Solved

Clicking My Computer restarts Explorer

Posted on 2004-08-06
8
200 Views
Last Modified: 2011-08-18
Windows 2000 Pro SP4

Hi, I have a client how got a nasty infection of Spyware (over 200 items). and ever since, any time you click on a link such as My Computer or Internet Explorer, Windows Explorer just seems to restart. i.e. the screen goes blank (not including the background) and then just goes back to the desktop.


I have removed most of the spyware using spybot, and removed a few viruses also..  

I would like to know if anyone has come across this problem before and if a solution is available without Reinstalling Windows.
0
Comment
Question by:maughanb
  • 2
  • 2
8 Comments
 
LVL 44

Expert Comment

by:CrazyOne
ID: 11734256
It comes across like there is still a virus

Double Check for viruses
Online Scanners

 Norton Web Services  
Virus Detection provides an analysis of your results and offers suggestions for further action. It does not examine compressed files or fix infected files.

When Symantec receives notification about a new virus, we develop and post a solution as quickly as possible. We are committed to providing swift responses to all virus threats, including Trojan horses.
http://security.symantec.com/sscv6/vc_about.asp?ax=0&langid=ie&venid=sym&plfid=23&pkj=BSZNTGXIBVEMBQAUWZK

======================
 Trend Micro HouseCall        
http://housecall.antivirus.com/housecall/start_corp.asp

======================
eTrust Online antivirus scanner
http://www3.ca.com/virusinfo/virusscan.aspx
======================

PC Pitstop Virus Scan
When the download completes, you will receive an ActiveX security dialog for the PC Pitstop virus scanner. Click Yes to install the scanner and proceed to the virus scan.

If you are currently running an antivirus package such as Norton Antivirus, it may detect our own virus detection file as a virus. If this occurs and you wish to use our scanner, please (temporarily) disable any active background virus checking software before scanning, or add our signature file (PAV.SIG) to the scanner's file exclusion list
http://www.pcpitstop.com/antivirus/AVLoad.asp
0
 
LVL 44

Expert Comment

by:CrazyOne
ID: 11734263
You used SpyBot but use it in conjuction with this product AdAware AdAware
http://www.lavasoftusa.com/
0
 
LVL 9

Accepted Solution

by:
jdeclue earned 350 total points
ID: 11734629
Sometimes these spyware programs will use an "application hook" into explorer. By doing so they can start themselves whenever explorer runs, but they run under the process of explorer, making it very unstable. Look at the following registry key within regedit.  P.S.  When you look in the key, and see BitBucket and NukeOnDelete, leave them alone, everyone thinks they must be bad but they are part of the operating system. ;)

My Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks

You would typically see 2 entries; the first being default, and the second being a long string with many characters.

Then look in;

My Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations

You should see an entry for Applications, intl and XMLLookup, look to see if there are any others.

If there are any others, post them to the site for me to see. Please...
0
 
LVL 1

Author Comment

by:maughanb
ID: 11736199
Thanks Guys..

CrazyOne - I dispise AdAware. I refuse to use it..
For Virsu Scan I have Used Both AVG and Norton. I cannot use any online services, because when I try to execute a program such as IE it does what I explained above... I presume the problem is to do with spyware/hijackers rather than I virus as such.

jdeclue....  This advice sounds good, I will try it soon and let you know..

Regards
0
 
LVL 9

Expert Comment

by:jdeclue
ID: 12362829
Split
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
The business world is becoming increasingly integrated with tech. It’s not just for a select few anymore — but what about if you have a small business? It may be easier than you think to integrate technology into your small business, and it’s likely…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question