Icons transparent

Solved/Closed
BobC - Oct 11, 2011 at 02:08 PM
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 - Oct 12, 2011 at 04:15 PM
Hello,

so I ran a virus scan AVG free ver. and it says malware and needs to delete 241 files.
I did. now no icons on my desktop I cant drag any to the desk top I can get to my programs from the control panel only.
I try and open task manager and it says the admin has disabled task man.
I am the admin. I tryed to create a new account as an admin no icons.
I am runnng another scan with another program I'm pretty sure it is a virus or trojan.
my OS is XP Pro.I was able to unhide some of my files but not all of them.
I don't even have an option to send to desktop in my drop down.
from the start menu when i got to programs it says empty. I know they are still there I can get to them the long way.any help would be appreciated
thanks.


Related:

4 responses

Anonymous User
Oct 11, 2011 at 02:46 PM
download this first

https://support.kaspersky.com/downloads/utils/tdsskiller.zip

Extract and run it..it should find a rootkit ,cure it


After this download malwarebytes and do a full scan

https://ccm.net/downloads/security-and-maintenance/4621-malwarebytes-anti-malware/

Remove infections and run malwarebytes once again till the PC is clean


Now go to run and type

cmd and click ok

Now run this command

attrib -h -r -s /s /d c:\*.*

This will unhide the files,now

Go to temp folder of infected user

C:\Documents and Settings\--your username--\Local Settings\Temp

Check for smtmp folder,if you have one just save it to safe location

Let me know after this
Thank You Sir so far after the first scan I have desktop icons back the malware scan found 27 items and the kill scan found 1 item I am currently running the malware scan now. I just want to say a big thank you!I will be looking into buying the program.I am pretty sure where the Trojan came from An email attachment of course.
I haven't run the cmd yet I will update you when I do.
Again Thank You so Much!!
I ran the cmd line and it ran and the icons are full color now I did notice when it was running there were a lot of access denied lines is that common?
0
Anonymous User
Oct 11, 2011 at 09:36 PM
Access denied is a common thing ,ignore it

Make sure to check for smtmp folder

C:\Documents and Settings\--your username--\Local Settings\Temp

If you do not find one ,leave it


I hope you had run the unhide command only after getting a clean log from malwarebytes.

After completing the procedure,reboot the PC,if you receive a notepad pop up at startup

Go to Start > All Programs > Startup

Right click the desktop.ini file and click `Properties'
Check the `Hidden' attribute box.
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,166
Oct 12, 2011 at 04:15 PM
To help you, I must make a diagnostic and to do so, I require a log.

Open this link and download ZHPDiag :

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html


Register the file on your Desktop.

Double click on ZHPDiag.exe and follow the instructions.

the tool created two icons ZHPDiag and ZHPFix (we will use ZHPFix at the next step).

Double click on the short cut ZHPDiag on your Destktop.

Click on the Magnifying glass and run the analysys.

Wait for the tool to finished (maybe a long time)

Close ZHPDiag.


To transmit the report, click on this link :

https://authentification.site

Click on Parcourir and search the directory where you installed ZHPDiag (usually C:\Program Files\ZHPDiag).

Select the file ZHPDiag.txt.

Click on "upload »

Copy the url and post it here