explorer.exe application error [RESOLVED], no taskbar or icons |
![]() ![]() |
explorer.exe application error [RESOLVED], no taskbar or icons |
Aug 20 2005, 10:44 AM
Post
#1
|
|
|
Member ![]() ![]() Posts: 39 OS: Windows XP Pro |
Logfile of HijackThis v1.99.1 Scan saved at 12:43:15 PM, on 8/20/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\spoolsv.exe D:\WINDOWS\Microsoft.NET\Framework\v2.0.40607\aspnet_admin.exe D:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe D:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe D:\WINDOWS\System32\nvsvc32.exe D:\Program Files\AIM\aim.exe D:\Program Files\Internet Explorer\iexplore.exe D:\WINDOWS\explorer.exe D:\WINDOWS\system32\taskmgr.exe C:\Saved Files\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://D:\WINDOWS\system32\msxgv.dll/sp.html#10001 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://D:\WINDOWS\system32\msxgv.dll/sp.html#10001 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://D:\WINDOWS\system32\msxgv.dll/sp.html#10001 R3 - Default URLSearchHook is missing O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [iTunesHelper] D:\Program Files\iTunes\iTunesHelper.exe O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [NeroFilterCheck] D:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [AVG7_CC] D:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP O4 - HKLM\..\Run: [AVG7_EMC] D:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe O4 - HKLM\..\Run: [intell32.exe] D:\WINDOWS\system32\intell32.exe O4 - HKLM\..\Run: [PSGuard] D:\Program Files\PSGuard\PSGuard.exe O4 - HKLM\..\RunOnce: [SpybotSnD] "D:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck O4 - HKCU\..\Run: [MSMSGS] "D:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [AIM] D:\Program Files\AIM\aim.exe -cnetwait.odl O4 - Global Startup: Adobe Reader Speed Launch.lnk = D:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: InterVideo WinCinema Manager.lnk = D:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe O4 - Global Startup: Microsoft Office.lnk = D:\Program Files\Microsoft Office\Office\OSA9.EXE O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - D:\Program Files\AIM\aim.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/downloads/kws/kav...can_unicode.cab O16 - DPF: {4208FB4D-4E53-4F5A-BF7A-3E047DDB5281} (ActiveX Control) - http://www.icannnews.com/app/ST/ActiveX.ocx O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1119768691046 O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061...all/xscan53.cab O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - D:\Program Files\iPod\bin\iPodService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\System32\nvsvc32.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe (file missing) |
|
|
Aug 20 2005, 05:08 PM
Post
#2
|
|
|
Member 5k Posts: 6,363 OS: Windows XP |
You have a couple of nasty infections on your PC. We will have to handle it in different steps.
Please read this post completely, it may make it easier for you if you copy and paste this post to a new text document or print it for reference later. This will likely be a few step process in removing the malware that has infected your system. I encourage you to stick with it and follow my directions as closely as possible so as to avoid complicating the problem further. You have a nasty CoolWebSearch infection. First we will need to download a few tools that will help us in the removal of your problem. Download about:buster by RubbeRDuckY Here. Download CWShredder Here. Download SpSeHjfix Here. Download and install CleanUp! Here Save all of these files somewhere you will remember like to the Desktop. Unzip SpSeHjfix to its own folder (ie c:\SpSeHjfix) Run the CleanUp! installer. You dont need to do anything with it right now. Update About:Buster
Update CWShredder
Boot into Safe Mode: Restart your computer and as soon as it starts booting up again continuously tap F8. A menu should come up where you will be given the option to enter Safe Mode. Please run about:buster by RubbeRDuckY:
Run about:buster again following the same instructions as above, this time without the restart at the end Now run CWShredder. Click I Agree, then Fix and then Next, let it fix everything it asks about. Now run SpSeHjfix. A log will be saved in the same folder that you put the exe into. Please post the results of that log in your next reply. Now run CleanUp!. Click CleanUp and allow it to delete all the temporary files.Reboot your computer into normal windows. After all that, please post back with how things went as well as the logs requested and a new HiJackThis log. |
|
|
Aug 21 2005, 01:30 AM
Post
#3
|
|
|
Member ![]() ![]() Posts: 39 OS: Windows XP Pro |
ok, i was unable to update CWShredder while in normal windows because i can't access much without the start bar. and when i did get to it through task manager it wouldn't let me run it, so i had to do that after i booted into safe mode. after booting into safe mode i did what you told me to do. here are the results from the SpSeHjfix log followed by a new hijackThis log. i still don't have access to the start bar or any desktop icons. and i still get an explorer.exe error on startup. thank you.
