PDA

View Full Version : Can't access My Documents or any start menu shortcuts...


-Psy-
01-08-2006, 12:57 PM
What the hell is going on? I can't access My Documents or anything else apart from programs and run from the start menu =/

I can access My Documents by choosing run but whenever I go to it from the start menu, explorer.exe just restarts and the desktop shows this message :S

http://img62.imageshack.us/img62/6194/billgatescangokillhimselfstupidbastardey7.th.jpg (http://img62.imageshack.us/my.php?image=billgatescangokillhimselfstupidbastardey7.jpg)

bbson john
01-08-2006, 01:44 PM
http://img62.imageshack.us/img62/6194/billgatescangokillhimselfstupidbastardey7.th.jpg (http://img62.imageshack.us/my.php?image=billgatescangokillhimselfstupidbastardey7.jpg)

Do you have a piece of magnifying glass?

-Psy-
01-08-2006, 01:48 PM
Stupid imageshack...

Anyway, I sorted that out.

But explorer still dies...

I can't run Windows Update because iexplorer can't load up...

Barney Fife
01-08-2006, 02:24 PM
Seems like you're having system files corrupted or memory issue. Either way I couldn't read what the image said and I'm shooting in the dark with this. If you're having EI boot problem then you must be having Windows Explorer problem too.
Memtest rams and if rams are OK then must be your OS kicked the puckett.

Good Luck.

-Psy-
01-08-2006, 02:29 PM
Hm, I'll try the memtest. Here is a hijackthis log.


Logfile of HijackThis v1.99.1
Scan saved at 13:22:25, on 01/08/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Opera\Opera.exe
C:\WINDOWS\explorer.exe
C:\Program Files\AntiVir PersonalEdition Classic\GUARDGUI.EXE
C:\Documents and Settings\Aaron_2\My Documents\Downloads\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O3 - Toolbar: ToolBar888 - {CBCC61FA-0221-4ccc-B409-CEE865CACA3A} - C:\Program Files\ToolBar888\MyToolBar.dll
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{7E458BAB-359F-4529-A47E-F5513892E9DA}: NameServer = 213.40.130.245 213.40.2.245
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe



And wtf is up with this trojan that keeps getting detected.

TR/PCK.Klone.G.20

It keeps trying to infect this: C:\WINDOWS\system32\winhld32.dll

It only detects it when I do a spyware check.

Barney Fife
01-08-2006, 02:32 PM
There you have it. It's good idea to install Anti-Virus software before you get infected, but once you're infected, format is the only way to go, since these Viruses/Trojans have clever way of hiding from detections.

Good Luck.

-Psy-
01-08-2006, 02:34 PM
Sorry? I have got av software. I have done for the past god-knows how long.

bbson john
01-08-2006, 02:37 PM
How about... Firefox?

-Psy-
01-08-2006, 02:45 PM
What about Firefox? I use Opera.

bbson john
01-08-2006, 02:46 PM
Shut my mouth off :|

-Psy-
01-08-2006, 05:13 PM
Meh. It was something completely unrelated that I installed months ago.

DivX :S