Desktop icons are gone after winxp boots

[joshuamays]

having problems with fake spyware alert and other infected files. desktop turned blue with yellow writing saying spayware was detected on my computer. i ran searchbot s&d and it reported 318 infected files. was able to delete 191 of them, but 8 of them required a reboot. i rebooted and s&d prompted a message to the extent of there was a problem in the registry and asked if i wanted to delete it. i deleted it as well as 7 more of the similiar messages. something to the extent of c:\ cmd and other text.

still have spyware on my pc. when i try to login as admin after windows boots and i get to my desktop screen it just stays. i can still move my mouse around, but the icons are gone. task manger is nonfunctioning. it says its been disabled by administrator. it tries to boot the cmd prompt when getting to my desktop. message says the system file is not suitable for running ms-dos and microsoft windows applications.

i have access to another networked pc if it is need to help with this fix.

thx

 

[kimsland]

This thread should have been created in Security and the Web

Download Smitfraud Fix
http://siri.urz.free.fr/Fix/SmitfraudFix.exe

Clean:

Reboot your computer in Safe Mode
(before the Windows icon appears, tap the F8 key continually)

Double-click SmitfraudFix.exe

Select 2 and hit Enter to delete infected files.

You will be prompted: Do you want to clean the registry ? answer Y (yes)
and hit Enter in order to remove the Desktop background and clean registry keys associated with the infection.

The tool will now check if you are infected. You may be prompted to replace the infected file (if found): Replace infected file ? answer Y (yes) and hit Enter to restore a clean file.

A reboot may be needed to finish the cleaning process. The report can be found at the root of the system drive, usually at C:\rapport.txt

Optional:

To restore Trusted and Restricted site zone, select 3 and hit Enter.
You will be prompted: Restore Trusted Zone ? answer Y (yes) and hit Enter to delete trusted zone.
----------------------------------------------------

Additional Steps:

(Start -Run)
sc stop Messenger
sc config Messenger start= disabled

Restart

Then continue to Viruses/Spyware/Malware, preliminary removal instructions