Member Avatar for Leesa

Hi, I have the dreaded trojan vundo (C:\Windows\sys32.jkkjk.dll). Unfortunately i also have another big problem. While following the symantec removal instructions, I unchecked system restore, disabled norton and the firewall and booted up into safe mode and instead of the usual F8 method I decided to do run - msconfig - boot.ini - safeboot. The computer now only boots up in safemode with a completely blank screen (apart from the 4 safe mode tags and the microsoft windows xp sign). I cannot do anything - there are no icons no taskbars no start button or anything. if i do cont/alt/del i get the task manager which has the following processes running. No applications show.
taskmgr.exe
svchost.exe
svchost.exe
svchost.exe
lsass.exe
services.exe
winlogon.exe
csrss.exe
smss.exe
System
System Idle Process

Please somebody help, I have exhausted my small brain trying to work this out.

HP mx70 Pavilion pentium 4 / 512mb RAM running Windows XP SP2

  • 4 Contributors
  • 5 Replies
  • 510 Views
  • 1 Week Discussion Span
  • Latest Post Latest Post by chrisbliss18

Dani AI

Generated

Blank Safe Mode desktop (only the Safe Mode tags and no taskbar/icons) usually means the Windows shell never started or was blocked — either by the SafeBoot configuration, a damaged profile, or malware that altered shell/startup settings. and are correct that clearing the SafeBoot/msconfig change is the obvious first step; if that has already been done and the desktop is still blank, the following targeted checks are the next logical moves.

From Task Manager (Ctrl+Alt+Del) use File → New Task (Run...) to start the shell manually by entering:

explorer.exe

If the desktop and Start menu return, run system checks and an up-to-date anti‑malware scan while in Normal mode. If Explorer fails to start or immediately disappears, run regedit from the same New Task dialog and export then inspect the key:

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Confirm Shell is explorer.exe and Userinit is C:\Windows\system32\userinit.exe. Also examine the Run keys under HKLM and HKCU for suspicious entries. Always export the key before changing it.

When malware is suspected (the original thread mentions a trojan), avoid blind deletion of DLLs. Use a known-clean rescue environment or a current on‑demand scanner (rescue CD/PE or reputable removal tools) to remove active infections, or rename suspect files from Recovery Console if necessary. If cleanup fails, back up personal files from Safe Mode or a live CD and perform a repair install or clean install as a last resort.

Notes and cautions: export registry keys before edits, do not delete system files without verification, re-enable System Restore after cleanup, and consider running Autoruns/SFC to verify system integrity. These steps complement the msconfig advice already posted by and .

Recommended Answers

All 5 Replies

Member Avatar for nanosani

Start a new task in task manager .... msconfig... uncheck the safe mode option and then try again.

Member Avatar for Usef Norouzian

Here is what you should do: At that blank screen, keep down CONTROL-ALT keys and hit DEL key (<cont><alt>del). Wait until a window opens. Click on FILE, then click on NEW TEASK(RUN..). Wait until a window opens. If this window in under the TASK Window, just close (X-out) the TASK window. Now, uncheck mark the line that says BOOT.., usually it is the first line. Click on APPLY, click on OK, wait until it says RESTART. Click on RESTART, and you are done. Please let me know if this worked for you.
Usef Norouzian

Member Avatar for Usef Norouzian

While in the blank screen-safe mode, hold down CONTROL-ALT keys and hit DELETE key to open WINDOWS TASK MANAGER, click on FILE, click on NEW TASK (RUN..) to open CREATE NEW TASK, type in MSCONFIG (if it is not already there), click on OK, close WINDOWS TASK MANAGER, you will see SYSTEM CONFIGURATION UTILITY, click on BOOT.INI, uncheck /SAFEBOOT, click on APPLY, click on OK, click on RESTART. You are done!! Please be patient, and wait, these steps may proceed slowly as if it is not responding.

Member Avatar for Usef Norouzian

HELP!!!! At the IE Outlook Express email screen, I clicked on MESSAGE, then I clicked on the CREATE RULE, and created a few rules to a few emails. In one case, I entered a wrong email address by mistake. How can I go back and edit it (correct it)?
Many thanks

Member Avatar for chrisbliss18

HELP!!!! At the IE Outlook Express email screen, I clicked on MESSAGE, then I clicked on the CREATE RULE, and created a few rules to a few emails. In one case, I entered a wrong email address by mistake. How can I go back and edit it (correct it)?
Many thanks

Start your own thread.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.