What kind of virus does this ?

\(Nick S\)

Hi guys,

This one is absolutely confusing the Hell outta me.

I recently ' aqquired ' what must be some form of browser
hijacker/re-director , that upon using searches in Google often sends me
somewhere using this search engine - partners.mamma.com or various trojan
anti virus sites.
Since discovering this problem , 3 days have gone by and now the pc's
performance has slowed down to a crawl with some programs taking forever to
load up and photos in a viewer program called ' Thumbs plus ' not loading
the thumbnails at all . I'm a semi-proffessional wildlife photographer and
really need my pc for my work and this has basically made the past few days
a nightmare.
To add insult to injury, I now find that the Recycle Bin is completely
inaccessable . Not only have the words ' Recycle Bin' vanished from the
desktop, leaving only the icon , when I right click on it , I get the option
to either : cut/paste , create shortcut or delete .

I've scanned with Norton, AVG , Adaware, Spybot , Remove-It and most
recently Super Anti Spyware ,which did find 2 Trojans , but has not made any
difference. All were done in Safe Mode too.

I'm almost ready to reformat , but I have so many programs and devices
installed, it would take me a week to put it all back on again .

If anyone has any other suggestions , that would be a massive help.

PS. I'm just about to scan with Multi AV , and then try Trojan Hunter.

Cheers,

Nick

David H. Lipman

From: "(Nick S)" <.............>

| Hi guys,
|
| This one is absolutely confusing the Hell outta me.
|
| I recently ' aqquired ' what must be some form of browser
| hijacker/re-director , that upon using searches in Google often sends me
| somewhere using this search engine - partners.mamma.com or various trojan
| anti virus sites.
| Since discovering this problem , 3 days have gone by and now the pc's
| performance has slowed down to a crawl with some programs taking forever to
| load up and photos in a viewer program called ' Thumbs plus ' not loading
| the thumbnails at all . I'm a semi-proffessional wildlife photographer and
| really need my pc for my work and this has basically made the past few days
| a nightmare.
| To add insult to injury, I now find that the Recycle Bin is completely
| inaccessable . Not only have the words ' Recycle Bin' vanished from the
| desktop, leaving only the icon , when I right click on it , I get the option
| to either : cut/paste , create shortcut or delete .
|
| I've scanned with Norton, AVG , Adaware, Spybot , Remove-It and most
| recently Super Anti Spyware ,which did find 2 Trojans , but has not made any
| difference. All were done in Safe Mode too.
|
| I'm almost ready to reformat , but I have so many programs and devices
| installed, it would take me a week to put it all back on again .
|
| If anyone has any other suggestions , that would be a massive help.
|
| PS. I'm just about to scan with Multi AV , and then try Trojan Hunter.
|
| Cheers,
|
| Nick
|

Let us know how you make out.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

Russg

"(Nick S)" <.............> wrote in message news:
> Hi guys,
>
> This one is absolutely confusing the Hell outta me.
>
> I recently ' aqquired ' what must be some form of browser
> hijacker/re-director , that upon using searches in Google often sends me
> somewhere using this search engine - partners.mamma.com or various trojan
> anti virus sites.
> Since discovering this problem , 3 days have gone by and now the pc's
> performance has slowed down to a crawl with some programs taking forever
> to load up and photos in a viewer program called ' Thumbs plus ' not
> loading the thumbnails at all . I'm a semi-proffessional wildlife
> photographer and really need my pc for my work and this has basically made
> the past few days a nightmare.
> To add insult to injury, I now find that the Recycle Bin is completely
> inaccessable . Not only have the words ' Recycle Bin' vanished from the
> desktop, leaving only the icon , when I right click on it , I get the
> option to either : cut/paste , create shortcut or delete .
>
> I've scanned with Norton, AVG , Adaware, Spybot , Remove-It and most
> recently Super Anti Spyware ,which did find 2 Trojans , but has not made
> any difference. All were done in Safe Mode too.
>
> I'm almost ready to reformat , but I have so many programs and devices
> installed, it would take me a week to put it all back on again .
>
> If anyone has any other suggestions , that would be a massive help.
>
> PS. I'm just about to scan with Multi AV , and then try Trojan Hunter.
>
> Cheers,
>
> Nick
You haven't said what operating system. I would suggest a registry restore:
scanreg /restore on a command line. Probably best from a command line
boot (F8 on boot). If WinME or XP or maybe Vista, turn off system
restore before the scanreg. Sounds to me like a corrupt registry.
Pick the oldest registry choice you have probably, or, if you've saved
the registry (export with regedit), maybe you can restore from that.
Hmm... I think I'll go back up my registry.

