Windows Recovery eliminated virus and recovered office, now back in the office hidden objects

Hello

I removed the Malware from Windows of a customers machine and then fixed recovery problems that caused removal regarding masking of the files linked on the desktop and programs.

It was successful and the machine is free of Virus/Malware
All this happened early last week.
On Friday of last week the customer called me to say he had intermittent problems where the machine would start sometimes and sometimes wouldn't.
Start fail meant it would go beyond the Welcome screen, but the Office would hang until he could use the machine, and then he could exercise a strong offshore and restart.

I made a visit, and as usual with intermittent problems the machine showed no defects.
I ran HiJackThis and could not see anything in the paper that pointed to more malware.

Today the customer asked me to watch the machine he was not starting properly.

What is happening now is the machine starts, gets past the opening screen, plays the startup sound and displays its normal wallpaper.
However, there are no icons on the desktop and the taskbar is non-existent. Make a right click on the desktop will not bring a menu, and if I plug a USB it does not show one menu AutoPlay.
The screensaver comes in after 10 minutes I thought it should and the task manager can be started with Ctrl-Alt-Delete.
If I boot safe mode all I get is a black screen with notifications of Mode without fail to every corner of the screen and nothing else.

Outside of the machine is not not usable it tells me that the machine correctly but does not show what it should.
Can someone let me know what is the best way to go from here.

I have supported Linux systems for three years so a command line is not a problem.

Ah, the operating system is Windows XP Home SP2 (sorry)

Mike

If your customer has used the power button, the system of NT (NTFS) files may be slightly damaged.

You must first run a chkdsk/r of a real installation of XP bootable XP Recovery Console or a bootable XP Recovery Console CD you can do (no XP media required) and be sure the file system is clean.

Since you are able to get into the Task Manager, take a look at the processes tab to see if explorer.exe is running.

If explorer.exe does NOT work, this is the reason why your office is (probably) just to show a background image.  The explorer.exe IS your way.  If explorer.exe is not running, all you will see is the background image.

If explorer.exe does not work, see if you can start it manually as follows:

In Task Manager, click file, new task, and in the Open box, enter:

%windir%\explorer.exe

Click OK and see if get you your office.  Of course explorer.exe must always be running.  If this isn't the case, you need to understand what the problem is and fix it.

If you have removed the malware, what applications did you use?

I would recommend this at some point:

Download, install, update and do a full scan with these free malware detection programs:
Malwarebytes (MMFA): http://malwarebytes.org/
SUPERAntiSpyware: (SAS): http://www.superantispyware.com/
They can be uninstalled later if you wish.

Tags: Windows

Similar Questions

  • I formatted my PC with windows vista and reinstalled but now it shows the wrong key. I use my purchased copy of the software in 2009

    original title: ACTIVATION of VISTA
    I formatted my PC with windows vista and reinstalled but now it shows the wrong key. I use my purchased copy of the software in 2009.

    You simply have to use telephone Activation...

    activation by telephone (call of the operator)
    Click the Start button
    in the search box, type
    SLUI 4
    and press the Enter key
    Follow the instructions - but when asked which service you need the ansafone phone, don't answer - it should oblige the operator to answer, who can deal with you
  • My computer is supported by windows, I have viruses and my computer freezing guard I need to format my computer can help you please?

    My computer is supported by windows, I have viruses and my computer freezing guard I need to format my computer can help you please?

    Original title: How can I format!

    Formatting disks and drives: FAQ

    Try 8.1 Windows, Windows 8 or Windows 7 hangs or freezes

  • I have OS Windows 7 (64-bit) and MS Office 2013.

    I have OS Windows 7 (64-bit) and MS Office 2013.

    I am installing BI Publisher Desktop (for the Word Plugin).

    What is the correct version.

    The plugins are stored in the admin folder and when those that are copied in my MS Office file I can't see them.

    Thanks for the help

  • My PC worked on Windows 8.1 with update 1 for some time, but is now back at the origin of windows 8.

    Original title:

    Derrick

    My PC worked on Windows 8.1 with update 1 for some time, but is now back at the origin of windows 8.

    I "lost" my Live Mail access and access to the photos.

    The version that it came loaded a whole mass of tiles/apps that I didn't need and I lost a number of applications and shortcuts, I had.

    How can I go back to the situation, I got up to 4 days ago please?.

    Derrick.

    Hi Derrick,

    You can manually check and install updates through Windows Update.

    Once the updates are made, you can install from Store Windows 8.1.

