Member Avatar for Chivers

I am unable to access any of my desktop icons, it also affects my active desktop.
Please help people, I have downloaded hijackthis and done a scan.

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 09:00:41, on 08/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Elements 5\PhotoshopElementsFileAgent.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Protective Stuff\F Secure\Anti-Virus\fsgk32st.exe
C:\Protective Stuff\F Secure\Anti-Virus\FSGK32.EXE
C:\Protective Stuff\F Secure\Common\FSMA32.EXE
C:\Protective Stuff\F Secure\Common\FSMB32.EXE
C:\Program Files\Kontiki\KService.exe
C:\Protective Stuff\F Secure\Common\FCH32.EXE
C:\Protective Stuff\F Secure\Common\FAMEH32.EXE
C:\Protective Stuff\F Secure\Anti-Virus\fsqh.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\PROTEC~1\SPYWAR~2\SPYWAR~1\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\Protective Stuff\Webroot Spy Sweeper v5.2.3.2120\Spy Sweeper\SpySweeper.exe
C:\Protective Stuff\F Secure\FSAUA\program\fsaua.exe
C:\Protective Stuff\F Secure\Anti-Virus\fssm32.exe
C:\Protective Stuff\F Secure\FWES\Program\fsdfwd.exe
C:\WINDOWS\system32\dllhost.exe
C:\Protective Stuff\F Secure\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\PROTEC~1\SPYWAR~2\SPYWAR~1\SpywareTerminatorShield.exe
C:\Protective Stuff\F Secure\Common\FSM32.EXE
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Protective Stuff\F Secure\FSGUI\fsguidll.exe
C:\Program Files\Kontiki\KHost.exe
C:\Program Files\MSN Messenger\livecall.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\PROTEC~1\SPYWAR~2\SPYWAR~1\SpywareTerminator.exe
C:\Protective Stuff\Hijackthis\HiJackThis_v2.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O2 - BHO: CInterceptor Object - {38D3FE60-3D53-4F37-BB0E-C7A97A26A156} - C:\P2P\Pando\PandoIEPlugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROTEC~1\STARDO~1\STARDO~1\SDIEInt.dll
O4 - HKLM\..\Run: [SpywareTerminator] "C:\PROTEC~1\SPYWAR~2\SPYWAR~1\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Protective Stuff\F Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Protective Stuff\F Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [SpySweeper] "C:\Protective Stuff\Webroot Spy Sweeper v5.2.3.2120\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [kdx] C:\Program Files\Kontiki\KHost.exe -all
O8 - Extra context menu item: Download with Star Downloader - C:\Protective Stuff\Star Downloader\Star Downloader\sdie.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - blank (file missing)
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {072039AB-2117-4ED5-A85F-9B9EB903E021} (NowStarter Control) -
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) -
O16 - DPF: {0AE0F5F9-8233-49A4-A3C8-004CE190787B} (BMSpeedCheck Control) -
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {43E839C5-E10F-443A-BC1F-F09CFD2ABC77} -
O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} - http://launch.gamespyarcade.com/software/launch/alaunch.cab
O16 - DPF: {7B41B7AC-3496-4C13-A70F-DE6B60A6A8A8} (MGAME manager Class) - http://www.legendofares.com/download/mgusamanagerv1001.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.5.0) -
O16 - DPF: {8FEFF364-6A5F-4966-A917-A3AC28411659} (SopCore Control) -
O16 - DPF: {9BF607E0-4CC1-4099-9A07-362C9E4FB090} (WStarter Control) -
O16 - DPF: {CFCBEE6F-BE54-4682-84F6-0E3FCDFAE3E2} (NowCAFE Control) -
O16 - DPF: {F0320816-41D9-49DD-B2F3-8E7B0AE32796} (AFCStarter Control) -
O16 - DPF: {F6E361B4-40F3-4C90-8A95-D95E0D8CBCD4} (MultiUpload Control) -
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) -
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: comcap - comcap.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Active File Monitor V5 (AdobeActiveFileMonitor5.0) - Unknown owner - C:\Program Files\Adobe\Elements 5\PhotoshopElementsFileAgent.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - Unknown owner - C:\Protective Stuff\F Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Protective Stuff\F Secure\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Protective Stuff\F Secure\FWES\Program\fsdfwd.exe
O23 - Service: FSMA - F-Secure Corporation - C:\Protective Stuff\F Secure\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: KService - Unknown owner - C:\Program Files\Kontiki\KService.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - - C:\PROTEC~1\SPYWAR~2\SPYWAR~1\sp_rsser.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Protective Stuff\Webroot Spy Sweeper v5.2.3.2120\Spy Sweeper\SpySweeper.exe
--
End of file - 8701 bytes

  • 2 Contributors
  • 2 Replies
  • 138 Views
  • 6 Hours Discussion Span
  • Latest Post Latest Post by Chivers

Dani AI

Generated

Notes for and : the HijackThis scan posted shows several broken shell/browser entries and at least one Winlogon notification pointing to a missing DLL. Broken shell hooks and overlapping real‑time security components frequently make Explorer hang or render desktop icons unresponsive. The following ordered troubleshooting plan helps isolate whether this is a shell/extension issue, a corrupted system file, or active malware — and aims to preserve your data.

Try these steps in order (stop when the problem is fixed):

  • Boot to Safe Mode first. If the desktop works there, a non‑Microsoft shell extension or a real‑time component is the likely culprit.
  • Restart Explorer to see if it recovers (Task Manager method is safest): end explorer.exe, then start it again. Or from an elevated command prompt run:
    taskkill /f /im explorer.exe
start explorer.exe
  • Run System File Checker to repair missing/corrupt OS files (XP will prompt for the install CD):
    sfc /scannow
  • Use Autoruns (Sysinternals) or ShellExView (NirSoft) to disable non‑Microsoft shell extensions, BHOs and Winlogon hooks that show “missing” or belong to unknown publishers. Reboot between changes and test the desktop.

Operational and safety notes: make a System Restore point and back up the registry before using HijackThis “Fix” or deleting registry entries. Do full scans with an up‑to‑date AV and a second‑opinion malware scanner in Safe Mode. If multiple real‑time products are installed, uninstall extras (running more than one realtime scanner can itself cause Explorer problems). If the issue is limited to one user profile, create a new local account to confirm profile corruption. As a last resort, back up personal files to external media and perform a clean OS reinstall.

Recommended Answers

All 2 Replies

Member Avatar for Serunson

what is ur computer spec please!
and what anti-virus programme are u running?

Member Avatar for Chivers

AMD Athlon 64x2 Dual Core 3800+
1.99 GHz 1GB Ram

F-Secure Anti Virus 2007

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.