Member Avatar for revolver

Hi pals i have this virus that once doubled clicked it disables some features in my start menu such that i cannot run the task manager ,i also cannot access the control panel and when i restart my comp i get a message box with details of somekind of advert or announcement.

it is only when i click on ok then the windows interface appears,i tend to think it is a virus that also attaches itself to windows logon file. please help me out since everytime it infects the comp the only solution i have is to format and reinstall windows xp again

  • 3 Contributors
  • 2 Replies
  • 135 Views
  • 17 Hours Discussion Span
  • Latest Post Latest Post by Suspishio

Dani AI

Generated

As described — a persistent pop‑up at logon plus disabled Task Manager and Control Panel — this pattern usually points to malware that hooks into Windows logon/startup and local policy settings so it runs before ordinary tools can remove it. Reinstalling from an infected image or restoring infected backups can make the problem return; the goal is to remove the hidden startup entry (or boot/MBR infection) and any infected backups or extra drives before restoring Windows.

Check these registry locations and values for unexpected changes (inspect with regedit from Safe Mode or an offline environment):

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
  Shell     = explorer.exe
  Userinit   = C:\Windows\System32\userinit.exe

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System
  DisableTaskMgr  = (should not be 1)

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
  NoControlPanel   = (should not be 1)

Practical cleanup workflow (do not restore any program files from backups until scanned):

  • Boot to Safe Mode with Command Prompt or create a bootable rescue disk on a clean PC and scan offline.
  • Use an autorun/startup inspector (Autoruns) to find and remove unknown entries that run at logon.
  • Repair system files with:
    sfc /scannow

    from a working Windows session (XP requires the original CD).

  • If a boot/MBR infection is suspected, run Recovery Console commands:
    fixmbr
fixboot
  • Search every partition and attached USB drives for autorun.inf and unknown EXEs; delete after scanning on a clean machine.

Verify installation media and any backups before reuse, disconnect nonessential drives during an install, and copy only personal documents (scan them first). Back up the registry before edits and proceed with care — incorrect changes can render Windows unbootable. This supplements the suggestions from and by focusing on the persistent-startup vectors that commonly cause repeated reinfection.

Recommended Answers

All 2 Replies

Member Avatar for vigneshvh

as i understand u r problem started after a virus detected into u r pc ,i hope u r c drive is nw installed with windows xp, u also said that after formatting c drive u r problem is not solved, but the problems related to virus on a perticular drive should be solved or removed while formatting and reinstalling,so try to format completelly the c drive and install an orginal version of operating system,then one more thing make shure u r boot sequence setings r also currect.

Member Avatar for Suspishio

Not sure I completely understood what vigneshvh was trying to tell you - but reading between his commas, he was probably supporting your own conclusion.

Rather than dick around with your PC (you could try an antivirus program such as Spybot and/or AVG which you'll need to download but your PC is in a crap state), you should boot up withthe Windows CD, reformat your hard drive and reinstall Windows.

Then make sure you have both Spybot and AVG protecting you.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.