Taskbar blinking and can't run Task Manager

Discussion in 'Malware Help (A Specialist Will Reply)' started by jaso smaso, Aug 5, 2008.

  1. jaso smaso

    jaso smaso Private E-2

    Hello there. I have some really bad virus or something on my machine. Weird things started happening about a week ago. I believe it was when the cute daughter of my neighbor wanted to use my computer for a bit to use the internet because her mom, whom she was visiting, doesn't have internet.

    What is happening is as soon as I boot up Windows, the taskbar goes away and then comes back up, in an endless loop. The icons on the desktop do the same. For me to open anything, I have to quickly double-click the icon when it comes up before it goes away again. A side effect of this is that my foreground window will lose focus whenever the taskbar comes back up, so I have to pause my typing until it come back into focus. The Task Manager also seems to be disabled, but it doesn't tell me that it has been disabled by the Administrator or anything. It just doesn't come up. It also keeps telling me that I have file waiting to be written to a CD, but I never put any there.

    I already had Symantec AntiVirus, SUPERAntiSpyware, Malwarebytes' Anti-Malware, and CCleaner before coming here. I have updated definitions on SAV and I have it set to run a full system scan every Monday at midnight. It rarely finds anything.

    I compared everything in my Add/Remove Programs list, but nothing I had was on the bad list. I have the latest version of Java, and only that version. Msconfig is in normal boot. There are no items in quarantine. My CCleaner was set to have all the checkboxes checked and I didn't remember what the default settings were, so I just scanned with the settings it had. I think I have it set to view hidden and system files, but I can't get to that window because any Windows Explorer windows manage to open are closed when the taskbar goes away.

    Windows XP Cleaning Procedure

    I downloaded SpyBot - Search & Destroy, combofix.exe to my desktop, and MGtools.exe to C:\.

    I set SUPERAntiSpyware like it said, updated it, and ran the scan. The log is attached.

    I was unable to install Spybot - Search & Destroy because it gave me "Access Denied" errors when it got to the HKEY\LOCAL MACHINE... parts. I'm sorry, I didn't write the errors down. This user account has administrative rights, however, and I've always been able to install things before.

    I tried to update Malwarebytes' Anti-Malware, but there was apparently a new version that it tried to download and install and when it did, it gave me the same error messages as Spybot. My version was updated shortly before this happened, however, so I have the 2nd newest version. I ran a scan with that and the log is attached.

    I downloaded the Windows XP Recovery Console from Microsoft and dragged it onto ComboFix.exe during the time when the icons were visible. It brought up a tiny progress bar that said COMBOFIX on it. When that was done, 2 little minimized windows popped up in the lower left corner of the screen, but they were only visible when the taskbar wasn't there. They said C:\WIND... in the titlebars. They were flickering or blinking like they were rapidly opening and closing or something. Then there were 3 of them. It slowed my computer down dramatically. I left it that way for a while, thinking it was part of the process, but the tutorial for running ComboFix didn't say anything like that, so I ended up logging off and logging back on to close them because clicking on them or even holding ALT+F4 didn't do anything to them. I regretably don't have a log to attach from that.

    I doubled-clicked on MGtools.exe, but all it did was bring up the same 2 flickering windows. No .log or .txt file for this one anywhere to be found either.

    I now leave my poor, miserable computer in your capable hands. Thank you for your help.
     
  2. jaso smaso

    jaso smaso Private E-2

    Crap, I forgot to attach my logs in the first post.
     

    Attached Files:

  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    The two logs you have attached show no malware problems at all. It may be that your issues are not malware.

    Please boot into safe mode and open a command prompt window by click Start, Run, and enter cmd and click OK. At the command prompt type the below command

    C:\MGtools.exe


    Tell me what happens. If it appears to run, look for the C:\MGlogs.zip file and attach it.
     
  4. jaso smaso

    jaso smaso Private E-2

    Alright, I was able to get into Safe Mode and then it showed the message telling me I'm in Safe Mode and asked me Yes or No. I clicked Yes, then before I could click Start the taskbar and icons disappeared like in Normal Mode. It then brought up the dialog box asking me Yes or No again. I clicked Yes and the taskbar and icons came back, then went away again. It keeps doing that. I tried clicking on Start right as soon as it came up, but it would go away before the start menu would even open.
     
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Ignore the dialog box if possible and press CTRL-SHIFT-ESC and see if you can bring up Task Manager. If so, click File, New Task (Run...) and enter cmd and click OK to try and bring up a command prompt to do what I previously asked with MGtools.

    Any luck?
     
  6. jaso smaso

    jaso smaso Private E-2

    In Safe Mode?

    I just pressed CTRL-SHIFT-ESC in Normal Boot and it brought up a box saying "ERROR: Virus Infection Found!" There is only an OK button. The titlebar says "Message from (my username) 8/6/2008 4:12 PM. If I click OK, there's another one behind it. No matter how many times I click it, there's another one behind it. There were a bunch of minimized windows where the taskbar used to be, but they are gone now. The taskbar is still going away and coming back, but it seems to be doing it at a much slower pace.

    I'll try doing it in Safe Mode.
     
  7. jaso smaso

    jaso smaso Private E-2

    One more thing to add. When I closed my browser to reboot to Safe Mode, I saw a bunch of minimized windows behind where my browser window was. They were all stacked on each other, 6 high from left to right of my screen. The titlebars said "=^-_-^=" in them and some were disappearing and others taking their places. I'll try Safe Mode now.
     
  8. jaso smaso

    jaso smaso Private E-2

    Alright, I went into Safe Mode, ignored the dialog box and pressed CTRL-SHIFT-ESC. The same minimized windows with the =^-_-^= on them came up, only this time they filled up all of my screen behind the Yes or No box. No virus infection windows came up, though. It didn't do anything after that.
     
  9. jaso smaso

    jaso smaso Private E-2

    New update. I was able to installed Spybot - Search & Destroy and run a scan, but it didn't find anything. I was also able to update Malwarebytes, but the new scan didn't find anything, either.
     
  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    In message # 1 you implied that you are able to run MSconfig. See if you can run it now and then click the Lauch System Restore button. Use it to restore your PC to a point in time before these problems began. Let me know if you are able to do this.
     
  11. jaso smaso

    jaso smaso Private E-2

    Sorry for the delay. The only way I could get msconfig up was by downloading a copy of it and opening it from a browser "open" window. I clicked it and it did the exact same thing as when I did CTRL-SHIFT-ESC.

    Now, each time my taskbar comes back up, I get an error message on the screen. The titlebar says "C:\WINDOWS\system32\DontDelete.exe" and the message says "Windows cannot find 'C:\WINDOWS\system32\DontDelete.exe'. Make sure you typed the name correctly, and then try again. To search for a file, click the Start button, and then click Search." It goes away with the taskbar each time also.
     
  12. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Comes up from what? After reboot? What are you referring to?

    So are you saying that you never were able to get MSconfig to run? Not even the copy that you downloaded?

    Have you tried using a different user account?
    Have you tried using the user account named Administrator that only appears in safe boot mode?

    Do you have your Windows XP boot CD?
     
    Last edited: Aug 8, 2008
  13. jaso smaso

    jaso smaso Private E-2

    "Comes back up" meaning my taskbar goes away right when Windows starts, then comes back up about a second later, then goes away about a second later, then comes back up about a second later, etc. Each time it comes back up, that error message comes up with it, then goes away with it as well.

    I was able to run msconfig fine, but when I click the Launch System Restore button, it causes the minimized windows to fill up my screen and the virus alerts to come up.

    I use the Administrator account each time I've gone into Safe Mode. Same symptoms.

    I do have my Windows XP CD. Am I going to have to resort to reinstalling Windows?
     
  14. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Quite possibly if we cannot get anything to run in order to fix problems.


    Please try click this MGtools.exe but do not select Save! Select Open which will attempt to run it automatically after it downloads it to your browser temp folder. This is not how we normally want to run it but it may or may not work. This is not a removal tool. It will run a bunch of scans (that is if it runs) and will build a log named C:\MGlogs.zip which I want you to attach here if it runs.

    Have you tried to get a command prompt window open? If you enter C:\Windows\system32\cmd.exe into your browsers address bar and hit enter or click Go, it will try to open a command prompt window. Try this and let me know the result.

    Also another thing to try is to use MSconfig again but this time do not use Launch System Restore. Instead select the Diagnostic Startup button and then click Apply and OK. And then reboot. You will not have internet access like this since very little will run after reboot. I just trying to see if we can stop any malware from loading this way too. See if you can do this. You will have to run MSconfig and go back to Normal Startup inorder to reuse the PC to come back here but I want to know if while in Diagnostic Startup, you have no malware popups.
     
    Last edited: Aug 10, 2008
  15. jaso smaso

    jaso smaso Private E-2

    Sorry for the delay.

    Okay, so I ran MGtools.exe right from the download prompt instead of saving it. It brought up those same minimized windows and I had to reboot.

    I can use the "open" window in my browser to navigate to c:\windows\system32, but the file types are set to only view HTML files. If I set it to view all files, then the browser closes. If I type cmd.exe and press enter, it asks me to save it, so I click run and that brings up the little windows and virus alerts also.

    I'll try that Diagnostic startup thing right now.
     
  16. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You have to enter C:\Windows\system32\cmd.exe into the browser address bar not just cmd.exe Also I did not want you to use the Open menu option.

    It probably will not work anyway due to your problems.

    If you look in the C:\ folder, do you see a MGlogs.zip file?
     
  17. jaso smaso

    jaso smaso Private E-2

    I'm sorry.

    I went and entered c:\windows\system32\cmd.exe into it the address bar and ran that and it did the same thing after I clicked "run". :(

    Nope. There's nothing starting with M and there are no zip files.

    Also, I went into Diagnostic startup and my windows looked different, like Windows 98 or 2000 instead of XP, and I couldn't get on the internet like you said, but other than that, all the problems still happened the same.
     
  18. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Do you have all of your important files backed up? If not see if you can get what you need as you are more than likely going to need to reinstall. And even if we can find a way around a reinstall (possibly a repair/rebuild which is really a topic for the Software Forum) , it would still be best if you could backup anything you may need first.

    You did say you had your Windows CD ....right?
     
  19. jaso smaso

    jaso smaso Private E-2

    Yes I do. Windows XP SP2.
     
  20. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay what I want you to take a look at is the below procedure to see if you can handle doing this:

    http://support.microsoft.com/default.aspx?scid=kb;en-us;307545&sd=tech

    We are not doing this because you cannot startup/boot! We are going to do it to try and get your system back to a restore point (if possible) that is before the time when the problem began. You will see this in part 2 of the above procedure. Read thru this and see if you can follow those instructions. Obviously restore points need to exist and you need to make sure you choose one that is before this problem began.
     
    Last edited: Aug 12, 2008

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds