Trojan horse put HideWindow cmd in my system. How do I get rid of it

I put a DSL modem on my machine last weekend.  I found I'd gotten a trojan horse which McAfee was able to heal.  However, a HideWindow command apparently came in with it which McAfee didn't do anything about.  No desktop, icons, task bar, or Start button.  Running Windows 2000 NT. I can get to all the programs and files through the New Task button on the Task Manager.  How do I return Windows to it's normal state?
sirklwAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

rolfejrCommented:
Try installing SpyBot Search and Destroy.  It finds and restores settings from several spyware / adware / trojan type programs.  I can't guarantee it will work, but it's worth a shot before a complete system rebuild.  You can find it by searching for spybot at download.com, or paste the following in your broser:
http://download.com.com/3120-20-0.html?qt=spybot&tg=dl-2001
0
gidds99Commented:
Try opening CMD.exe from the task manager and run SFC /SCANNOW this will check all windows files are the correct versions and intact.
0
DrakonanCommented:
I'm interested in knowing if explorer.exe is correctly loading, run explorer.exe and see if everything appears.

(if explorer is already running it should kick up a windows explorer window)

What all loads at start up?  you can find out by traversing the registry:

hklm/software/microsoft/windows/run

There are other places as well,

(Startup folder, services etc, but most dll executions [rundll and the like) and many one-time simple progs run here)
0
Cloud Class® Course: Amazon Web Services - Basic

Are you thinking about creating an Amazon Web Services account for your business? Not sure where to start? In this course you’ll get an overview of the history of AWS and take a tour of their user interface.

sirklwAuthor Commented:
To explain a bit further about what is happening, when my system first starts up, a window labelled 'update' opens up and inside it is another window labeled 'status'. In the status window is the following message:
* / run: unable to open ‘svchost32.exe’ (line 2, iiscache.dll)
-
if I click in the window or try to select the text in the window, this next message appears and continues to reappear everytime I click again in the window:
* /msg: not connected to server (line 154, iiscache.dll)

I close this window, open the task manager and have found that by getting to explorer.exe and running it, the desktop and all the normal icons and bars will appear and be fully functional.
0
DrakonanCommented:
Hey man, that sounds alot like a virus...  I've heard about one dealing with svchost32.dll iiscache.dll

Do you have an up-to-date antivirus?


If you don't:
http://housecall.antivirus.com/

will check for free...

Anyway, if it doesn't find anything, goto the registry as I before mentioned and see if you can disable the unsuccessful "update" file that is being run...
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
gidds99Commented:
It sounds like you may have the Backdoor.IRC.Zcrew backdoor/trojan.

Here are the details and removal instructions:-

http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.zcrew.html
0
sirklwAuthor Commented:
I did go to the website, ran through a bunch of the links, downloaded i'm-not-sure-whatall, let it do stuff to my system and when all was done, my desktop was restored and could boot up and shut down more-or-less normally.  However, my system is so riddled with viruses which McAffee does nothing for, that I've decided to take the extreme step of reformatting my hard drive.  I'm finding reformatting to be as difficult to accomplish as correcting the desktop problem.  Thanks all.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 2000

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.