Very Interesting Virus?

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Chrisjc
    Contributor
    • Nov 2006
    • 375

    Very Interesting Virus?

    I my self find my self stumped at the moment.

    About a month ago I fixed my sisters computer was simple just some virus I was able to clear them off and clean it up. Ran grate after... Few weeks later she calls me saying something new is up I go over and take a looksee and to my surprise I found it doing some odd stuff I have never seen before...

    Symptoms are the following
    Windows XP Home
    When started it goes to the login screen and displays 5 users. Select one like normal and load into XP. While loading it will show the desk top with task bar start etc... About 1 minute into the load EVERYTING ICONS, TASK BAR, WINDOWS you had open DISAPREAR COMPLETELY! All you see is a desktop background.

    What you can do:

    ALT + CTRL + DEL and browse programs that way by "NEW TASK" it allowed me to go there and open the Symantec exe... I did a full system scan and NOTHING.

    I even booted in SAFE MODE and the same thing happens did a full scan here too and NOTHING... I used a slick program that Barton suggested the last time I asked a question... and NOTHING

    I am rather stuck on this one and I CAN NOT REFORMAT Because I do not have the CD's so my only option is to FIX this issue... anyone have any ideas?

    I been working on this for a week I tried everything in my skills that I know as an IT this is a first stump in awhile.
  • epots9
    Recognized Expert Top Contributor
    • May 2007
    • 1352

    #2
    have u done a scan disk to check for bad sectors?

    Comment

    • Chrisjc
      Contributor
      • Nov 2006
      • 375

      #3
      Originally posted by epots9
      have u done a scan disk to check for bad sectors?

      yeah turned out clean... This is why I am rather lost on this one... Doesnt show as a virus doesnt show as a mess up just doing it...

      Comment

      • epots9
        Recognized Expert Top Contributor
        • May 2007
        • 1352

        #4
        you said that u could open task manager, what happens when u try to open explorer? (from my experience it will load the desktop).

        Comment

        • Chrisjc
          Contributor
          • Nov 2006
          • 375

          #5
          Originally posted by epots9
          you said that u could open task manager, what happens when u try to open explorer? (from my experience it will load the desktop).

          ahh but it does.. but see this is the odd part "explorer" is already running.. it is just not viewable so when I REOPEN it it FLASHES and is gone again... it is VERY ODD

          Comment

          • epots9
            Recognized Expert Top Contributor
            • May 2007
            • 1352

            #6
            Originally posted by Chrisjc
            ahh but it does.. but see this is the odd part "explorer" is already running.. it is just not viewable so when I REOPEN it it FLASHES and is gone again... it is VERY ODD
            odd...i can't even find anything close to what you're going through, but i'll keep trying.

            if u end the explorer process and restart it (not the computer) does it just do the same thing?

            did your sis install/uninstall and/or play with the registry/boot.ini?

            Comment

            • Chrisjc
              Contributor
              • Nov 2006
              • 375

              #7
              Originally posted by epots9
              odd...i can't even find anything close to what you're going through, but i'll keep trying.

              if u end the explorer process and restart it (not the computer) does it just do the same thing?

              did your sis install/uninstall and/or play with the registry/boot.ini?

              She has no idea what she did... It was actaully her husband I asked him... he said he was on some video site like youtube... and it just started doing that... its odd because it will FLASH the screen but it is not any hardware issue couldnt be... becuase the background is always displaying NO FLASH just the ICONS task bar... so I am really stuck on this one and I dont want to have to tell her go buy XP so I can reformat...

              Comment

              • Chrisjc
                Contributor
                • Nov 2006
                • 375

                #8
                PS thanks for the extra help too!

                Comment

                • Chrisjc
                  Contributor
                  • Nov 2006
                  • 375

                  #9
                  So have hours and hours.. I think I solved this...

                  The cause I HAVE NO IDEA.

                  The solution

                  I opened Task Manager ALT+CTRL+DEL

                  NEW TASK > and typed "explorer.e xe"

                  now I did this befor however this time while it was FLASHING the icons... I pressed the "PAUSE / BREAK" Key on the keybaord and boom everything stated loaded...

                  ODD!!!

                  Comment

                  • bartonc
                    Recognized Expert Expert
                    • Sep 2006
                    • 6478

                    #10
                    Originally posted by Chrisjc
                    So have hours and hours.. I think I solved this...

                    The cause I HAVE NO IDEA.

                    The solution

                    I opened Task Manager ALT+CTRL+DEL

                    NEW TASK > and typed "explorer.e xe"

                    now I did this befor however this time while it was FLASHING the icons... I pressed the "PAUSE / BREAK" Key on the keybaord and boom everything stated loaded...

                    ODD!!!
                    Good to know! I have a friend with the same symptom. Let's keep an eye on this one!

                    Comment

                    • Ali Rizwan
                      Banned
                      Contributor
                      • Aug 2007
                      • 931

                      #11
                      Originally posted by Chrisjc
                      I my self find my self stumped at the moment.

                      About a month ago I fixed my sisters computer was simple just some virus I was able to clear them off and clean it up. Ran grate after... Few weeks later she calls me saying something new is up I go over and take a looksee and to my surprise I found it doing some odd stuff I have never seen before...

                      Symptoms are the following
                      Windows XP Home
                      When started it goes to the login screen and displays 5 users. Select one like normal and load into XP. While loading it will show the desk top with task bar start etc... About 1 minute into the load EVERYTING ICONS, TASK BAR, WINDOWS you had open DISAPREAR COMPLETELY! All you see is a desktop background.

                      What you can do:

                      ALT + CTRL + DEL and browse programs that way by "NEW TASK" it allowed me to go there and open the Symantec exe... I did a full system scan and NOTHING.

