Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: worries.nomore on April 28, 2006, 10:42:49 PM

Title: No desktop after full system scan
Post by: worries.nomore on April 28, 2006, 10:42:49 PM
Goodafternoon,

After Avast reported that I had a virus, I restarted my PC, Avast started up and performed a full system scan (before the actual boot of windows)

Now Avast asked me to remove some files - which I did.... - and now, no more desktop (only the picture) and no more explorer bar with the start options.

They only thing I can do is manually start up processes (via the task manager).
Also the safe boot option of Windows (XP Home SP2) gave the same result.

So probably I threw away files which are managing this.
Anybody knows which files I should replace/install?

Next to this, do you know if a log file is created, so that I can check which files I have deleted?

Thanks A LOT!!
Title: Re: No desktop after full system scan
Post by: CharleyO on April 28, 2006, 10:51:38 PM
***

Welcome to the forums, worries.nomore.    :)

Since you have XP, try using a restore point to go back a day or 2 to when you had a good functioning computer. Once done, do another scan with avast! and instead of deleting any files, send them to the Chest in avast. They will be safe there and can do no harm from the Chest. This way, the files can be recovered should they be needed to run your computer.


***
Title: Re: No desktop after full system scan
Post by: DavidR on April 28, 2006, 11:44:45 PM
Whilst I'm sorry if you have lost files, but avast doesn't automatically delete these files, you chose that option, there a number of other options available, delete is never a good first option.

Unfortunately there may not be any log entries since you were scanning prior to windows running so I'm unsure if that is true for the avast logging function. You can check the avast! Log Viewer and see if anything is in there or C:\Program Files\Alwil Software\Avast4\DATA\log\warning.log that may well just be the text data that the log viewer uses though.

There is a log file mentioned in the example image below (of avast boot scan) aswBoot.txt which may help.
Title: Re: No desktop after full system scan
Post by: worries.nomore on April 29, 2006, 12:00:24 AM
Thanks so far!! I found the log file and here is the interesting part:

04/28/2006 13:44
Doorzoeken van alle lokale stations
Bestand C:\Documents and Settings\Jan\Local Settings\Temp\smss.exe is besmet door Win32:Trojano-CK [Trj], Verwijderd
Bestand C:\Documents and Settings\Manon\Local Settings\Temporary Internet Files\Content.IE5\1GSVPLOL\udps[1].exe\[Upack] is besmet door Win32:Busan-E [Wrm], Verwijderd
Bestand C:\Documents and Settings\Tom\Local Settings\Temp\hsperfdata_Tom\2932 Fout 0xC0000022 {Access Denied}
Bestand C:\System Volume Information\_restore{79F0EBAE-0AEA-4C0E-B611-650C12643F3E}\RP1\A0000134.exe\[UPX] is besmet door Win32:VB-GW [Wrm], Verwijderd
Bestand C:\System Volume Information\_restore{79F0EBAE-0AEA-4C0E-B611-650C12643F3E}\RP1\A0000135.exe\[UPX] is besmet door Win32:VB-GW [Wrm], Verwijderd
Bestand C:\System Volume Information\_restore{79F0EBAE-0AEA-4C0E-B611-650C12643F3E}\RP1\A0000136.exe\[UPX] is besmet door Win32:VB-GW [Wrm], Verwijderd
Bestand C:\WINDOWS\csrss.exe is besmet door Win32:Trojano-CK [Trj], Verwijderd

Aantal doorzochte mappen: 10388
Aantal gecontroleerde bestanden: 143502
Aantal besmette bestanden: 6

First of all I am sorry, its in dutch  :P and you can see Tom, Manon and Jan has some trouble. (yesyes try to keep your PC clean with 6 kidzz)
Anyway, can someone look at this?
Probably the 'System Volume information' or the csrss.exe ....

Thanks so far.
Title: Re: No desktop after full system scan
Post by: DavidR on April 29, 2006, 01:36:30 AM
The c:\System Volume Information folder is a part of the system restore function and as such is protected by windows, the only way to clean infected _restore points is do disable system restore and reboot. This will clear ALL _restore points. Once you have disabled system restore, reboot, scan your PC again and if clear enable system restore.
Win XP-ME - How to disable System Restore (http://www.pchell.com/virus/systemrestore.shtml)

The files that have been detected (6) shouldn't have any effect on the problem with the missing desktop issue.

These tools can help with clearing temp internet files and other temporary files, ClearProg - Temp File Cleaner (http://www.clearprog.de/) or CCleaner - Temp File Cleaner, etc. (http://www.filehippo.com/download_ccleaner/).

If you haven't already got this software (freeware), download, install, update and run it, preferably in safe mode.
Ewido Security Suite (http://www.ewido.net/en/), this works well with avast and should also help keeping up with 6 kids downloading like there is no tomorrow.
Title: Re: No desktop after full system scan
Post by: Rick F on April 29, 2006, 04:55:45 AM
Here's a thought...

It's possible that the virus you had changed the way you view your desktop (as webpage?).Control Panel > Display > Desktop Tab > Customize Desktop > Web Tab.
If you see any entries that are checked, uncheck them. Click OK.
If you want to change the desktop background, do so now. Click OK. [/list]
Title: Re: No desktop after full system scan
Post by: worries.nomore on April 29, 2006, 10:07:45 PM
Goodevening again,

Thanks for all the advise.
I tried it all, but no solution...

So I had to reinstall the whole thingy (even the ' repair option'  of the XP installation was not an option)

Thanks for your replies  :)