infected pc i already install with Bit Defender AV and Spy ware Terminator with Clam AV....

by azudean

fyi, i already scan using BitDefender & Spyware Terminater wt ClamAV, some of that detect and can delete but some of that cannot....

by seanferd

and feel like mucking about manually deleting the files that weren't removed, I'd suggest a full reformat/repartition and reinstall.

If you installed the AV after infection, it is a lot tougher. Once your system is clean, install a good AV, use a good hardware firewall, and keep up to date with security patches.

Don't be connected to the internet or other infected systems until the system is secure.

by azudean

hi jacky......

Sorry for the late respond from me, still holiday for Chinese New Year Eve in Malaysia beside my co continue holiday until Thursday. But before holiday, i try once workstation with ur way, yes can detect that worm but not deleted. Just want to confirm with u, do i need to disconnect that workstation from network before i run that AV or u miss 1 step to inform me. Thanks....

by rob miners

and run those two programs. Reconnect one System at a time and try this in Safe Mode with Networking.

Download Malwarebytes Anti-Malware, install it and update it.

Click this linkmalwarebytes

* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform Quick Scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.

I would keep scanning with it until it is clean by closing out and rebooting and running it again.

Just to be on the safe side when you finish do an online scan with Bitdefender. Or Google for an online scanner.

Click this link bitdefender

by azudean

hi jacky.....

thanks for the 2nd method, it's working and all the button missing button appear back after finish scan wt malwarebytes and bitdefender online scan, that button also still there after restart but after a 10 to 20min that button missing again. it's like that worm already build their home inside bios or where ever they want. is there any suggest from u again, thanks

by rob miners

with MalwareBytes. Did you turn off System restore. What happend to the HijakThis log. It would be good to know what we are up against.

by rob miners

I don't know whether or not you are familiar with HijackThis but here are two versions that I use and a tutorial. It makes it a lot easier to work out what the infection is and then you have a starting point to work out your removal strategy.

http://aumha.org/downloads/hijackthis.exe

Official Hijack This Tutorial: http://forums.majorgeeks.com/showthread.php?t=38752

DDS (Version 1.0) DDS truncated HijackThis ..

http://www.techsupportforum.com/sectools/sUBs/dds

This discussion is closed to new replies.