Control Panel and Shell.exe missing

[comboy]

Hi all,

A friend has phoned me saying when she starts her p.c. she is getting a message saying that the Shell.exe is missing, also she is getting messages saying she is not the admin for the pc and can't perform certain actions (she is) and when she goes to start > settings Control panel is missing.
She can boot into safe mode and get into control panel and see that her account is still set as admin

I thinking virus but all AVG is finding is that her hosts file has been amended.

She did have a smitfraud infection a couple of months ago but successfully removed it with a tool from beeping computer.

Has anyone seen these actions and can you think of a stinger or two I can try??

Thanks in advance,


Graham

 

[electronicsfreak]

First off, download this antivirus below.

http://www.free-av.com

(be sure the site says avira antivir)

set it up as follows

This is to setup antivir after it has been installed.

Right click on the logo in the taskbar(a red square with a white umbrella), then left click configure. Towards the top left, you will see a box beside expert mode. Check this box. Now click the + beside scanner, and now the + beside scan. This will expand them.

Now click on scan itself to where it is highlighted. Now to the right under files, select the circle beside all files. Now click on action for concerning files. To the right, click the circle beside automatic. Now to the right of that, set primary action to repair and secondary action to delete. DO NOT check the box that says "copy file to quarantine before action".

Now click on archives to where it is highlighted. Make sure all boxes on this page are checked, if not check them. Now click on heuristic. To the right under win32 file heuristic, check the box beside "win32 file heurisitic", then click the circle beside medium detection level.

Now click the + beside guard and the + beside scan to expand them. Now click on scan to where it is highlighted. To the right under scan mode, check "scan when reading and writing". To the right of that under files, click the circle beside "all files".

Now click on heuristic to where it is highlighted. Check the box beside win32 file heuristic, and then click the circle beside medium detecion level. Now click ok and antivir is now setup for scanning.
________________________________

Now download avg anti spyware from the link below and set it to delete anything it finds

http://www.ewido.net

Now download ccleaner from the link below (if you have nero uncheck the box for it under programs)

http://www.filehippo.com/download_ccleaner/

(download latest version on the right top in the green)

Download this free registry cleaner

http://www.download.com/Eusing-Free-Registry-Cleaner/3000-2094_4-10658410.html?tag=lst-0-1

Now last , download hijackthis. On hijackthis, open it up, choose do a system scan and save a logfile and then post the logfile on here. Do not attempt to fix anything on hijackthis unless you know what you are doing as not everything it shows is bad.

Now to run the other programs, first open up and run ccleaner, let it remove all temp garbage from the computer.

Next open up avg anti spyware and run a full system scan with it. Then run a full system scan with antivir. Once done with that run the registry cleaner. Now run hijackthis and post the logfile on here.

There is a point in wisdom and knowledge that when you reach it, you exceed what is considered possible - Jason Schoon

 

[comboy]

Hi thanks for the reply,

I think the problem is sorted out as she had a visus in the AVG vault and when she deleted it problem has resolved it self.

I'm visiting her next week so will check out your list and run them on her pc for her.

Thanks again for the reply

Graham

 

[electronicsfreak]

If you can load in safe mode, put your system disc in , go to command prompt (start, run, type cmd and hit enter) then type sfc/scannow.

If that does not work, download sp2 from the link below and reinstall it.

http://www.softwarepatch.com/windows/xpsp2.html

There is a point in wisdom and knowledge that when you reach it, you exceed what is considered possible - Jason Schoon

 

[Mufasa182]

ElectronicsFreak I Did What You Said To Do I Downloaded All Those Programs now what ima kinda lost cuz my computer is acting lame it says i am not a administrator even though i am the only user on the computer i know it is spyware cuz it tells me spyware infection but i don't know what to do HELP PLEASE!

 

[electronicsfreak]

Mufasa, please start a new thread and then we can help you.

Thank you for your understanding.

There is a point in wisdom and knowledge that when you reach it, you exceed what is considered possible - Jason Schoon