Missing taskbar, can't drag or paste, win update disabled

another detail
links that would normally open a new window, won't.

This should be doable, but its gonna be tricky, and might wind up leaving you with format-and-reinstal-Windows-from-scratch as your best option, but since thats about where you are now, its worth a shot.

A few questions

- what operating system/servicepack/browser version is your system?

-can you open Windows Explorer (Windows key + E)?

- can you access your machine's optical drive?

and

- do you have ready access to a known-clean machine which has an optical burner?


Oh, and be patient - I won't get back to this for a few hours; I'm headed for bed. In the meanwhile, you should take a look HERE to get an idea of what we're going to be doing. Since you can't access some sites or employ some Windows functions, we're gonna hafta go at it a little differently than is described there, but that's pretty much what we're going to be doing.

You might find it convenient to click "Turn on email updates" down at the bottom right of this page; doing so will cause a notification to be sent to the address registered to your user name whenever a reply is posted to this thread.

Windows XP home edition
version 2002
Service Pack 2
The IE help->about doesn't tell me the version. ( I don't know if it ever did. It does on my other two computers)

Yes, I can get to the icons and windows explorer.

I can install from the cdrom, but music isn't playing.

Yes, I can burn CD's on my other computer.

Email updates are turned on.

Some updates:
I have the taskbar partway back once i finally figured out how to get to my control panel. I have a start butoon, tray, and quicklaunch area at least. The open windows don't show up in it, and when minimized they work like they used to in 3.11 and go to a small box abover the task bar.

I have tried to delete all references to McAfee on my computer and probably screwed even more stuff up trying. It still tries and fails to start ActiveSheild at each reboot.

I still cannot drag, drop, cut, or paste.

I have drudged from my memory all my email passwords and have outlook mostly running again.

Any link that is supposed to open a new window, doesn't.

I read the link you gave me. I had already skimmed it last night.
So far, I have downloaded and installed Avast (I let the installer program do all the defaults). I have not yet rebooted nor run it. As soon as I post this update, i will reboot and run the Avast.

I downloaded Hijackthis from MajorGeeks and i just ran it.
Here is the log it produced.

Logfile of HijackThis v1.99.1
Scan saved at 11:36:45 AM, on 9/2/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\Logitech\QCDriver3\LVCOMS.EXE
C:\Program Files\Logitech\ImageStudio\LogiTray.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Logitech\ImageStudio\LowLight.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} - C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\McAfee.com\Agent\McUpdate.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Common Files\Logitech\QCDriver3\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [McRegWiz] C:\PROGRA~1\mcafee.com\agent\mcregwiz.exe /autorun
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: Download all by Net Transport - C:\Program Files\Xi\NetTransport 2\NTAddList.html
O8 - Extra context menu item: Download by Net Transport - C:\Program Files\Xi\NetTransport 2\NTAddLink.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1124292902546
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - McAfee, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe

OK,
This may have some relevance?????
I just copied the above log from notepad and pasted it here.
I copied the key to register Avast from an email into the registration box.
But I still can't cut or paste text from MS Word or IE.

<}()
David

I don't know if anyone is reading here, but i have found something interesting that i don't understand at all.
Under Tools-> internet options->security, there were many things different on this (infected) computer than what is on the other two in my home. The most alarming is that there are no controls on this machine for java security and both of the other two have a subset between downloads and Miscellaneous called java.
Neither of the other two computers have any thing under restricted sites, and i have a whole mess of them. Many of the sites in my list seem to be the type of sites that use spyware tactics, so one of the spyware programs may have put them there???

Sorry not to have gotten back to this sooner - buncha stuff came up yesterday and I wasn't on the 'net much at all. Anyhow, as long as it seems you're able to reach the necessary download sites, I'd ay go ahead and do what you can from the proceedure. Stinger and EWIDO should be able to make a huge difference. Looking over that latest HJT log, it shows none of the expected yuckware signatures - which may mean that your problem isn't yuckware, or it may mean that what's infesting that machine has hidden itself very well. I can get a better idea of what's going on from the EWIDO logs, if you're able to run it and post both the first and second logs, as recommended by the proceedure.

I ran everything you suggested. Nothing seemed to indicate a virus.
I finally realized that even though I couldn't move any files to a back up position, i could use a cd burning program to back everything up.
then I just wiped and reinstalled.
I am seriously considering Lynix for my next computer.

Thanks for your help.

<}()
David

Well, glad you got it sorted out. I guess we mark this one Resolved, which is the whole point of the endeavor. Sometimes format-and-reinstall is a solution. A tool that often avoids that drastic manuever is BartPE, but its a tool the use of which I don't think I'd wanna coach someone unfamiliar with Windows' [ahem] finer points [/ahem] :wink:, at least not over the internet.

With this experience as a lesson, you can see why backups are important. I try to keep all output, personal data, and downloads backed up, and when setting up a new machine, I like to create a drive image with just the operating system and primary software installed, updated, and configured. Naturally, all of that is external to the subject machine. Its sorta nitpicky/paranoid, but its bailed me out of my own screwups more than once. While I know plenty of ways to break Windows, I don't know them all; I'm always finding new ones