Solved

Clicking My Computer restarts Explorer

Posted on 2004-08-06
8
199 Views
Last Modified: 2011-08-18
Windows 2000 Pro SP4

Hi, I have a client how got a nasty infection of Spyware (over 200 items). and ever since, any time you click on a link such as My Computer or Internet Explorer, Windows Explorer just seems to restart. i.e. the screen goes blank (not including the background) and then just goes back to the desktop.


I have removed most of the spyware using spybot, and removed a few viruses also..  

I would like to know if anyone has come across this problem before and if a solution is available without Reinstalling Windows.
0
Comment
Question by:maughanb
  • 2
  • 2
8 Comments
 
LVL 44

Expert Comment

by:CrazyOne
ID: 11734256
It comes across like there is still a virus

Double Check for viruses
Online Scanners

 Norton Web Services  
Virus Detection provides an analysis of your results and offers suggestions for further action. It does not examine compressed files or fix infected files.

When Symantec receives notification about a new virus, we develop and post a solution as quickly as possible. We are committed to providing swift responses to all virus threats, including Trojan horses.
http://security.symantec.com/sscv6/vc_about.asp?ax=0&langid=ie&venid=sym&plfid=23&pkj=BSZNTGXIBVEMBQAUWZK

======================
 Trend Micro HouseCall        
http://housecall.antivirus.com/housecall/start_corp.asp

======================
eTrust Online antivirus scanner
http://www3.ca.com/virusinfo/virusscan.aspx
======================

PC Pitstop Virus Scan
When the download completes, you will receive an ActiveX security dialog for the PC Pitstop virus scanner. Click Yes to install the scanner and proceed to the virus scan.

If you are currently running an antivirus package such as Norton Antivirus, it may detect our own virus detection file as a virus. If this occurs and you wish to use our scanner, please (temporarily) disable any active background virus checking software before scanning, or add our signature file (PAV.SIG) to the scanner's file exclusion list
http://www.pcpitstop.com/antivirus/AVLoad.asp
0
 
LVL 44

Expert Comment

by:CrazyOne
ID: 11734263
You used SpyBot but use it in conjuction with this product AdAware AdAware
http://www.lavasoftusa.com/
0
 
LVL 9

Accepted Solution

by:
jdeclue earned 350 total points
ID: 11734629
Sometimes these spyware programs will use an "application hook" into explorer. By doing so they can start themselves whenever explorer runs, but they run under the process of explorer, making it very unstable. Look at the following registry key within regedit.  P.S.  When you look in the key, and see BitBucket and NukeOnDelete, leave them alone, everyone thinks they must be bad but they are part of the operating system. ;)

My Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks

You would typically see 2 entries; the first being default, and the second being a long string with many characters.

Then look in;

My Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations

You should see an entry for Applications, intl and XMLLookup, look to see if there are any others.

If there are any others, post them to the site for me to see. Please...
0
 
LVL 1

Author Comment

by:maughanb
ID: 11736199
Thanks Guys..

CrazyOne - I dispise AdAware. I refuse to use it..
For Virsu Scan I have Used Both AVG and Norton. I cannot use any online services, because when I try to execute a program such as IE it does what I explained above... I presume the problem is to do with spyware/hijackers rather than I virus as such.

jdeclue....  This advice sounds good, I will try it soon and let you know..

Regards
0
 
LVL 9

Expert Comment

by:jdeclue
ID: 12362829
Split
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Mystery using IF with Concatenate using MS Excel 10 673
P2V conversion for Windows NT 4.0 Server 2 2,236
Windows 2000 Print Server 2 1,045
Server 2012R2 Foundation and Server 2000 3 124
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
SEO can be a real minefield to navigate, but there are three simple ways to up your SEO game just be re-assessing your content output.
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question