Conficker made my IEXPLORE disappear!

Custom Search

Hack in The Box
Experts Galaxy
UK Cheapest Hosting
DJ Software
Scanpst.exe
A3 Multifunction
Electricity Prices
Texas Electricity
Electricity Rates in Texas
Electric Companies in Texas
Web Design Geelong
SellSimple
MSN
Wallpapers
NewsApp Portal
Recover files from recycle bin

[Welcome to SCforum.info - Security [CENTRAL] Forum]

Welcome to SCforum.info - Security [CENTRAL] Forum, a home of the SCF Community devoted to provide Computer related News, Alerts, Downloads and FREE Help in such a way that even the novice computer user can understand.

Getting started using our community is extremely easy, check the two steps below:

Step 1: Create an account by clicking here and wait for approval from Administrator. It's completely free with no hidden strings attached.

Step 2: If you have a computer problem and need some help, or just want to take part in opened discussions, simply browse Forum. Once you *Register an account, you can quickly post your questions and comments.

(*Registered Members get: free support, also, they can communicate privately with other members via PM, removal of this message, see fewer ads and much more...)

[georgecloner]

Try "System Restore" and restore it to a much "later" date (that is before you got the virus).

If not possible, download "BArtPE" to create a bootable emergency disc(http://www.pcworld.com/downloads/file/fid,63901/description.html). In BArtPE's environment look for these files "system", "software", "sam", "security", "default"  in folder "C:\System Volume Information"

Files are restore points from your Snapshot folder, example:

C:\System Volume Information\_restore{D86480E3-73EF-47BC-A0EB-A81BE6EE3ED8}\RP1\Snapshot

Files from the snapshot folder (of a later restore date) try to overwrite your system files in "c:\windows\system32\config\", respectively "system", "software", "sam", "security", "default"  (You cannot overwrite these files if you are in Windows environment, rather in Recovery Console and BartPE)

I already tried these operation recovering from bad system files with regards'--- BSOD.

Hope this helps.

Regards,

George

[CMTech]

One trick that most viruses like doing is messing up your internet connection. They do this by changing proxy settings in internet explorer initialy which leads to firefox and other browsers being affected. Please can you check to see if the virus has changed your firefox proxy settings, if it's looping back to 127.0.0.1 then remove that entry!

Edit: Just had thought that conficker will probably be way more advanced, but this is worth a try.

[F3RL]

Always backup or clone your data and store with TrueCrypt with hard-to-guess password.

I would first use Acronis Disk Cleanser to completely wipe with 3-overwrite algorithm to make sure malware or virus is cleared since some nasty ones does not get deleted even after format. Then re-install the operating system without ethernet cable plugged in. If I or we had VNC it would be much easier to know and fix the problems of forum users.

[CMTech]

VNC is cool but not everyone trusts it on forums...

[rzamriv]

Hi, if you problem is only the shortcut in your desktop, you have to create a reg file, only copy the next text in a txt file and rename to reg file: for example IEicon.txt to IEicon.reg, double click and F5 or restart your system, listo!!!!

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum]
"{871c5380-42a0-1069-a2ea-08002b30309d}"=-

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum]
"{871c5380-42a0-1069-a2ea-08002b30309d}"=-

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel]
"{871C5380-42A0-1069-A2EA-08002B30309D}"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu]
"{871C5380-42A0-1069-A2EA-08002B30309D}"=dword:00000000

[-HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\ShellFolder]

[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\ShellFolder]
"Attributes"=dword:00000024
"HideFolderVerbs"=""
"WantsParseDisplayName"=""
"HideOnDesktopPerUser"=""

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoInternetIcon"=-

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoInternetIcon"=-