Welcome screen, start menu, and desktop all vanished

[neverafretter]

I recently installed AVG to find and get rid of any viruses. It found many. I then restarted my computer and my welcome screen w/ all users, my start menu, and desktop all disappeared. I can only get to windows task manager. I cannot run regedit, msconfig, nor explorer.exe. I also cannot use system restore. I am running XP with SP3. Can anyone please help me?

 

[mflynn]

Boot to Advanced boot Menu and try Safe Mode.

If that don't work then try "Last Known good..

Get back with results. Do not try to run any virus scanner yet!

Mike

 

[neverafretter]

Thanks mflynn

I've tried both. Safe mode gives me the same issues (No desktop, no welcome screen, and can only navigate through task mgr).
"Last Known Good" did nothing as well. Still same issues.

 

[mflynn]

OK in Safe Mode using Taskmgr can you run cmd.exe to open a command prompt?

Mike

 

[neverafretter]

Sorry but I tried that as well and received an error message. Would you like me to try it again and post exactly what the error message states?

 

[mflynn]

No paste the below into the Taskmgr run

Paste following to Run command! This is System Restore

%SystemRoot%\system32\restore\rstrui.exe

Mike

 

[neverafretter]

Tried it an received an error message that stated "Windows cannot find %SystemRoot%\system32\restore\rstrui.exe"

 

[mflynn]

Ok hang loose i am preparing a download for you.

Do you have a flash drive to get something to the affected computer?

mike

 

[neverafretter]

Yes I do. I am here awaiting your next instruction.

 

[neverafretter]

Just so you know. I am on the infected computer now. I am able to get to firefox via the task manager.

 

[mflynn]

Download the below to a Flash drive

http://www.adrive.com/public/8830f7e29ab83c74995dee62cc4c4518432812a420dc0edae1c2c1291aa050de.html

On affected computer change the h: to the correct letter of your flash drive the paste to the taskmgr run

rundll32.exe setupapi,InstallHinfSection DefaultInstall 4 h:\dbfix.inf

Mike

EDIT: good do the above just make sure to correctly put in the path to the dbfix.inf.

 

[neverafretter]

I apologize Mike but can you be a bit more step by step. I'm not too tech savvy. Oh wait! I think I get it. Download the file, then in the script to paste, change the "h" to whatever letter the flash drive is?

 

[mflynn]

Yes but it don't have to be on a flash drive?

Mike

EDIT:
Download and run Daft from here:
http://www.adrive.com/public/1254353a6154412bf08c7702adbad74d110ab03e939f377680dd0c8b5b095143.html
Enable all


http://www.adrive.com/public/b80baf252367643492bde85794b5f0c4c9ae9b2b39423289d9ca5d0f58e30ebd.html

Rats Cheddar enable all

Mike

 

[neverafretter]

Sorry Mike. I sincerely appreciate your help, but I received the same error msg:
"Windows cannot find rundll32.exe setupapi,InstallHinfSection DefaultInstall 4 h:\dbfix.inf"
I then saved it to my second hard drive "G" and received the same thing with the exception of the letter change to "g".
I'm thinking I'm going to have to take it to a repair place, but I am going to at least wait until tomorrow to see if you or anyone else comes up with anything else.

 

[mflynn]

Check my last post and do the edit

Mike

 

[neverafretter]

Aggghhh!!! I was able to download, run, and enable all. The program asked me to reboot, so i did. Same problem. Nothing at all has changed.

 

[mflynn]

OK run both again and do not reboot then see if you can do this!

Do the TechSpot 8 steps: https://www.techspot.com/community/...lware-removal-preliminary-instructions.58138/

Mike

 

[neverafretter]

After 6 hours of scanning by the various suggested programs still the same thing.

 

[mflynn]

If you did all this scanning where are the logs you were supposed to post??!!

I need that Info. If you were able to do the entire 8 steps we can fix this.

After running Daft and RatsCheddar did you try to run Explorer again?

If you did get MalwareBytes and SuperAntiSpyware did you select and remove the found items or just exit.

Run MawareBytes and Super again Quick Scans on both and attach the logs back here!

Mike