(8/21/05 2:53:22 AM) SPSeHjFix started v1.1.2 (8/21/05 2:53:22 AM) OS: WinXP Service Pack 2 (5.1.2600) (8/21/05 2:53:22 AM) Language: english (8/21/05 2:53:22 AM) Win-Path: D:\WINDOWS (8/21/05 2:53:22 AM) System-Path: D:\WINDOWS\system32 (8/21/05 2:53:22 AM) Temp-Path: D:\DOCUME~1\Chris\LOCALS~1\Temp\ (8/21/05 2:53:25 AM) Disinfection started (8/21/05 2:53:25 AM) Bad-Dll(IEP): (not found) (8/21/05 2:53:25 AM) Bad-Dll(IEP) in BHO: (not found) (8/21/05 2:53:25 AM) UBF: 7 - UBB: 0 - UBR: 14 (8/21/05 2:53:25 AM) UBF: 7 - UBB: 0 - UBR: 14 (8/21/05 2:53:25 AM) Bad IE-pages: deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Start Page: deleted: HKCU\Software\Microsoft\Internet Explorer\Search, SearchAssistant: deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Bar: deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Page: about:blank deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Start Page: deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Page_URL: about:blank deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Search_URL: about:blank (8/21/05 2:53:25 AM) Stealth-String not found (8/21/05 2:53:25 AM) Not infected->END (8/21/05 2:54:08 AM) SPSeHjFix started v1.1.2 (8/21/05 2:54:08 AM) OS: WinXP Service Pack 2 (5.1.2600) (8/21/05 2:54:08 AM) Language: english (8/21/05 2:54:08 AM) Win-Path: D:\WINDOWS (8/21/05 2:54:08 AM) System-Path: D:\WINDOWS\system32 (8/21/05 2:54:08 AM) Temp-Path: D:\DOCUME~1\Chris\LOCALS~1\Temp\ ------------------------------------------------------------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 3:28:53 AM, on 8/21/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe D:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe D:\WINDOWS\system32\spoolsv.exe D:\Program Files\AIM\aim.exe D:\Program Files\Internet Explorer\iexplore.exe D:\WINDOWS\system32\taskmgr.exe C:\Saved Files\hijackthis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R3 - Default URLSearchHook is missing O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [iTunesHelper] D:\Program Files\iTunes\iTunesHelper.exe O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [NeroFilterCheck] D:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [AVG7_CC] D:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP O4 - HKLM\..\Run: [AVG7_EMC] D:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe O4 - HKLM\..\Run: [intell32.exe] D:\WINDOWS\system32\intell32.exe O4 - HKLM\..\Run: [PSGuard] D:\Program Files\PSGuard\PSGuard.exe O4 - HKLM\..\RunOnce: [SpybotSnD] "D:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck O4 - HKCU\..\Run: [MSMSGS] "D:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [AIM] D:\Program Files\AIM\aim.exe -cnetwait.odl O4 - Global Startup: Adobe Reader Speed Launch.lnk = D:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: InterVideo WinCinema Manager.lnk = D:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe O4 - Global Startup: Microsoft Office.lnk = D:\Program Files\Microsoft Office\Office\OSA9.EXE O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - D:\Program Files\AIM\aim.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/downloads/kws/kav...can_unicode.cab O16 - DPF: {4208FB4D-4E53-4F5A-BF7A-3E047DDB5281} (ActiveX Control) - http://www.icannnews.com/app/ST/ActiveX.ocx O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1119768691046 O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061...all/xscan53.cab O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - D:\Program Files\iPod\bin\iPodService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\System32\nvsvc32.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe (file missing) This post has been edited by powermonkey3000: Aug 21 2005, 01:32 AM |
|
|
Aug 21 2005, 07:36 AM
Post
#4
|
|
|
Member 5k Posts: 6,363 OS: Windows XP |
Hi,
Download smitRem.exe and save the file to your desktop. Double click on the file to extract it to it's own folder on the desktop. Place a shortcut to Panda ActiveScan on your desktop. Next, please reboot your computer in SafeMode by doing the following:
=================================================== R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R3 - Default URLSearchHook is missing =================================================== Close HiJackThis. Open the smitRem folder, then double click the RunThis.bat file to start the tool. Follow the prompts on screen. Wait for the tool to complete and disk cleanup to finish. The tool will create a log named smitfiles.txt in the root of your drive, eg; Local Disk C: or partition where your operating system is installed. Please post that log along with all others requested in your next reply. Next go to Control Panel click Display > Desktop > Customize Desktop > Web > Uncheck "Security Info" if present. Reboot back into Windows and click the Panda ActiveScan shortcut, then do a full system scan. Make sure the autoclean box is checked! Save the scan log and post it along with a new HijackThis Log, the contents of the smitfiles.txt log and the Panda Log by using Add Reply. |
|
|
Aug 21 2005, 12:19 PM
Post
#5
|
|
|
Member ![]() ![]() Posts: 39 OS: Windows XP Pro |
i scanned with hijackthis and fixed what you told me to. i wasn't able to save a log file for the panda scan because it was on the internet and there wasn't an option to do that. maybe i did it wrong but i looked around for it and i couldn't find anything about a log. i ran smitrem and did what it told me to and i did as you said in control panel. i now have my startbar back and icons, although it isn't in the xp style. here is are the smitfiles and new hijackThis logs, thank you.
