Computer froze, logged back on and things changed

Discussion in 'Software' started by whateveryousay, Aug 11, 2007.

  1. whateveryousay

    whateveryousay Private First Class

    Operating system: Windows XP

    I had a thread in malware section and Chaslang told me to come here.

    When I restarted my computer after it froze, I instantly noticed that my wallpaper and deskstop icons were gone and appearences had reverted back to factory settings. Some programs remained, other programs came up missing. My pictures, music and videos were all missing as well. Eventually after right clicking start and "exploring all users", I found my pictures and videos in a "Blakey" folder. This is the account I have always used. I also noticed there are two other accounts now. "TEMP" and "TEMPBLAKE". I don't know where these came from. When I did a "Cmd" on start and run the line read "C: documents and settings\TEMPBLAKE:>"

    When I log on the account says "Blakey" Though. I can do most of the things I could do on the internet. I can use search engine, play music on winamp, view pictures (when I found them) I just cannot download anything, view youtube videos or anything with active X and some programs won't run. Also, like I said the appearence changed and my files "moved".
     
    Last edited: Aug 11, 2007
  2. Adrynalyne

    Adrynalyne Guest

    Your profile most likely corrupted. Thats why you see what you do...as for fixing it, thats probably not in your cards.

    What you can do is, backup the contents of the Blakey folder, make a new user account, and copy the contents over.
     
  3. whateveryousay

    whateveryousay Private First Class

    how can I make a new user account, copy and transfer the files? Does this delete the old one?
    When I go into control panel and click on user accounts it won't let me in because my computer can't find the run32dll.exe.
     
  4. Adrynalyne

    Adrynalyne Guest

    Give the exact error please.
     
  5. whateveryousay

    whateveryousay Private First Class

    Start, control panel, Click user accounts

    error message: Windows cannot find "rundll32.exe" Make sure you typed the name correctly and then try again To search for file, click start button and then search".

    Searched it. couldn't find it.

    Every forum has been saying that this could be a virus.
     
  6. 1101doc

    1101doc Private E-2

  7. whateveryousay

    whateveryousay Private First Class

    The only problem is when I try to get into user accounts in control panel it wont let me because of this error message

    "Windows cannot find "rundll32.exe" Make sure you typed the name correctly and then try again To search for file, click start button and then search".

    It doesn't work in safe mode either.
     
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Search your PC to see if another copy of rundll32.exe exists. It would be best to just search for rundll32 without the .exe because a compressed version may exist and it would be named rundll32.ex_

    Tell us what you find from the search.

    Also check you Spybot backups. It is quite possible that a Spybot scanned deleted this file due to certain infections that have recently been around. You could then restore the file from the Spybot backup.

    The file belongs in C:\windows\system32


    If you don't find any copies on your PC, you will need your Windows XP CD.
     
  9. 1101doc

    1101doc Private E-2

  10. whateveryousay

    whateveryousay Private First Class

    found it. The only way I found it was by going to advanced options and searching the hidden folders. It is rundll32 with a blank white page icon next to it. It says that it is located in the C:windows/softwaredistribution/download/
    After download there is a large number.

    What do I do now?
     
  11. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Copy it into the c:\windows\system32 folder as mentioned.
     
  12. whateveryousay

    whateveryousay Private First Class

    okay heres what happened. I clicked copy and pasted the file in the windows
    system 32 folder. An option popped up asking if I wanted to use my win xp cd to change the files. I cant find the cd, so I selected no. My computer is running a little slow but User Account worked. I am in user accounts and I see "Blakey" "Guest" and "ASP.Net machine A..."
    Under ASP.Net machine A it says "limited account, password protected".

    What is this? What do I do now?
     
  13. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

  14. whateveryousay

    whateveryousay Private First Class

    Blakey is set for "Computer Administrator"

    Guest is turned off. What should be my next move?
     
  15. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    What problems remain?

    You also better locate your Windows XP CD because you are probably going to need it sooner or later.
     
  16. whateveryousay

    whateveryousay Private First Class

    nm. Okay I made a new account and everything downloads and works right so far.

    Is there anything that you recommend I do besides find the Xp cd? Should I download the get run key and show run key and run those? Should I enable system restore on this profile? Things like this that you would recommend.
     
  17. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Yes you should have System Restore enabled on all accounts.

    You should also cleanup unnecessary files from this harddisk to get more diskspace or you should purchase a larger hard disk.
     
  18. whateveryousay

    whateveryousay Private First Class

    okay. Thanks. As always thanks a ton Chaslang. You are awesome! I hope they pay you for this.
     
  19. ItsWendy

    ItsWendy MajorGeek

    Nope, that make him even better than awesome.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds