Flashing icons and taskbar

[keepingbusy]

Hi

One of our computers has been hit by a virus even though we have AVG and Malware Bytes installed. We ran a check and found a few lurking within the computer. These have now been cleared by eventually managing to start the task manager, using a command prompt and running Spybot via a DOS prompt.

Now whilst this appears to have cleared the viruses, the problem we have is the fact that the icons on the desktop (not the wallpaper) and the taskbar is flashing every 1 - 2 seconds.

I have done some research via Google and found the advice for using restore points so we did that way back to a couple of months ago to be on the safe side.

This has not cured the problem so my question is:

Does anyone know a sollution to this problem as it is almost impossible to start a browser and any other software (other than via a dos prompt) on the computer which is an ACER with Windows Vista.

Thanks in anticipation for any advice.

Visual FoxPro Version 9
Windows 7

http://www.customsoftware.co.uk

 

[G0AOZ]

It would be my guess that you've not yet cleared out all the malicious software from the operating system.

You could try something like an on-line scanner, e.g.

http://housecall.trendmicro.com/uk/

My way of doing it is to attach the compromised hard drive to a known clean system, as a secondary drive. Then use the clean system's scanners to interrogate and disinfect the secondary drive.

ROGER - G0AOZ.

 

[keepingbusy]

Hi Roger

Ok that sounds like one option and a good place to start.

I'll see what other posts we get and try out your option Monday

Thank you for your time.

Visual FoxPro Version 9
Windows 7

http://www.customsoftware.co.uk

 

[linney]

Do you get the same behavior from Safe Mode? In fact running some of scans from Safe Mode might find a few more nasties.

Do any other users see this behavior?

Do you see it if you disable the Display Adapter via the Device Manager?

Windows Aero Glass visual effects are not working or displayed

http://support.microsoft.com/gp/aero_effects_not_working?entrypoint=WHHT

 

[keepingbusy]

linney

Do you get the same behavior from Safe Mode? In fact running some of scans from Safe Mode might find a few more nasties.

Yes. We have tried using Safe Mode, load last known best configuration etc all with no success.
{quote]Do any other users see this behavior?[/quote]
There is only one user account on this computer as it is a standalone and not on a network.

Do you see it if you disable the Display Adapter via the Device Manager?

Haven't tried that yet but will do on Monday

Thanks for your post.

Visual FoxPro Version 9
Windows 7

http://www.customsoftware.co.uk

 

[linney]

You should also try creating another user to test with otherwise you are ruling out the possibility of it being a corrupt user profile as a cause.

 

[keepingbusy]

Ok, we have tried the suggestions and still no luck. We were unable to create a new account because of the flashing icons and taskbar. When I did eventually manage to open the Task Manager and choose new task, we used command prompts (

http://en.kioskea.net/faq/403-command-prompts-for-windows)

to start up the relavant function.

For example, CONTROL USER PASSWORDS opened up the accounts section. We tried to create several accounts that appeared to work but on boot up they were no where to be seen and also not found in Manage Accounts.

So having tried all the options we can think of, I'm now looking for any other suggestions or avenues we can go down to resolve this issue.

By the way, we have tried safe mode and normal, ran various anti virus progs via a command prompt, all of which haven't helped (albeit they did find some viruses previously but now reporting the system as "No viruses found" etc).

I also tried to download IE9 Beta, service pack 2 (already installed) in case it added some additional code that might stop the flashing icons etc but the system wont run the exe files.

I'm not sure if it's worth scanning the hard drive away from the computer but if someone thinks otherwise, then please say.

I suppose the final resort is a fresh install, but we are hoping there may be another way.

Thank you in anticipation.

Visual FoxPro Version 9
Windows 7

http://www.customsoftware.co.uk

 

[G0AOZ]

I'm still of the opinion it's an infection of some kind. My method of cleaning an infection by attaching the drive to another machine, works virtually every time for me. And I do this for a living!

Trying to run an antivirus programme on a machine that is already compromised can often result in failure. Clever malicious code either circumvents the AV programme, or has already partially disabled it. Hence you don't find anything. The user THINKS the AV programme is doing its stuff because there are quite often no error messages when it's running.

However, you will have to ultimately weigh up the pros and cons of spending further time scanning, against lifting off data, wiping the disk, reinstalling Vista, drivers, progs, updates, etc., etc.

ROGER - G0AOZ.

 

[keepingbusy]

Hello Roger

My apologies I completely missed your suggestion in your first post (hyperlink).

We will try this out tomorrow and post back.

Visual FoxPro Version 9
Windows 7

http://www.customsoftware.co.uk

 

[flyboytim]

There is only one user account on this computer as it is a standalone and not on a network.

[!]!!!!![/!]

It certainly appears to be on a network - i.e. the internet, or is it?

Otherwise -
How is the malware getting onto the machine? - USB stick? CD? Floppy disk? from some uncontrolled source or sources?

In the days before the Internet or office networks, when most PCs were standalone, viruses spread via floppy disks (particularly bootsector viruses) were common and wasted a lot of time. We would set up a sandbox machine, booted from a write-protected floppy disk containing an antivirus program to check out disks before they went into any working PC. We called it the "Condom".

If a floppy proved to be infected, the source machine was blacklisted until disinfected and proven clean.

How, and how regularly, are the anti-malware programs updated?

Some suggestions:

Is(are) the user(s) in need of training? Find out what the internet history on that machine has been. Change internet security policy re: cookies, downloads, host blocking, adware etc.

Visit the following page about rescue CDs:

http://www.techmixer.com/free-bootable-antivirus-rescue-cds-download-list/

Choose a couple of different antivirus utilities, and burn rescue CDs on clean, trusted machines.

Boot from a CD and run a thorough antivirus scan (different Antivirus from the installed antivirus on the PC).

Consider an immune operating system (as far as most common malware is concerned) such as one of the many Linux distros, and run Vista as a Virtual machine under VMWare or VirtualBox. If it becomes infected, just reload an image copy of the clean VM.

 

[keepingbusy]

We ran a bootable AVG anti virus CD which found no viruses or threats. We have tried other anti virus programs all of which found no threats.

We took the advice and also removed the hard drive and used a docking station to test it via a USB port on another computer. This also showed no threats etc.

I am more swayed towards the fact that this could now be a graphics issue but due to the continuous flashing of the icons and taskbar it is impossible to start any programs to try and resolve this issue. As mentioned, I have also tried to run the IE9 exe file to see if that would update anything but this file would not run.

As a last resort, I think we will have to go for a reformat and reinstall the whole system from fresh.

Unless anyone else has a miracle....

Thanks for your posts guys.

Visual FoxPro Version 9
Windows 7

http://www.customsoftware.co.uk

 

[keepingbusy]

Just an update to this thread: Unfortunately we were unable to resolve the flashing icons and taskbar and needless to say had great difficulty in trying start programs to resolve issues.

To resolve the issue, we did a fresh install using the system files stored on a partition.

For those reading this thread, we had an ACER desktop, when you boot up, wait for the ACER white screen which also shows options for F2 and F12 keys. Once at that screen press and hold ALT and press F10.

This gives you several options, one of which is to reset the system back to factory settings.

A word of caution here though and one we were aware of is that your hard drive (C:\) will be reformatted and everything will start over.

The computer is running like new, just a shame we couldn't pin point what the actual problem was.

Thanks again to those who posted on this thread.

Visual FoxPro Version 9
Windows 7

http://www.customsoftware.co.uk