    For storage on Windows Live Mail folder, you can try the suggestions of the post http://answers.microsoft.com/en-us/windowslive/forum/livemail-email/how-to-recover-lost-storage-folders-in-windows/6fa3abe2-865a-e011-8dfc-68b599b31bf5

  • I blocked an e-mail in Windows Live and checked bounce it back to the sender, it landed in my junk e-mail folder. He actually returned to the sender

    Blocked an email to WL and it landed in the junk e-mail folder

    I blocked an e-mail in Windows Live and checked bounce it back to the sender, it landed in my junk e-mail folder. Has he actually returned to the sender, it was VERY important that she do? Thank you

    Windows Live questions belong in the Forum http://windowslivehelp.com/

    You are the same person as "SouthernAurora"?  This ID posted the exact same question.

  • Error: _ "Sidebar.exe - bad image"__windows/system32/sfc.dll is not designed to run on windows or it contains and error. " Try to install the program by using the original installation media or contact your system administrator. __

    Help, please!
    I started my computer today and it came with this error:

    "sidebar.exe - incorrect image.
    Windows/System32/SFC.dll is not designed to run on windows or it contains and error. Try to install the program by using the original installation media or contact your system administrator.

    I click on OK, then he said:

    "Acrotray.exe - incorrect image.
    Windows/System32/SFC.dll is not designed to run on windows or it contains and error. Try to install the program by using the original installation media or contact your system administrator.

    I click OK and then it says:

    "hpqtra08.exe - incorrect image.
    Windows/System32/SFC.dll is not designed to run on windows or it contains and error. Try to install the program by using the original installation media or contact your system administrator.

    Also I got an error report saying that windows sidebar stopped working.

    My computer is VERY slow in all the commands I give.
    I also tried to run the sfc (System File Checker command) and acts like he is going to run the program, but then just closed.

    Do you have an idea what is happening with my computer and what I can do to fix this?

    Thank you very much!

    Hi deacon829,

    You did changes to the computer before that happened?

    Step 1: Start the computer in safe mode and check if the problem persists, to do this, follow the steps below,

    Access the menu advanced startup options by turning on your computer and pressing the F8 key before Windows starts. In the advanced startup options select safe mode

    http://Windows.Microsoft.com/en-us/Windows-Vista/advanced-startup-options-including-safe-mode

    Step 2: If you try to install any application before this program, try to uninstall them.

    http://Windows.Microsoft.com/en-us/Windows-Vista/uninstall-or-change-a-program

    If this solves the problem, you can deduct that the demand is probably corrupted, damaged or incompatible. You can check with the manufacturer of the program for more information.

    Step 3: System Restore: System Restore to put the computer's system files to an earlier point in time.

    Look for steps to restore of the system in the link below:

    http://Windows.Microsoft.com/en-us/Windows-Vista/what-is-system-restore

    If the problem persists,

    Step 4: A scanner online for any threat and try to correct

    http://OneCare.live.com/site/en-us/Center/cleanup.htm

    Thank you, and in what concerns:

    Ajay K

    Microsoft Answers Support Engineer

    Visit our Microsoft answers feedback Forum and let us know what you think.

  • I can't seem to get the easy transfer Windows from Windows Vista to play with Windows 7 easy transfer and can't seem to install the transfer Windows 7 because it gives me only a 32-bit version to install.

    Windows Easy Transfer of 64-bit to 32-bit, or vice versa

    Hello

    I'm trying to fix my settings my current machien to a W7 VM user to make sure that I have the transfer settings and I get all the information I want.  My machine is 64 bit, but the VM is 32-bit.  I can't seem to get the easy transfer Windows from Windows Vista to play with Windows 7 easy transfer and can't seem to install the transfer Windows 7 because it gives me only a 32-bit version to install...

    How I have a 64-bit Windows 7 Easy Transfer to install and if I get one to install and build a transfer saved the data file has there 'restore' on a 32-bit Windows?

    George George P Botuwell, programmer

    Hi George P Boutwell,.

    Thank you for using answers Forum.

    I think that VMware has a 64-bit/function version. You will need to contact them to verify this.
    64-bit to 32-bit is not supported by Windows Easy Transfer, as far as I know.

    I hope this helps.
    Chris
    Microsoft Answers Support Engineer
    Visit our Microsoft answers feedback Forum and let us know what you think.

  • Causes of alphanumeric password iPhone SE keybord problem often react not so impossible to connect IOS 9.3.2,and so I went back to the code number 4

    Causes of alphanumeric password SE iPhone keypad problem often react not so impossible to connect IOS 9.3.2,and so I went back to the code number 4

    What is your question?

  • Support the contact - person I'm trying to communicate with a person that I paid for my subscription to the CC and it is to show that I have not bought the product.  The page to contact technical support is a labyrinth and continues to loop back to the sa

    I am trying to contact a person that I paid for my subscription to the CC and it is to show that I have not bought the product.  The page contact technical support is a labyrinth and continues to loop back to the same place without giving me any contact information! Help, please!

