Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

Been hit with a trojan and now my icons, start bar and explorer are gone

Updated: 09 Oct 2010 | 2 comments
RHIGNITE's picture
0 0 Votes
Login to vote
This issue has been solved. See solution.

It seems we've been hit with a nasty trojan and now my desktop icons, my start bar, and even my explorer.exe are gone. I have to use the task manager to access anything and that access is limited. I tried a system restore but unfortunately, it only offered a restore date that included the problems. I am in NO way computer savvy and would greatly appreciate any help. I've been able to update my Norton protection, but my it regularly reports that it is blocking intrusions. I looked in the security history and found that since August 31st there have been several quarantines. I will list them.

m7931o.dll (Trojan,Gen) on September 07, 2010
s3ei93179.sys (Hacktool.Rootkit) September 04, 2010
rbj.exe (Trojan.FakeAV!gen29) September 02,2010
g1iq31ce (Suspicious.Cloud) August 31,2010 10:49PM
mrnaosxecw.tmp (Downloader) August 31, 2010 10:48 PM
hlp.dat (Trojan.Bamital) Augusy 31, 2010 8:49PM
temp.tmp (Trojan.Bamital!inf) August 31, 2010 8:48PM
winlogon.exe (Trojan.Bamital!inf) August 31, 2010 8:27PM
Suspicious.Mystic August 31, 2010 8:26PM

I appreciate any guidance or help anyone would care to offer. Thank you!

System : Dell with Windows Xp Pro

Comments

Vikram Kumar-SAV to SEP's picture
07
Sep
2010
0 Votes 0
Login to vote
Thomas K's picture
08
Sep
2010
0 Votes 0
Login to vote

Try booting to Safe-mode with

Try booting to Safe-mode with netowrking, get the latest definitions for your Norton AV.

Run a Disk Cleanup (right-click the C drive, Properties, Disk Cleanup) - that will delete all the files that are in these temporary locations, as well as IE's temporary files, etc. Perform a full system scan in safe mode.

If that fails, then give the Power Eraser a try as Vikram suggests.

Best,
Thomas