Desktop icons are gone after winxp boots

By joshuamays
Apr 6, 2008
Topic Status:
Not open for further replies.
  1. having problems with fake spyware alert and other infected files. desktop turned blue with yellow writing saying spayware was detected on my computer. i ran searchbot s&d and it reported 318 infected files. was able to delete 191 of them, but 8 of them required a reboot. i rebooted and s&d prompted a message to the extent of there was a problem in the registry and asked if i wanted to delete it. i deleted it as well as 7 more of the similiar messages. something to the extent of c:\ cmd and other text.

    still have spyware on my pc. when i try to login as admin after windows boots and i get to my desktop screen it just stays. i can still move my mouse around, but the icons are gone. task manger is nonfunctioning. it says its been disabled by administrator. it tries to boot the cmd prompt when getting to my desktop. message says the system file is not suitable for running ms-dos and microsoft windows applications.

    i have access to another networked pc if it is need to help with this fix.

    thx
  2. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    This thread should have been created in Security and the Web

    Download Smitfraud Fix
    http://siri.urz.free.fr/Fix/SmitfraudFix.exe

    Clean:

    Reboot your computer in Safe Mode
    (before the Windows icon appears, tap the F8 key continually)

    Double-click SmitfraudFix.exe

    Select 2 and hit Enter to delete infected files.

    You will be prompted: Do you want to clean the registry ? answer Y (yes)
    and hit Enter in order to remove the Desktop background and clean registry keys associated with the infection.

    The tool will now check if you are infected. You may be prompted to replace the infected file (if found): Replace infected file ? answer Y (yes) and hit Enter to restore a clean file.

    A reboot may be needed to finish the cleaning process. The report can be found at the root of the system drive, usually at C:\rapport.txt

    Optional:

    To restore Trusted and Restricted site zone, select 3 and hit Enter.
    You will be prompted: Restore Trusted Zone ? answer Y (yes) and hit Enter to delete trusted zone.
    ----------------------------------------------------

    Additional Steps:

    (Start -Run)
    sc stop Messenger
    sc config Messenger start= disabled

    Restart

    Then continue to Viruses/Spyware/Malware, preliminary removal instructions
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.