re: Question about 'How do get the taskbar and desktop back if Explorer crashes'
Tuesday, January 13, 2004 at 7:29 pm
Windows XP Annoyances Discussion Forum
Posted by Nick
(1 messages posted)
Hi, the 'random process' you mention closing - winupd.exe - is itself a trojan.
I'm currently searching for info on it cuz i was infected half an hour ago, that's
how i arrived at this post. I noticed it when my firewall suddently asked if i wanted
to let winupd.exe access the net.
As far as i know, in my case, it was delivered by malicious java script called js_exception.t
[two instances of which are still sitting in my temp internet folder] after a winhelp
box appeared in my taskbar like a stubborn popup, which caused 'winupd.exe'
and 'regcpm32.exe' to end up residing in my C:\Windows\System\. folder [they
appear as hidden files, so be sure to have the 'show all files' option selected in
windows explorer view/folder options/view to see them. you'll notice regcpm32.exe
at the bottom being updated/modified/refreshed every five seconds with it's modified
date altering to a random day each time] It seems this exe and winupd.exe are installed
together.
i've managed to determine two regkeys which they create and recreate if the exe files
aren't removed, they are MsStartOptimizer & Regcompress in both 'HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run'
and ''HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Runservices'.
There may be more reg entries associated and/or exe's, and more means of delivery,
but this is all i know at present. Hopefully it's helpful. I'll now clean my machine
of the exe's and then the reg entries, in that order, and if anything weird happens
i'll post it here.
Nick
On Thursday, October 9, 2003 at 9:14 am, Xavier wrote:
>I have a question about How
>do get the taskbar and desktop back if Explorer crashes:
>
>I have a similar problem to the one listed in the article. On log-in into windows
>xp, my wallpaper appears but nothing else. No taskbar, no icons.
>
>I don't think this is due to a crash of explorer because when I check with ctrl-alt-delete,
>it's still running.
>The only way I found to make everything appear is to close a random process (I usually
>close winupd.exe). Thene everything goes back to normal.
>
>However, I'd like to not have to do this every time.
>
>I checked for viruses, and while I found 1, a trojan, I got rid of it and repaired
>the damages, following symantec's instructions. Plus, my problem has nothing to
do
>with the symptoms described for the virus.
>
>Could anyone help me ?
>
>Thank you,
>Xavier
|
All messages in this thread [show all]
 |  | re: Question about 'How do get the taskbar and desktop back if Explorer crashes' (Nick: Tue, Jan 13, 2004, 7:29 pm) |
| |
| |
| |
Return to the Windows XP Discussion Forum
|
|
