Re: I have to close my documents before my desktop appears!

From: Kelly (kelly_at_mvps.org)
Date: 10/10/04


Date: Sun, 10 Oct 2004 00:11:28 -0500

Hi Diane,

Some users have reported having the Worm_Dandi.A. You can run a free scan
from here: http://www.trendmicro.com/vinfo/virusencyclo/default2.asp

More info:

This problem can be caused by the DlDer Trojan. More information here:
http://www.sophos.com/virusinfo/analyses/trojdownloada.html

Checkpoints and suggestions:

Run: My Documents Folder Opens Upon Boot (for C:\) Right hand side - Line
255
http://www.kellys-korner-xp.com/xp_tweaks.htm

Go to Start/Run/Regedit and navigate to this key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon.

In the right pane under Userinit, Change the key that reads:
C:\Windows\System32\Userinit.exe,C:\Windows\System32\Userinit.exe

To: C:\Windows\System32\Userinit.exe,

Another checkpoint to consider:

Go to Start/Run/Regedit and navigate to these keys:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

If the folder in question is listed, place the entire path in quotes.

-- 
All the Best,
Kelly
Microsoft-MVP Windows® XP-Shell/User
2004 Windows MVP "Winny" Award
Troubleshooting Windows XP
http://www.kellys-korner-xp.com
"Diane" <anonymous@discussions.microsoft.com> wrote in message 
news:352701c4ae55$8e78ef80$a601280a@phx.gbl...
> Yes, I updated virus software, in fact that day. I called
> tech support for a hardware issue, and while I was on the
> phone with him, I said by the way can you tell me how to
> fix this with my documents. Was on the phone an hour, he
> couldn't get it fixed. Have run a virus scan at least
> twice since then (full scan) have even defraged. Am
> consistantly running an update on my virus definitions. I
> hope this fix works. Thank You.
> original message----
>>Diane wrote:
>>
>>> I have tryed everything, called tech support, he had me
>>> go into msconfig, try everything possible to keep them
>>> from appearing. Even go as far as a system restore.
>>> Amazingly that did not work either. I have windows XP
>>> professional, and all the desktops, suddenly have this
>>> problem. All you have to do is close them, then the
>>> desktop comes up. Not really a huge problem,  just
> really
>>> annoying, Could someone please tell me how to keep this
>>> from happening all the time. Have no idea how this
>>> happened.
>>>
>>> Thank you
>>
>>Are you saying that the My Documents folder opens on
> startup on all the
>>desktops? Then I think you have a virus and all the
> computers on the
>>network are infected. Take the network down immediately
> and scan each
>>computer with a current antivirus (version no earlier
> than 2003) using
>>updated virus definitions in Safe Mode. If the machines
> are clean, here
>>is a link to a fix by MVP Kelly Theriot:
>>
>>http://www.kellys-korner-xp.com/xp_abc.htm
>>
>>Click on "M" for My Documents and scroll down to your
> issue. But I
>>really think you'd best check for viruses first.
>>
>>Malke
>>-- 
>>MS MVP - Windows Shell/User
>>Elephant Boy Computers
>>www.elephantboycomputers.com
>>"Don't Panic!"
>>.
>> 


Relevant Pages

  • Re: virus? hacked?
    ... > Well, if you're concerned it might be a virus, run a virus scan after COLD ... > four computers downloaded a faulty antivirus update at the same time, ... the hardware configuration in windows was changed. ...
    (microsoft.public.security)
  • Re: Shut down in 1 minute
    ... >>Fasser Virus, but haven't been able to find any info on ... Install an antivirus program and keep it updated.* Install a firewall. ... Go to Windows Update and apply all security patches for your ... Elephant Boy Computers ...
    (microsoft.public.security.virus)
  • Re: virus? hacked?
    ... Well, if you're concerned it might be a virus, run a virus scan after COLD ... could also be a hardware driver that loads early on in the boot process. ... Startup Cop to disable absolutely everything and see if Windows will boot up ... four computers downloaded a faulty antivirus update at the same time, ...
    (microsoft.public.security)
  • Re: Windows xp home
    ... bios anti-virus item unchecked in the bios so that the virus wrote a script ... : "Creative Design and Computers" wrote: ... Putting the drive back in her tower and trying to access windows, ...
    (microsoft.public.windowsxp.general)
  • Bobax.C
    ... Other files containing the virus have been ... W32.Bobax.C is a worm that exploits both the LSASS ... While this threat may execute on Windows 95/98/Me/Server ... Virus Definitions * ...
    (microsoft.public.windowsxp.security_admin)