    Move the debate towards Adobe Creative cloud

    We have checked your account details, we see active participation of Photography Photoshop program.  Please make sure that you are connected with correct Adobe Id to Adobe.com to get it. You can check:Adobe Store | Order FAQ and your online payment

    To install Creative Cloud app - https://helpx.adobe.com/creative-cloud/help/install-apps.html, you can also Learn how to enable or disable Adobe applications from here.

    Kindly let us know in case you have further questions on your membership.

    I hope this helps.

  • Recently lost data because of the "Windows Recovery" XP virus

    Greetings,
    I have recently all my data because of the virus: "Windows Recovery. When I go to start, programs. everything is gone, also no photos, videos or music. I tried to restore the system to a different date, but it won't let me.  Moreover, the basket is empty. I removed the virus using "Malwarebytes... but impossible to recover the files. Please, any advice >
    Eric

    Hi Tropicguy,

    Like JoseIbarra said, it could be that the virus has caused your folders/files/programs show hidden.  I suggest checking to see if they are there, after doing the following:

    http://www.Microsoft.com/resources/documentation/Windows/XP/all/proddocs/en-us/WIN_FCAB_SHOW_FILE_EXTENSIONS.mspx?mfr=true

    I hope this helps!

  • Problems with windows after cleaning viruses and maleware.

    When I select any function after opening a program he leaves an image goast of the selection on the desktop until I restart. Also windows Explorer does not always. Need to close and restart until it works.

    Hi GeorgeCurtis,

    Method 1: Run the fixit available in the link below and check if that makes a difference

    Difficulty of broken desktop shortcuts and common system maintenance tasks

    http://support.Microsoft.com/mats/system_maintenance_for_windows/en-us

    Method 2: Auditor of file system (CFS) scan to fix all of the corrupted system files. To do this, follow the steps mentioned in the link below:

    How to use the System File Checker tool to fix the system files missing or corrupted on Windows Vista or Windows 7

    http://support.Microsoft.com/kb/929833

    Method 3:  Check with a different user profile

    If you do not have a different user account, you will need to create a (see link below). If everything works fine with a different user profile, you can infer that the user profile is damaged, click on the link to find out how to solve this problem.

    Create-a-user account

    http://Windows.Microsoft.com/en-us/Windows-Vista/create-a-user-account

    Difficulty of a corrupted user profile

    http://Windows.Microsoft.com/en-us/Windows-Vista/fix-a-corrupted-user-profile

    If still the problem persists, possibility that your computer is still infected with the virus

    Method 4: A scanner online for any threat and try to correct

    http://OneCare.live.com/site/en-us/Center/cleanup.htm

    Thanks and greetings
    Ajay K
    Microsoft Answers Support Engineer
    Visit our Microsoft answers feedback Forum and let us know what you think.

  • Vista upgrade to windows 7 does not and could not roll back to vista

    I bought a retail pack for the Windows 7 upgrade. I tried to install it yesterday evening - took to always (more than 4 hours) and froze in several places for more than an hour. At the last second stage (installation of windows features) - he crashed and closed. Reboot, it says "set to level failed - rolling to the previous operating system". After about 1/2 hour of rolling back - it crashed again - blue screen "STOP: c000021a.» System fatal error. Process of initial session or the processes of the system ended unexpectedly with an error code of 0 x 000000000 (0xc00000001 0x0010037c). system was stopped.

    the laptop (a Dell Studio 1555) cannot be started and is not an operating system. A terrible catastrophe for what seemed like a simple upgrade. I followed all the instructions in the Windows tutorial "upgrade Windows vista to windows 7 ', no warning that I should set out a clean boot which I've since found in blogs. I'm mad at Microsoft for releasing a product that will destroy my system when you follow their instructions.

    I obviously need to re - install an OS - my question is... I have an other laptop Dell Studio 1555 which came with windows 7 and I have the installation disc. Can I use this disc to do a fresh install on this laptop and use the product key that came with Windows 7 upgrade disc?

    Otherwise, it will be a long and difficult process of re - install Vista, upgrade to SP1 and upgrade to Windows 7, and then potentially have fail again. Please notify.

    Boot from the Windows 7 DVD
    Click Install now
    Accept the license agreement
    When the option is displayed to select a type of installation, click (Custom advanced)

    Select the disk partition where you want to install Windows 7 click Next.

    You will receive the following warning:

    The partition you have selected may contain files from a previous Installation of Windows. If so, these files and folders will be moved to a folder named Windows.old. You will be able to access the information in Windows.old, but you will be able to use your previous version of Windows.

    (At all costs, do NOT click on anything in Format, deletion or Partition name.) So even do a custom installation, your personal files are still kept. Click OK

    The installation program will now begin installation. During installation, your computer will be restarted several times.

