Welcome to the Comodo Forum
Welcome,
Guest
. Please
login
or
register
.
March 21, 2010, 10:47:52 PM
1 Hour
1 Day
1 Week
1 Month
Forever
Login with username, password and session length
373583
Posts
41456
Topics
94201
Members
Latest Member:
goseba
more news...
Search:
Advanced search
|
Tag Cloud
Welcome to the Comodo Forum
Learn about Computer Security and Interact with Security Experts
Virus/Malware Removal Assistance
Lost my desktop
« previous
next »
Pages:
[
1
]
Author
Topic: Lost my desktop (Read 2433 times)
Freeboi
Newbie
Offline
Posts: 3
Lost my desktop
«
on:
February 02, 2008, 04:12:14 PM »
Hi and thanks in advance! Im a new user, and im at my wits' end! ive had some sort of infection for like 2 weeks. I think its virtumonde (that's what adaware keeps reporting), but i dont have pop ups or anything, and none of the fixing tools( Vundofix, Combofix etc) remove it.
The main effect, apart from a rather slow net connection, and the comp freezing every now and then is a total loss of desktop and taskbar. All i have is the background. I cant even right click. The desktop comes occasionally, but it blinks on and off, and if it blinks off, i lose any window i opened via the desktop. -So how am I here? Task manager. I navigate entirely using it.
I have tried EVERYTHING!!! I confess to ego and trying to go my own way, but i now humbly bow in supplication to your superior intellects. I have the hijackthis log below. What do i do? What's wrong? How do i prevent it in future? Please help me.
Edit: Removed long HJT log post and replaced it as an attachment. Please do not post them. Just upload them as a text file or zip file
«
Last Edit: February 02, 2008, 09:28:24 PM by Soyabeaner
»
Logged
Freeboi
Newbie
Offline
Posts: 3
Lost my desktop
«
Reply #1 on:
February 02, 2008, 05:00:12 PM »
I'm a very green user. Sorry to admin for posting originally in wrong forum.
Anyway, I am desperate for help! I seem to have Virtumonde/ vundo malware on my system (according to adaware and spybot). However, im not seeing popups or anything.
Actually, the main effect is that, well, i have no desktop or taskbar, not even a right click option, just the background! The connection is a bit slower, and my comp freezes more often too.
I've downloaded EVERYTHING!! All the fix it tools, antispyware etc, and I'm at the end of my ability to lie to myself. Guys, i need your help. Here's my hijackthis log. What's wrong? Its solution? Future prevention?
Edit: Removed long HJT log post and replaced it as an attachment. Please do not post them. Just upload them as a text file or zip file
Edit: Also please do not post duplicate content messages in the forum
«
Last Edit: February 02, 2008, 09:31:39 PM by Soyabeaner
»
Logged
Freeboi
Newbie
Offline
Posts: 3
Re: Lost my desktop
«
Reply #2 on:
February 03, 2008, 02:59:14 AM »
Sorry bout the double post. I posted first in the wrong forum, then posted again in the right one. Note to readers, i am extremely green- most of my internet activity is on wikipedia or angry harry.
Logged
grayhair
Comodo's Hero
Offline
Posts: 282
Re: Lost my desktop
«
Reply #3 on:
February 04, 2008, 12:00:21 PM »
Hi free,
It would help those who want to help you by providing some vital info. Such as: operating system, firewall version, antivirus protection, etc. While waiting for replies on this forum start hunting down your recovery discs (or reinstall discs), software discs, etc., just in case the solution is to reformat your hard drive and start all over.
Logged
Ragwing
Global Moderator
Comodo's Hero
Offline
Posts: 3454
Re: Lost my desktop
«
Reply #4 on:
February 04, 2008, 12:47:17 PM »
Greetings!
For the desktop and taskbar not being shown, I suppose it's been disabled to load at boot?
Open
Run
and write
regedit
, then check the key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
and find
Shell
to the right. The value for it should be explorer.exe. If it's blank (or something else), explorer.exe won't load.
For the logs, these entries looks suspicious:
Winlogon Notify: cbxwxuu - C:\WINDOWS\SYSTEM32\cbxwxuu.dll
BHO: (no name) - {17449B59-7181-48F2-AEA9-F928001B569F} - C:\WINDOWS\system32\jkhfe.dll
Try removing them and see if it solves your problem.
Cheers,
Ragwing
Logged
Forum Policy
FAQs
SS26
Comodo's Hero
Offline
Posts: 1666
Re: Lost my desktop
«
Reply #5 on:
February 04, 2008, 01:06:20 PM »
You may also download
DrWeb CureIT scanner
, switch off internet connection (best thing is to unplug internet cable).
Then boot in safe mode and run CureIT. It is a single executable wich doesn't need to be installed. Choose "full scan" after autostart and memory were scanned.
Logged
Tags:
Pages:
[
1
]
« previous
next »
Jump to:
Please select a destination:
-----------------------------
General Category
-----------------------------
=> Melih's Corner - CEO Talk/Discussions/Blog
=> Comodo.TV - Our Internet Video Channel
===> Comodo.TV - News and Announcements
===> Comodo.TV - Program Lineup
===> Audience Feedback and Suggestions
=> Which Product do you want Comodo to develop next?
=> How Can I Help Comodo? (Please We Need You!)
===> Report Comodo Forum / Web Site Issues
===> Please Tell Us Your Views and Vote Here!
===> Help Spread the Word - Banners and Logos
=> General Discussion (off topic) Anything and everything...
===> Member Confessions :-)
===> Funny Photos :-)
===> Cool Stuff
-----------------------------
Desktop Security Products & Services
-----------------------------
=> Comodo Internet Security - CIS
===> News / Announcements / Feedback - CIS
=====> Wishlist - CIS
===> AV False Positive/Negative Detection Reporting
===> Help - CIS
=====> Guides - CIS
=====> AntiVirus Help - CIS
=======> AntiVirus FAQ - CIS
=====> Firewall Help - CIS
=======> Firewall FAQ - CIS
=====> Defense+ / Sandbox Help - CIS
=======> Defense+ / Sandbox FAQ - CIS
=====> Install / Setup / Configuration Help - CIS
=======> Install / Setup / Configuration FAQ - CIS
===> Bug Report - CIS
=> Comodo Backup - CB
===> News / Announcements / Feedback - CB
===> Comodo Online Backup - COB
===> Help - CB
=====> FAQ - CB
=> Comodo Time Machine - CTM
===> News / Announcements / Feedback - CTM
===> Help - CTM
=====> FAQ - CTM
===> Bug Reports - CTM
=> Comodo Dragon - CD
===> News / Announcements / Feedback - CD
=====> Wishlist - CD
===> Help - CD
=====> FAQ - CD
===> Bug Reports - CD
=> Comodo Disk Encryption - CDE
===> News / Announcements / Feedback - CDE
=====> Wishlist - CDE
===> Help - CDE
=====> FAQ - CDE
===> Bug Reports - CDE
===> Beta Corner - CDE
=> Comodo Secure Email - CSE
===> News / Announcements / Feedback - CSE
===> Help - CSE
=====> FAQ - CSE
===> Bug Reports - CSE
=> Comodo EasyVPN - CEVPN
===> News / Announcements / Feedback - CEVPN
===> Help - CEVPN
=====> FAQ - CEVPN
===> Bug reports - CEVPN
=> Comodo AntiSpam - CAS
=> Comodo TrustConnect - CTC
=> HopSurf - CHS
=> Comodo Instant Malware Analysis Online - CIMA
=> Verification Engine - CVE
-----------------------------
Desktop Utilities & Services
-----------------------------
=> Comodo System Cleaner - File/Registry/Privacy Cleaner - CSC
===> News / Announcements / Feedback - CSC
===> Help - CSC
=====> FAQ - CSC
=> Comodo Cloud Scanner - CCS
===> News / Announcements / Feedback - CCS
===> FAQ - CCS
=> Live PC Support
-----------------------------
Business / Enterprise Security Products & Services
-----------------------------
=> Digital Certificates
===> Code Signing Certificate
===> Content Verification Certificate
===> Email Certificate
===> SSL Certificate
=> PCI DSS Compliance
=> Comodo Endpoint Security Manager
=> Two Factor Authentication for Web Applications
=> Trustlogo
=> Hacker Guardian
-----------------------------
Learn about Computer Security and Interact with Security Experts
-----------------------------
=> General Security Questions and Comments
=> Virus/Malware Removal Assistance
=> Leak Testing/Attacks/Vulnerability Research
=> Digital Certificates, Encryption and Digital Signing
=> Other Security Products
-----------------------------
International Comodo Forums
-----------------------------
=> International Comodo Forums
===> 汉语语言, 漢語語言 / Chinese Simplified, Traditional
===> Česky / Czech
===> Dansk / Danish
===> Nederlands / Dutch
===> Suomi / Finnish
===> Francais / French
===> Deutsch / German
===> ελληνικά / Greek
===> Magyar / Hungarian
===> Italiano / Italian
===> Nihongo / Japanese
===> Norsk / Norwegian
===> Polski / Polish
===> Português/Portuguese
===> Română / Romanian
===> По-русски / Russian
===> Slovenský / Slovak
===> Slovenščina / Slovenian
===> Espanol / Spanish
===> Svenska / Swedish
===> Turkce / Turkish
===> Українська / Ukrainian
===> Việt / Vietnamese
-----------------------------
Other
-----------------------------
=> Forum Policy Violation Board
-----------------------------
Archived Boards
-----------------------------
=> Discontinued Products
===> Comodo Anti-Viruspyware (CAVS)
=====> Help for Comodo AntiVirus
=====> FAQ for Comodo Anti-ViruSpyware
=====> Feedback/Comments/Announcements/News about CAVS
===> Comodo BOClean Anti-Malware
=====> Announcements
=====> Comodo BOClean Anti-Malware FAQ
===> Comodo Diskshield
===> Comodo Firewall
=====> Feedback/Comments/Announcements/News
=====> Help for v3
=====> Help for v2
=====> Frequently Asked Questions (FAQ) for Comodo firewall
=====> Comodo Firewall Translations
=====> Bug Reports
===> i-Vault
===> Launch Pad (Discontinued)
===> Comodo Meet (Web Conferencing Product) (Discontinued)
===> Comodo Memory Firewall(Buffer Overflow Protection)
=====> Comodo Memory Firewall Beta Corner
=====> Help
=====> Frequently Asked Questions (Comodo Memory Firewall)
=====> Feedback/Comments/Announcements/News
===> Safesurf
===> Trusttoolbar (Discontinued)
===> Trustfax (online faxing) (discontinued)
===> Trustix Enterprise Firewall
===> User Anywhere (Remote Access product) (Discontinued)
===> UserTrust - First Independent Website Rating - Empowering our users!
===> Comodo Vulnerability Analyzer - CVA
===> ZTL
Page created in -0 seconds with 16 queries.
Powered by SMF 1.1.11
|
SMF © 2006, Simple Machines LLC
Seo4Smf v0.2 © Webmaster's Talks
Design by
7dana.com