Crashed computer

Solved/Closed
kyouko17 Posts 5 Registration date Thursday January 27, 2011 Status Member Last seen January 28, 2011 - Jan 27, 2011 at 11:15 PM
jack4rall Posts 6428 Registration date Sunday June 6, 2010 Status Moderator Last seen July 16, 2020 - Jan 29, 2011 at 10:58 AM
Hello,

I am having a huge problem in my Windows XP. My friend and her brother was changing the desktop wallpaper on Google images ; spyware terminator was auto scanning, and it suddenly showed a result of a trojan horse virus(Win-Trojan/Agent.28929 and Win32/AutoRun.EU ) . They removed and a tab showed that the trojan horse couldn't be removed, they recommended to restart , they restarted it and after the computer was restarted, my desktop had nothing, no icons, no taskbar, nothing at all. The only thing that functions is the ctrl+alt+delete and the mouse moving ( no right click ).

Later after that I restarted the computer by pressing constantly on F8. I later managed to go on safe mode ( it functioned fine). They gave us an application which is System Recovery and I chose to recover it to the previous date, which is 26 of January 2011. The computer restarted and I returned to normal mode, but the problem remains. Thinking that it failed I went back to safe mode, but later found out that it went blank too, as the normal mode did.

I have searched for many solutions online to recover the system (as I have important documents in it) but nothing came, please reply with a full, descriptive solution. Thank you.

4 responses

jack4rall Posts 6428 Registration date Sunday June 6, 2010 Status Moderator Last seen July 16, 2020
Jan 28, 2011 at 12:15 AM
Hello,

Try this 1

Hold the Ctrl & Shift keys and press the "Esc" key. "Task Manager" will be opened

Click on "File" --> New Task --> Type explorer.exe and press Enter.

Later download the Malwarebytes' Anti-Malware from the below link

https://ccm.net/downloads/security-and-maintenance/4621-malwarebytes-anti-malware/

Update it --> Perform "Full Scan"

Note : Default selected option is "Quick Scan".

Good Luck.
1
kyouko17 Posts 5 Registration date Thursday January 27, 2011 Status Member Last seen January 28, 2011
Jan 28, 2011 at 12:32 AM
Thank you for the solution, but for some certain reason, my XP doesn't except the explorer.exe, it just states that they don't know it.
0
jack4rall Posts 6428 Registration date Sunday June 6, 2010 Status Moderator Last seen July 16, 2020
Jan 28, 2011 at 07:15 AM
Hello,

Try this 1

1) Hold the Ctrl & Shift keys and press the "Esc" key. "Task Manager" will be opened

Click on "File" --> New Task --> Type cmd and press Enter.

"Command Prompt" will be opened. Now enter the below commands

1.1) cd\ and press Enter. Now your prompt changes to C:\>

1.2) cd windows and press Enter. Now your prompt changes to C:\Windows>

1.3) ren explorer.exe explorer1.exe and press Enter

[Note: If it says explorer.exe file not found, continue with the next steps]

1.4) cd system32\dllcache and press Enter. Now the prompt changes to

C:\WINDOWS\system32\dllcache>

1.5) copy explorer.exe c:\windows and press Enter

[ 1 file(s) copied message should appear ]

2) Now enter the command

start explorer.exe ---> Press Enter.

Good Luck
0
kyouko17 Posts 5 Registration date Thursday January 27, 2011 Status Member Last seen January 28, 2011
Jan 28, 2011 at 05:54 PM
step 1.5 did not work
"explorer.exe' is not recognized as an internal or external command, operable program or batch file."
0
jack4rall Posts 6428 Registration date Sunday June 6, 2010 Status Moderator Last seen July 16, 2020
Jan 29, 2011 at 10:58 AM
Hello,
Try this 1
Enter the command once again to copy the explorer.exe file.
Or
Follow the above steps and open the command prompt. Now enter the below command
sfc /scannow --> Press Enter.
Good Luck
0
kyouko17 Posts 5 Registration date Thursday January 27, 2011 Status Member Last seen January 28, 2011
Jan 28, 2011 at 06:09 PM
Extended info :

I ran a scan with drweb and I got a list of viruses like:
win32.HLLW.Gavir.ini
Trojan.Hottrend.34
Win32.Dat.15
Trojan.Starter.1602

These viruses are found in winlogon.exe, Desktop_.ini, dll, OLD36.tmp, OLD38.tmpand zx.dll (so far)
0
kyouko17 Posts 5 Registration date Thursday January 27, 2011 Status Member Last seen January 28, 2011
Jan 28, 2011 at 08:11 PM
Issue:
I restarted the XP after the scan and this appeared ( as a blue screen):

STOP:c000021a {Fatal System Error}
The windows Logon Process system process terminated unexpectedly with a status of 0xcoooooo5(0x0000000 0x00000000).
The system has been shut down.
0