                      I even booted in SAFE MODE and the same thing happens did a full scan here too and NOTHING... I used a slick program that Barton suggested the last time I asked a question... and NOTHING

                      I am rather stuck on this one and I CAN NOT REFORMAT Because I do not have the CD's so my only option is to FIX this issue... anyone have any ideas?

                      I been working on this for a week I tried everything in my skills that I know as an IT this is a first stump in awhile.
                      Are you saying that your start menu is not working as well as icons Right then
                      tell me because i have also this problem.

                      Comment

                      • bartonc
                        Recognized Expert Expert
                        • Sep 2006
                        • 6478

                        #12
                        Originally posted by Ali Rizwan
                        Are you saying that your start menu is not working as well as icons Right then
                        tell me because i have also this problem.
                        That's right (as I read it). No Start menu, no desktop icons, no (anything).
                        Please try the solution
                        Originally posted by Chrisjc
                        I opened Task Manager ALT+CTRL+DEL

                        NEW TASK > and typed "explorer.e xe"

                        now I did this befor however this time while it was FLASHING the icons... I pressed the "PAUSE / BREAK" Key on the keybaord and boom everything stated loaded...
                        and let us know how it works for you.

                        Comment

                        • Ali Rizwan
                          Banned
                          Contributor
                          • Aug 2007
                          • 931

                          #13
                          Originally posted by bartonc
                          That's right (as I read it). No Start menu, no desktop icons, no (anything).
                          Please try the solutionand let us know how it works for you.
                          Hi
                          Problem is that there is no solution for this problem but one.
                          When i have this problem then i use this thing
                          press Ctrl+Alt+Del
                          Terminate Explorer
                          and then go to file new task and type c: or explorer in the textbox and press ok.
                          Your startmenu and icons will enabled you think you have solved the problem but not whenever you restart your computer you will find the problem again.
                          I have done one thing more i set password to my account by this my start menu and icons do not stuck after rebooting.

                          After all i use Aston shell and now i have made my own explorer.

                          Check these all and reply

                          Comment

                          • Chrisjc
                            Contributor
                            • Nov 2006
                            • 375

                            #14
                            Ahh well see this worked about 4 times for me pressing "PAUSE" however after about the 4th time rebooting it still didn’t LOAD explorer.exe

                            I was getting really pissed last night when finally I simply opened "mmc" in New Task opened Computer Management snap in and backed up some of my sister’s photos and some other stuff she had... Put my WinXP Pro in and hit DELETE PARTITION reloaded windows and well no more whatever issue I was having...

                            I am guessing by the number of people replying to this, That this is a common issue I also have a feeling playing with the shell some that this is indeed a virus one that has not been found yet.

                            I have tried everything in my power to make this work including a fellow IT from my office and a good time friend who is also an IT and neither one could help me we where all shocked by this...

                            FULL DICRIPTION OF THE SYSTEM SYMTOPMS:
                            =============== =============== =============== =====
                            Windows XP "All Version"
                            Windows will boot as normal and proceed to the login screen "Pick the user Depending on your PC if no user it will load right in"

                            While loading into windows you will only see your Desktop Background and maybe see you’re "Start menu and your desk top Icons flash once or twice"

                            You will then be looking at a completely BLANK SCREEN with whatever background picture you may have had there.

                            You may use the following commands

                            ALT+CTRL+DEL "New Task" For RUN

                            You may browse around your PC from "New Task" and open applications and programs with no issues at all. The windows Shell will continue to stay hidden and not useable.

                            To get control of personal settings use "New Task" and type in "mmc" This will bring windows consol control up, you may add a new "Snap in" and choice which you would like to work with.

                            I tried CHKDSK /"your drive letter" /F

                            My Hard Drive was FINE no issues. You might want to try it.

                            I also loaded up windows Signature Verification, in "New Task” type "sigverif" hit enter.

                            On my end everything looked normal nothing out of the ordinary I also did DELL Recovery and NOTHING!!! It did not work at all. So I tried windows recovery and rolled it back 2 months didn’t work.

                            I tried a system repair with the windows CD however I was locked out of administrator. When I wasn’t… What I mean is I could login windows on administrator but for whatever reason when the repair tool booted in DOS and asked what drive I want to fix then ask for the admin PW it said it was wrong… And yet I knew it wasn’t.

                            Also a side notes I noticed something a little odd. In one of the USER FOLDERS in “My Documents” I noticed a WINDOWS folder I forget the subdirectory it had in it and I was very tired and pissed by this time I had been working on the PC for over 5 hours and everything I tried failed so I forgot to check the folder for hidden files. My point being is when I tried deleting it; it stated that Windows was using this folder… I found this rather odd but being in the mood I was in and it also being my sisters computer and she needed it back I decided to do what I knew will solve this issue, I deleted the partition from the windows xp cd and installed a fresh copy.

                            This solves the issue. If It wasn’t my sister computer I would have kept playing with this to figure it out.

                            But something else I want to bring up.

                            If you look in your Task Manager under the Processes tap you will notice that explorer.exe is not loaded it will not load at the start of windows and if you type in “explorer.exe” in “New Task” you will experience you desktop flashing a few times as explorer closes and opens 3 to 5 times. In this little time window of it FLASHING here is something that worked for me 4 times. Press the “Pause / Break” Key on you keyboard it should freeze explorer in place and allow you to work with you PC like nothing ever happened! I suggest if this works for you backup any files you may have and Zero out your Hard Drive and start with a new copy of windows. This will surely fix your issue.

                            Good luck I will follow this thread if anyone else can find a solution. I am very interested to know about it.

                            Comment

                            • epots9
                              Recognized Expert Top Contributor
                              • May 2007
                              • 1352

                              #15
                              I'm glad you were able to fix it, i guess...sorry to hear that it required a format

                              Comment

                              Working...