smitRem log file version 2.3 by noahdfear The current date is: Sun 08/21/2005 The current time is: 12:49:20.92 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Pre-run Files Present ~~~ Program Files ~~~ ~~~ Shortcuts ~~~ ~~~ Favorites ~~~ ~~~ system32 folder ~~~ oleext.dll ~~~ Icons in System32 ~~~ ~~~ Windows directory ~~~ ~~~ Drive root ~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Post-run Files Present ~~~ Program Files ~~~ ~~~ Shortcuts ~~~ ~~~ Favorites ~~~ ~~~ system32 folder ~~~ oleext.dll ~~~ Icons in System32 ~~~ ~~~ Windows directory ~~~ ~~~ Drive root ~~~ ~~~ Wininet.dll ~~~ CLEAN! ---------------------------------------------------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 2:18:52 PM, on 8/21/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\spoolsv.exe D:\WINDOWS\Explorer.EXE D:\WINDOWS\Microsoft.NET\Framework\v2.0.40607\aspnet_admin.exe D:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe D:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe D:\WINDOWS\System32\nvsvc32.exe D:\WINDOWS\SOUNDMAN.EXE D:\WINDOWS\system32\RUNDLL32.EXE D:\Program Files\iTunes\iTunesHelper.exe D:\Program Files\QuickTime\qttask.exe D:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe D:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe D:\Program Files\Messenger\msmsgs.exe D:\Program Files\AIM\aim.exe D:\Program Files\iPod\bin\iPodService.exe D:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe D:\Program Files\Winamp\winamp.exe D:\Program Files\Internet Explorer\iexplore.exe C:\Saved Files\HijackThis.exe O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [iTunesHelper] D:\Program Files\iTunes\iTunesHelper.exe O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [NeroFilterCheck] D:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [AVG7_CC] D:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP O4 - HKLM\..\Run: [AVG7_EMC] D:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe O4 - HKLM\..\RunOnce: [SpybotSnD] "D:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck O4 - HKCU\..\Run: [MSMSGS] "D:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [AIM] D:\Program Files\AIM\aim.exe -cnetwait.odl O4 - Global Startup: Adobe Reader Speed Launch.lnk = D:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: InterVideo WinCinema Manager.lnk = D:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe O4 - Global Startup: Microsoft Office.lnk = D:\Program Files\Microsoft Office\Office\OSA9.EXE O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - D:\Program Files\AIM\aim.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/downloads/kws/kav...can_unicode.cab O16 - DPF: {4208FB4D-4E53-4F5A-BF7A-3E047DDB5281} (ActiveX Control) - http://www.icannnews.com/app/ST/ActiveX.ocx O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1119768691046 O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061...all/xscan53.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5free/asinst.cab O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - D:\Program Files\iPod\bin\iPodService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\System32\nvsvc32.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe (file missing) |
|
|
Aug 21 2005, 01:20 PM
Post
#6
|
|
|
Member 5k Posts: 6,363 OS: Windows XP |
Delete the file - C:\Windows\System32\oleext.dll. Lets get your desktop back to normal. download a copy of luna.msstyles here: http://users.pandora.be/bluepatchy/luna.zip Unzip it and MOVE the luna.msstyles which is present in that folder you unzipped to next folder: C:\WINDOWS\Resources\Themes\Luna Don't move it to anywhere else than that folder! When moved it there, rightclick on your desktop > properties ... and look if Windows XPstyle is now present again. Choose apply and OK. If not, reboot first, and try again to select Windows XPstyle Let me know how it goes. |
|
|
Aug 21 2005, 01:31 PM
Post
#7
|
|
|
Member ![]() ![]() Posts: 39 OS: Windows XP Pro |
i deleted the file you told me to. when i clicked the link to download luna.zip it came up as page cannot be found. what should i do next? thanks
|
|
|
Aug 21 2005, 03:46 PM
Post
#8
|
|
|
Member 5k Posts: 6,363 OS: Windows XP |
|
|
|
Aug 21 2005, 04:05 PM
Post
#9
|
|
|
Member ![]() ![]() Posts: 39 OS: Windows XP Pro |
thank you, i put luna in the luna folder and i now have my xp style desktop back. so everything is fixed now? thank you so much
|
|
|
Aug 21 2005, 04:48 PM
Post
#10
|
|
|
Member 5k Posts: 6,363 OS: Windows XP |
Any issues with your PC ?????
