Windows explorer won't open

Discussion in 'Malware Help (A Specialist Will Reply)' started by kztd, Mar 1, 2007.

  1. kztd

    kztd Private E-2

    When the computer turns on, windows will not start up. I get an error message saying that it must close. SO I have no desktop, start button, explorer, control panel, etc. Because of this I can't do many of the steps required on this board, because I can't use the add/remove programs, and every time I install a new antivirus program it either won't install properly or it freezes and closes after I open it. So I only have the programs I had before I got this virus: mcafee, bitdefender (the free one), hijackthis, and spyware doctor. I am posting the hijackthis log; is there anything else I could do to provide more info with my limited resources? thanks to any who help me.
     

    Attached Files:

  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Majorgeeks!

    You probably are missing your c:\windows\explorer.exe file (the Windows Shell) or something may be blocking it from running, or it is infected. Check to see if the file exists.

    You need to uninstall Viewpoint Manager.

    Also you appear to have AOL/McAfee Antivirus and Bitdefender Antivirus installed. You must only use one AV so uninstall on of them now!

    Run HijackThis and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;*.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - Default URLSearchHook is missing
    O2 - BHO: svchosts.cMapp_2F47968E9FBE - {D3150260-5753-454D-9923-26CF37C6FECC} - C:\WINDOWS\system32\{D3150260-5753-454D-9923-26CF37C6FECC}.dll
    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
    O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [ruktkhkviewa] C:\WINDOWS\system32\pxipzv.exe
    O4 - HKLM\..\Run: [pxipzv] c:\windows\system32\pxipzv.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKCU\..\Run: [ichckupd] C:\WINDOWS\system32\ichckupd.exe
    O4 - Global Startup: Updates from HP.lnk = C:\Program Files\Updates from HP\137903\Program\BackWeb-137903.exe
    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm (file missing)
    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm (file missing)
    O18 - Filter: text/html - - (no file)
    O20 - AppInit_DLLs: m‘|ðü,Runner.dll

    NOTE: HJT may popup an error about the AppInit_DLLs line. Ignore it and click OK to continue.

    After clicking Fix, exit HJT.
    Boot into safe mode and use Windows Explorer to delete:
    C:\WINDOWS\system32\pxipzv.exe
    C:\WINDOWS\system32\ichckupd.exe
    C:\WINDOWS\system32\Runner.dll
    C:\WINDOWS\system32\{D3150260-5753-454D-9923-26CF37C6FECC}.dll

    Now reboot in normal mode
    Now run Ccleaner
    Now attach a new HJT log and tell me if things are any better
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds