No desktop icons, taskbar, start button. just the background.

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by pridge, Mar 20, 2006.

  1. pridge

    pridge Private E-2

    I don't know what happened. My niece got done using the computer and shut it down, i came back about 20mins later boot it up and come to just the background nothing else. I asked her what did she do ( she's 8 ) and said she doesn't know. Well, its now 2 weeks later ive been looking up everything i can find about it came to http://forums.majorgeeks.com/showthread.php?t=70002&highlight=explorer.exe.
    That person seemed to have same exact problem as me. I tryed the same instructions and it didn't fix my computer /sigh. Ive tryed sfc /scannow, different checking and unchecking in msconfig then restarting each time, scanning for viruses,trojans,malware, etc. all i got was surfsidekick which i had before this problem occurred. I also found some viruses in the scan on norton but it couldn't be deleted or quarantined this may be problem. I had same problem where the files i was asked to delete in registry weren't there. Just trying to get this over with thx. im using Windows XP Home on a Dell.
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Majorgeeks!

    I want to make sure I'm perfectly clear on what you have done. Are you saying you did every single step in the thread your referennced? You looked at all the registry locations and your tried disabling all items using msconfig, and you tried booting in safe mode etc? All the exact same things have been done but nothing helped and nothing looks wrong?

    Does c:\windows\explore.exe exist?
    What is the file size and date?
    What SP revision of XP home do you have?
    Do you have an i386 folder anywhere on your hard disk (like c:\i386 or C:\windows\i386 or anywhere else)?
    Do you have a bootable XP Home CD or did Dell screw you like everyone else and only give you a recovery CD?
     
  3. pridge

    pridge Private E-2

    yes c:\windows\explore.exe does exist and when i click on it my start menu flashes on for a sec then leaves. Like it starts then something shuts it off i see it come up on processes then it leaves.

    Size: 1,032,192 bytes
    Date:
    Created -Thursday, August 29, 2002, 5:00:00 AM
    Modified - Wednesday, August 04, 2004, 1:56:49 AM
    Accessed - Today, March 20, 2006, 10:03:32 PM
    Version of SP: SP2...I also went to microsoft.com to be sure did a update search and nothing found.
    i386 Folder: yes, i have one in c:\i386


    Yes, i only have a recovery cd. Recovery is not an option though i have some important files on this pc. Also i had no restore points ~i know i know ~ but didn't think something like this would happen.
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    In the c:\i386 folder do you have explorer.exe or explorer.ex_
     
  5. pridge

    pridge Private E-2

    Hmm, theres no explorer in C:\i386

    in above post i meant that i do have a i386 folder, but explorer is only in the windows folder.
     
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Are you sure? Normally there is one the end with an underscore instead of the last 'e'
    Like explorer.ex_

    This means it is a compressed form of the file. There is nothing like this at all?

    Try using Windows Search to see if there is another copy. Just search for explorer.*
    Yes the asterisk is what you want!

    If you boot in safe mode and try to run explorer.exe, what happens?
     
  7. pridge

    pridge Private E-2

    Yes im sure. How do i run a search from task manager? When i boot in safemode the same happens when i run explorer.exe it flashes on screen then leaves again.
     
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Sorry! That was a dumb idea! I'm just preoccupied with some multiple threads and some stuff at home right now. Search is integrated into explorer so it will not work if explorer does not run.

    Can you download files and install them? Does IE work?
    Can you open a command prompt window too?
     
  9. pridge

    pridge Private E-2

    yes i can install programs and download them. IE is uninstalled i use mozilla but will reinstall from website unless theres a command from run to get to add/remove windows programs. Yes i have access to commant prompt.
     
  10. pridge

    pridge Private E-2

    downloading IE now. Internet Explorer 7 Beta 2 Preview - released on March 20th - will not be available from Microsoft. Limited peer-to-peer support is available. guess ill check this out
     
  11. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    IE cannot be uninstalled. It is an integral part of the OS. You can choose not to run it but truly uninstalling it is not possible or desired. And without IE you cannot get your Microsoft software updates.

    Try to run the steps in the below link and attach the requested log to your next message:

    Using GetRunKey

    You will need to unzip the getrunkey.bat and grep.exe files to an easy place for you to access from the command prompt. C:\ would be the easiest. The you need to open a command prompt and change directories to c:\ ( cd c:\ ) and then enter the getrunkey.bat command.
     
  12. pridge

    pridge Private E-2

    k done.
     

    Attached Files:

  13. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I see a couple things in that log but I'm not sure either of them is causing explorer.exe not to load.

    Run appwiz.cpl from Task Manager. This should bring up Add/Remove programs. See if you find anything like System Soap Pro in there. If so, uninstall it.

    Let me know if that works.

    Also run regedit.exe from Task Manager. Does the Registry Editor open?
     
  14. pridge

    pridge Private E-2

    no System Soap Pro and yes regeditor opens
     
  15. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay!

    See if you can do the below.

    Copy the bold text below to notepad. Save it as fixme.reg to your C:\ root folder. Be sure the "Save as" type is set to "all files"
    Now with the Registy Editor open click File, Import and locate the c:\fixme.reg file and select it and allow it add to the registry.

    Then see if you can run the steps below:

    • Now download smitRem.exe written by noahdfear and save the file to your Desktop.
    • Double click on the smitRem.exe file to extract it to it's own folder on the desktop. (this should be the default selection)
    • Now you will need to print or save these instructions locally (to a text file on you Desktop) for later reference. This is necessary because you must not have any browers open and must not connect to the internet while following the below steps.
    • After saving the instructions, reboot into Safe mode
    • Once you have booted in Safe Mode and your Desktop appears, make sure you close any other windows and only run what is specified. You can open notepad to view the instructions you saved but do not open anything else accept what is specified.
    • Now open the smitRem folder, then double click the RunThis.bat file to start the tool. Follow the prompts on screen. Wait for the tool to complete and disk cleanup to finish.
    • The tool will create a log named smitfiles.txt in the root of the drive that you ran the batch file on, eg; Local Disk C: or partition where your operating system is installed.
    • Reboot in normal mode and attach the smitfiles.txt log here.
    Also run GetRunKeys.Bat again and attach a new runkeys.txt log.
     
  16. pridge

    pridge Private E-2

    Im on someone elses computer right now. I did the steps you asked me to do, up to when you asked me to reboot from safe mode back to normal mode. When i rebooted insafe mode i got a message saying "NTLDR is missing CTR-ALT-DEL to restart" and when i hit CTR-ALT-DEL it restarts and same message appears. I know you were only trying to help and im not mad just what do i do now? Anyway tog et the missing file? I just looked around and can't find the recovery cds so thats a no go also. Hope there is more i can do.
     
  17. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member


MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds