Welcome to the Comodo Forum
Welcome,
Guest
. Please
login
or
register
.
July 06, 2008, 10:07:02 AM
1 Hour
1 Day
1 Week
1 Month
Forever
Login with username, password and session length
170881
Posts
20397
Topics
49737
Members
Latest Member:
peace2all
more news...
Search:
Advanced search
|
Tag Cloud
Welcome to the Comodo Forum
Desktop Security Products
Comodo Anti-Viruspyware (CAVS)
Virus/Malware Removal Assistance
Lost my desktop
« previous
next »
Pages:
[
1
]
Author
Topic: Lost my desktop (Read 1210 times)
Freeboi
Newbie
Offline
Posts: 3
Lost my desktop
«
on:
February 02, 2008, 04:12:14 PM »
Hi and thanks in advance! Im a new user, and im at my wits' end! ive had some sort of infection for like 2 weeks. I think its virtumonde (that's what adaware keeps reporting), but i dont have pop ups or anything, and none of the fixing tools( Vundofix, Combofix etc) remove it.
The main effect, apart from a rather slow net connection, and the comp freezing every now and then is a total loss of desktop and taskbar. All i have is the background. I cant even right click. The desktop comes occasionally, but it blinks on and off, and if it blinks off, i lose any window i opened via the desktop. -So how am I here? Task manager. I navigate entirely using it.
I have tried EVERYTHING!!! I confess to ego and trying to go my own way, but i now humbly bow in supplication to your superior intellects. I have the hijackthis log below. What do i do? What's wrong? How do i prevent it in future? Please help me.
Edit: Removed long HJT log post and replaced it as an attachment. Please do not post them. Just upload them as a text file or zip file
«
Last Edit: February 02, 2008, 09:28:24 PM by Soyabeaner
»
Logged
Freeboi
Newbie
Offline
Posts: 3
Lost my desktop
«
Reply #1 on:
February 02, 2008, 05:00:12 PM »
I'm a very green user. Sorry to admin for posting originally in wrong forum.
Anyway, I am desperate for help! I seem to have Virtumonde/ vundo malware on my system (according to adaware and spybot). However, im not seeing popups or anything.
Actually, the main effect is that, well, i have no desktop or taskbar, not even a right click option, just the background! The connection is a bit slower, and my comp freezes more often too.
I've downloaded EVERYTHING!! All the fix it tools, antispyware etc, and I'm at the end of my ability to lie to myself. Guys, i need your help. Here's my hijackthis log. What's wrong? Its solution? Future prevention?
Edit: Removed long HJT log post and replaced it as an attachment. Please do not post them. Just upload them as a text file or zip file
Edit: Also please do not post duplicate content messages in the forum
«
Last Edit: February 02, 2008, 09:31:39 PM by Soyabeaner
»
Logged
Freeboi
Newbie
Offline
Posts: 3
Re: Lost my desktop
«
Reply #2 on:
February 03, 2008, 02:59:14 AM »
Sorry bout the double post. I posted first in the wrong forum, then posted again in the right one. Note to readers, i am extremely green- most of my internet activity is on wikipedia or angry harry.
Logged
grayhair
Comodo Loves me
Offline
Posts: 134
Re: Lost my desktop
«
Reply #3 on:
February 04, 2008, 12:00:21 PM »
Hi free,
It would help those who want to help you by providing some vital info. Such as: operating system, firewall version, antivirus protection, etc. While waiting for replies on this forum start hunting down your recovery discs (or reinstall discs), software discs, etc., just in case the solution is to reformat your hard drive and start all over.
Logged
Ragwing
Guardian of the Light Master of the Force Invincible Legend
Global Moderator
Comodo's Hero
Offline
Posts: 2545
The chosen hero of the Keyblade
Re: Lost my desktop
«
Reply #4 on:
February 04, 2008, 12:47:17 PM »
Greetings!
For the desktop and taskbar not being shown, I suppose it's been disabled to load at boot?
Open
Run
and write
regedit
, then check the key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
and find
Shell
to the right. The value for it should be explorer.exe. If it's blank (or something else), explorer.exe won't load.
For the logs, these entries looks suspicious:
Winlogon Notify: cbxwxuu - C:\WINDOWS\SYSTEM32\cbxwxuu.dll
BHO: (no name) - {17449B59-7181-48F2-AEA9-F928001B569F} - C:\WINDOWS\system32\jkhfe.dll
Try removing them and see if it solves your problem.
Cheers,
Ragwing
Logged
"The closer you get to the light, the greater your shadow becomes"
Yuriy
Global Moderator
Comodo's Hero
Offline
Posts: 960
Re: Lost my desktop
«
Reply #5 on:
February 04, 2008, 01:06:20 PM »
You may also download
DrWeb CureIT scanner
, switch off internet connection (best thing is to unplug internet cable).
Then boot in safe mode and run CureIT. It is a single executable wich doesn't need to be installed. Choose "full scan" after autostart and memory were scanned.
Logged
Tags:
Pages:
[
1
]
« previous
next »
Jump to:
Please select a destination:
-----------------------------
** New to the Comodo Forum? Start Here! **
-----------------------------
=> New Member Information
-----------------------------
Want to help Comodo?
-----------------------------
=> Help Spread the Word - Official Comodo banners and logos
=> How can you help Comodo? (Please we do need you!)
===> Help spread the word! (Please read and help)
===> Comodo website issues for submitting website problems only
=> Please tell us your views and Vote here!
-----------------------------
General Category
-----------------------------
=> Melih's Corner - CEO Talk/Discussions/Blog
=> Which Product do you want Comodo to develop next?
=> General Discussion (off topic) Anything and everything...
===> Member Confessions :-)
===> Funny Photos :-)
===> Cool Stuff
-----------------------------
Desktop Security Products
-----------------------------
=> Comodo Firewall
===> Feedback/Comments/Announcements/News
===> Leak Testing/Attacks/Vulnerability Research
===> Help for v3
===> Help for v2
===> Frequently Asked Questions (FAQ) for Comodo firewall
===> Comodo Firewall Translations
===> Bug Reports
=> Comodo Anti-Viruspyware (CAVS)
===> Help for Comodo AntiVirus
===> FAQ for Comodo Anti-ViruSpyware
===> Feedback/Comments/Announcements/News about CAVS
===> Virus/Malware Removal Assistance
=> Comodo BOClean Anti-Malware
===> Announcements
===> Comodo BOClean Anti-Malware FAQ
=> Comodo DiskShield
=> Comodo Disk Encryption
=> Comodo Secure Email (CSE) Product
===> CSE Beta Corner
=> Comodo Memory Firewall(Buffer Overflow Protection)
===> Help
===> Frequently Asked Questions (Comodo Memory Firewall)
===> Feedback/Comments/Announcements/News
=> Comodo TrustConnect - Securing the Wireless world!
=> Comodo SafeSurf and (Comodo's own toolbar)
=> Backup
===> FAQ for Comodo Backup
===> Help
=> Verification Engine (allows you to verify what you see on the Internet)
=> Comodo Vulnerability Analyzer
=> AntiSpam
=> i-Vault
=> Launch Pad
=> Trusttoolbar
-----------------------------
Enterprise Security
-----------------------------
=> Comodo Remote Management
-----------------------------
Compliance
-----------------------------
=> PCI DSS Compliance
-----------------------------
Learn about Computer Security and Interact with Security Experts
-----------------------------
=> Computer Firewalls
=> Anti Virus/Malware Products/Other Security products
=> Free Virus/Spyware/Trojan/Malware Removal by Comodo Experts
=> HIPS (Host Intrusion Prevention Systems)
=> Anti Phishing solutions
=> Digital Certificates, Encryption and Digital Signing
=> General Security Questions and Comments (not product related)
-----------------------------
Free Services for End Users
-----------------------------
=> UserTrust - First Independent Website Rating - Empowering our users!
=> User Anywhere (Remote Access product)
=> Comodo Meet (Web Conferencing Product)
=> Hacker Guardian
=> Trustfax (free Trial) (online faxing)
-----------------------------
Free Products
-----------------------------
=> Link to Free Comodo Products
-----------------------------
International Comodo Forums
-----------------------------
=> International Comodo Forums
===> 汉语语言, 漢語語言 / Chinese Simplified, Traditional
===> Nederlands / Dutch
===> Francais / French
===> Deutsch / German
===> ελληνικά / Greek
===> Magyar / Hungarian
===> Italiano / Italian
===> Nihongo / Japanese
===> Norsk / Norwegian
===> Polski / Polish
===> Português/Portuguese
===> По-русски / Russian
===> Espanol / Spanish
===> Svenska / Swedish
===> Turkce / Turkish
===> Українська / Ukrainian
===> tiếng Việt / Vietnamese
-----------------------------
Digital Certificates
-----------------------------
=> Code Signing Certificate
=> Content Verification Certificate
=> Email Certificate
=> SSL Certificate
-----------------------------
Web Server Products
-----------------------------
=> Two Factor Authentication for Web Applications
=> Trustlogo
-----------------------------
Infrastructure Products
-----------------------------
=> ZTL
=> Trustix Enterprise Firewall
-----------------------------
Other
-----------------------------
=> Forum Policy Violation Board
Page created in 0.205 seconds with 19 queries.
Powered by SMF 1.1.5
|
SMF © 2006, Simple Machines LLC
Seo4Smf v0.2 © Webmaster's Talks
Design by
7dana.com