    Once the installation is complete, you can complete the Out of Box experience as the choice of your laptop, create a username, password, your time zone. You can then proceed to download the latest updates for Windows and reinstall your applications and drivers.

    You can then retrieve your personal files from the Windows.old folder and reinstall all of your applications and drivers.

    http://notebooks.com/2010/11/09/how-to-recover-documents-music-and-email-after-upgrading-with-the-Windows-old-folder/

  • Improved LabVIEW 8 to 2013 and VI asked now to find the installation package for Run-Time Engine 7.0

    I recently installed LabVIEW 2013 on a computer (running Windows XP 32-bit).  The machine has also of LabVIEW 8 is installed, which is what I used before the upgrade.  I opened a VI has been created in LV8 and then saved it and all its subVIs in LV2013.  Now when I open the VI in LV2013 and try to run it, a window opens asking me to find the installation package 'lvruntimeeng.msi' for LabVIEW Run-Time Engine 7.0.  If I cancel this dialog box, and the subsequent message, indicating that the installion files were not, the VI appears (at least of the initial inspection) to function normally.

    I have closed LabVIEW, downloaded Run-Time Engine 7.0 on the site of NOR and tried to install it, but I received a message saying that it is already installed (as I had suspected).  How can I determine what part of the VI and/or its subVIs tries to make use of Run-Time Engine 7.0?  If not, how can I get LabVIEW to use instead the Run-Time Engine 2013 that was installed when I upgraded to LabVIEW 2013?

    Bob_Schor wrote:

    You run your VI of a project?  If so, you can watch the dependencies and get an idea of what live "in charge", you might have.  There may be "something old" in your code in LabVIEW 8, which was replaced in 2013, but ' plane still around "-If you can identify it, you can probably replace it with its"more modern"equivalent

    If you do not have the VI in a project, you can simply open LabVIEW, create a blank project and add your first level VI.  If all of your relevant screws are in a single folder, add the entire folder.  Now look in the dependencies.

    BS

    Yes, I run the VI from within a project of LV.  After some more research in the knowledge base OR I could solve the problem by using the following procedure:

    1. use the measurement and Automation Explorer to uninstall Run-Time Engine 7.0

    2. restart the PC

    3. open the project, close the project by choosing "save all".

    4. restart the PC

    5 reinstall the Run-Time Engine 7.0 using a file downloaded from ni.com

    6. restart the PC

    7. open the project, close the project by choosing "save all".

    8. open the project and run the VI.  No more messages on LabVIEW, trying to find the Run-Time Engine 7.0.

  • all am downloading is failing showing anti-virus does not yet now, I uninstalled the antivirus

    for a few days now, I was able to download something. Once I try a download, it fails near the end of it. It shows the virus scan failed. I felt that the problem was with my antivirus, so I uninstalled it. now I can't even download a new antivirus. I use vista and google chrome. Please help me thanks

    Hello

    What happens if you try to download using Internet Explorer?

    Here are a few reasons why you may receive the message:

    • Malware: If your computer is infected by malware, it can cause your download fails.
    • Malfunctions antivirus software: some antivirus programs support the analysis on access of files. If you have control over access, and it is enabled, disable download scanning temporarily until resolve you the problem with your antivirus software.

    Please refer to:

    https://support.Google.com/chrome/answer/2898334?hl=en

    Note: Antivirus software can help protect your computer against viruses and other security threats. Have a computer without any security software can cause a potential danger to your computer. So, be sure to activate security software once you are finished with the test.

    Please respond with more information.

Maybe you are looking for

  • whaoo ant + key

    I have a keys whaoo Ant + and I want to connect to my my Iphone 6 heart rate monitor. Whaoo key requires a 30 lightning to be connected to the iphone adapter 6 and I used an original Apple. Once inserted key is not recognized by Iphone 6. Has also ch

  • Satellite A210-14 - why I often get Bluescreen Error?

    I own a Toshiba A210-14 for about 3 weeks and got the 6 bluescreens now! Twice, he came that I transferred data from an external to the computer HARD disk portable HARD drive.Once after installing ICQ to my external HARD drive.And three other times,

  • Is their extreme Quality of Service (QoS) in apple option?

    Hello world Y at - it an option to enable QoS in extreme apple so that we give a VoIP? Thanks in advnace.

  • mix all the same songs of the artist

    All I seem to do is just mix the album. I would like to play all my Madonna songs. Not a single album, but all the albums I have for her. Thank you.

  • Envy 5660: envy 5660 scanning photos

    When I scan 4 x 6 or 5 x 7 and choose one of these dimensions, it scans the photo, but has about the same amount of space empty below the picture.  I have tried several settings but get the same thing every time.  would be nice not to have to crop th