Solved

Clicking My Computer restarts Explorer

Posted on 2004-08-06
8
195 Views
Last Modified: 2011-08-18
Windows 2000 Pro SP4

Hi, I have a client how got a nasty infection of Spyware (over 200 items). and ever since, any time you click on a link such as My Computer or Internet Explorer, Windows Explorer just seems to restart. i.e. the screen goes blank (not including the background) and then just goes back to the desktop.


I have removed most of the spyware using spybot, and removed a few viruses also..  

I would like to know if anyone has come across this problem before and if a solution is available without Reinstalling Windows.
0
Comment
Question by:maughanb
  • 2
  • 2
8 Comments
 
LVL 44

Expert Comment

by:CrazyOne
ID: 11734256
It comes across like there is still a virus

Double Check for viruses
Online Scanners

 Norton Web Services  
Virus Detection provides an analysis of your results and offers suggestions for further action. It does not examine compressed files or fix infected files.

When Symantec receives notification about a new virus, we develop and post a solution as quickly as possible. We are committed to providing swift responses to all virus threats, including Trojan horses.
http://security.symantec.com/sscv6/vc_about.asp?ax=0&langid=ie&venid=sym&plfid=23&pkj=BSZNTGXIBVEMBQAUWZK

======================
 Trend Micro HouseCall        
http://housecall.antivirus.com/housecall/start_corp.asp

======================
eTrust Online antivirus scanner
http://www3.ca.com/virusinfo/virusscan.aspx
======================

PC Pitstop Virus Scan
When the download completes, you will receive an ActiveX security dialog for the PC Pitstop virus scanner. Click Yes to install the scanner and proceed to the virus scan.

If you are currently running an antivirus package such as Norton Antivirus, it may detect our own virus detection file as a virus. If this occurs and you wish to use our scanner, please (temporarily) disable any active background virus checking software before scanning, or add our signature file (PAV.SIG) to the scanner's file exclusion list
http://www.pcpitstop.com/antivirus/AVLoad.asp
0
 
LVL 44

Expert Comment

by:CrazyOne
ID: 11734263
You used SpyBot but use it in conjuction with this product AdAware AdAware
http://www.lavasoftusa.com/
0
 
LVL 9

Accepted Solution

by:
jdeclue earned 350 total points
ID: 11734629
Sometimes these spyware programs will use an "application hook" into explorer. By doing so they can start themselves whenever explorer runs, but they run under the process of explorer, making it very unstable. Look at the following registry key within regedit.  P.S.  When you look in the key, and see BitBucket and NukeOnDelete, leave them alone, everyone thinks they must be bad but they are part of the operating system. ;)

My Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks

You would typically see 2 entries; the first being default, and the second being a long string with many characters.

Then look in;

My Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations

You should see an entry for Applications, intl and XMLLookup, look to see if there are any others.

If there are any others, post them to the site for me to see. Please...
0
 
LVL 1

Author Comment

by:maughanb
ID: 11736199
Thanks Guys..

CrazyOne - I dispise AdAware. I refuse to use it..
For Virsu Scan I have Used Both AVG and Norton. I cannot use any online services, because when I try to execute a program such as IE it does what I explained above... I presume the problem is to do with spyware/hijackers rather than I virus as such.

jdeclue....  This advice sounds good, I will try it soon and let you know..

Regards
0
 
LVL 9

Expert Comment

by:jdeclue
ID: 12362829
Split
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Join & Write a Comment

Short answer to this question: there is no effective WiFi manager in iOS devices as seen in Windows WiFi or Macbook OSx WiFi management, but this article will try and provide some amicable solutions to better suite your needs.
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now