Russg

scanreg /restore is for win98se, maybe winME.
In XP, if you haven't saved your registry ('exported' it with regedit, do
'all' not just the key you're on, check that it is megabytes and
not just a few hundred bytes, saved in my documents), if you haven't saved
your registry:
Probably use system restore, in control panel, performance and maintenence,
upper left. Then you can chose a date
to restore from. Maybe that would do it.
If you have specifically saved the registry and want to use that, you can
import it using regedit.
The idea is, if you restore to a week or so ago, when the desktop was
working right, it might fix
the problems you're having.

Nick S

Thanks for your help guys , but now I'm completely at a loss . I just
restarted my pc and now there are no icons, start button , nothing, even in
safe mode :-(

Any ideas would be most welcome right now , and please don't just say
re-format


"Russg" <russgilb@MUNGEsbcyahoo.net> wrote in message
news:frYDj.1014$p24.312@nlpi061.nbdc.sbc.com...
> scanreg /restore is for win98se, maybe winME.
> In XP, if you haven't saved your registry ('exported' it with regedit, do
> 'all' not just the key you're on, check that it is megabytes and
> not just a few hundred bytes, saved in my documents), if you haven't saved
> your registry:
> Probably use system restore, in control panel, performance and
maintenence,
> upper left. Then you can chose a date
> to restore from. Maybe that would do it.
> If you have specifically saved the registry and want to use that, you can
> import it using regedit.
> The idea is, if you restore to a week or so ago, when the desktop was
> working right, it might fix
> the problems you're having.
>
>

Nick S

I'm using Win XP


"Nick S" <nick@home.net> wrote in message
news:13u0qch9sjb76c4@corp.supernews.com...
> Thanks for your help guys , but now I'm completely at a loss . I just
> restarted my pc and now there are no icons, start button , nothing, even
in
> safe mode :-(
>
> Any ideas would be most welcome right now , and please don't just say
> re-format
>
>
> "Russg" <russgilb@MUNGEsbcyahoo.net> wrote in message
> news:frYDj.1014$p24.312@nlpi061.nbdc.sbc.com...
> > scanreg /restore is for win98se, maybe winME.
> > In XP, if you haven't saved your registry ('exported' it with regedit,
do
> > 'all' not just the key you're on, check that it is megabytes and
> > not just a few hundred bytes, saved in my documents), if you haven't
saved
> > your registry:
> > Probably use system restore, in control panel, performance and
> maintenence,
> > upper left. Then you can chose a date
> > to restore from. Maybe that would do it.
> > If you have specifically saved the registry and want to use that, you
can
> > import it using regedit.
> > The idea is, if you restore to a week or so ago, when the desktop was
> > working right, it might fix
> > the problems you're having.
> >
> >
>
>

David H. Lipman

From: "Nick S" <nick@home.net>

| I'm using Win XP
|

Hit; Ctrl+Alt+Del
Choose; Task manger

Go to; File --> New Task (Run)
Enter; explorer.exe

Does the Desktop and icons, etc., now come up ?

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

Nick S

Hi David,

Thankyou, I just tried that and still nothing :-(


"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:64_Dj.5836$sw3.255@trnddc06...
> From: "Nick S" <nick@home.net>
>
> | I'm using Win XP
> |
>
> Hit; Ctrl+Alt+Del
> Choose; Task manger
>
> Go to; File --> New Task (Run)
> Enter; explorer.exe
>
> Does the Desktop and icons, etc., now come up ?
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
>
>

David H. Lipman

From: "Nick S" <nick@home.net>

| Hi David,
|
| Thankyou, I just tried that and still nothing :-(
|


OK. Using the Task manger as previously described, execute; regedit.exe

Traverse to;
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

What is the contents of; Userinit

What is the contents of; Shell


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

Nick S

Ok,

Shell - REG_SZ Explorer.exe

Userinit - REG_SZ_Expand_SZ logonui.exe




"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:Bu_Dj.5109$i54.1715@trnddc05...
> From: "Nick S" <nick@home.net>
>
> | Hi David,
> |
> | Thankyou, I just tried that and still nothing :-(
> |
>
>
> OK. Using the Task manger as previously described, execute; regedit.exe
>
> Traverse to;
> HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
>
> What is the contents of; Userinit
>
> What is the contents of; Shell
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
>
>