|
|
|
Aug 21 2005, 05:05 PM
Post
#11
|
|
|
Member ![]() ![]() Posts: 39 OS: Windows XP Pro |
everything seems to be working fine again. thank you so much.
|
|
|
Aug 21 2005, 05:11 PM
Post
#12
|
|
|
Member 5k Posts: 6,363 OS: Windows XP |
Hi,
CONGRATULATIONS !!!!!!!!!!! Your PC is clean now I would recommend the following steps to keep your PC clean (especially Step 8 now that your PC is clean) – PREVENTIVE MEASURES FOR FUTURE Operating System 1. Keep the Windows and Internet Explorer updated with the latest fixes. These fixes are available free from Microsoft. Click on Tools in the IE menu bar and then on Windows update. You can also use the following links Windows security and critical updates Internet Explorer security and critical updates Also ensure that automatic updates are enabled for faster updation of the system. (Right click on My Computer on your desktop, properties and Automatic Updates tab. Anti-Virus Software 2. Keep your Anti-virus program updated with the latest definitions. Some of the common anti-virus programs in use are : Norton Anti-Virus McAfee Anti-Virus AVG Anti-Virus --- freeware Avast Home Edition --- freeware Use only one anti-virus program as multiple such programs can create conflicts between themselves and severely hamper the performance of your PC. Firewall 3. You should also have a good firewall. Here are 3 free ones available for personal use: Sygate Personal Firewall, Kerio Personal Firewall, ZoneAlarm Internet Browsers 4. Have robust explorer settings. It is preferable to use an internet browser other that IE as most of the malware is targetted at IE. In case you prefer to use IE, then download a list of innocent looking but harmful websites from IE-Spyad and install it on ur PC. IE-SPYAD puts over 5000 sites in your internet explorer's restricted zone, so you'll be protected when you visit innocent-looking sites that aren't really innocent at all. Some alternate browsers I suggest are Firefox Mozilla Browser and Opera Ensure that Security level, irrespective of whichever browser you use, is set at Medium or higher, restrict the usage of cookies and activeX components. Spyware Protection 5. Have a wall of protection against spyware / adware by installing SpywareBlaster and SpywareGuard. SpywareBlaster and SpywareGuard are by JavaCool and both are free programs. SpywareBlaster will prevent spyware from being installed and consumes no system resources. SpywareGuard offers realtime protection from spyware installation and browser hijack attempts. Both have free ongoing updates. Spyware Removers 6. Install programs for scanning for malware and uninstalling them. Two of the best programs, both are freeware, are : Spybot Search & Destroy - A powerful tool which can search and annhilate nasties that make it onto your system. Now with an Immunize section that will help prevent future infections. AdAware SE Personal Edition - Another very powerful tool which searches and kills nasties that infect your system. AdAware and Spybot Search & Destroy compliment each other very well. Regular Maintenance of PC 7. Finally, invest some time for regular maintenance of your PC. Delete the temporary Internet files, temporary files, cookies etc. Click on Start button, Programs, Accessories, System Tools and run the program Disk Cleanup. Follow the instructions. An alternate freeware software which can be used is CleanUp. Keep your Registry clean. My favourite software is Registry First Aid. This is not a freeware but a trial version can be downloaded. System Restore Points 8. Since your PC is currently clean, create a system restore point. A system restore would enable you to revert to the settings on the PC when the restore point was created. It is also a good idea to flush all earlier system restore points which may be containing infected files. A. Turn off System Restore. On the Desktop, right-click My Computer. Click Properties. Click the System Restore tab. Check Turn off System Restore. Click Apply, and then click OK. B. Restart your computer. C. Turn ON System Restore. On the Desktop, right-click My Computer. Click Properties. Click the System Restore tab. UN-Check Turn off System Restore. Click Apply, and then click OK. System Restore will now be active again. Go ahead and enjoy a clean PC !!!!!!!!!!!!! |
|
|
Aug 24 2005, 01:19 PM
Post
#13
|
|
|
Member 5k Posts: 6,363 OS: Windows XP |
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.
If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic. |
|
|
![]() ![]() |
Similar Topics
| Topic Title | Replies / Views | Topic Information | ||
|---|---|---|---|---|
![]() |
4 / 1,119 | 9th April 2006 - 06:37 PM slym34 started - last by greyknight17 |
||
![]() |
8 / 12,050 | 24th January 2006 - 07:10 AM tom816 started - last by Buckeye_Sam |
||
![]() |
6 / 384 | 9th March 2006 - 07:42 PM lhn3 started - last by greyknight17 |
||
![]() |