hey...
i am accessing a computer remotely to solve a problem. but i couldn't
be able to solve it. kindly help me

the problem is, when that computer is restart , it comes to the totally black desktop.
there is nothing, no start button, taskbaar, no desktop icon etc....

when that PC is restarted again , it becomes fine. Every things comes up.
i have attached both the images , with blank desktop and with the normal desktop after rebooting again.

what could be the problem/solution?

Specification of that System is:
Windows XP Professional Service Pack 2
Intel(R) Pentium (R) 4, CPU 2.40Ghz
1.00 GB RAM

i m still accessing that pc. A waiting for your replies.

Hello again, Kitharass!

You might have a malware issue on the remote PC. It sounds like the Windows Explorer.exe file is having difficulties.

Please have the remote user access our PreWork document and obtain the requested logs. They can be posted back into this thread for review by our Security team. The link to PreWork is found in my signature line.

@DCI Admint,
thanks for guiding me.

i have done all the work in "Prework section" , now i m little bit confuse that whether i have to attach and paste that files/text here or i have to make new thread at this link and provide information at mentioned below:

http://www.pchelpforum.com/new-hijackthis-logs/

and after placing information , what will they do ? i mean suggest some antivirus program or what?

a waiting for your reply.

Please post the logs back into this thread. I will relocate your post and you will receive the redirct information in a PM.

They will walk you through various clean-up tools that they use and then likely recommend an after care regime.

hey...
i am accessing a computer remotely to solve a problem. but i couldn't
be able to solve it. kindly help me

the problem is, when that computer is restart , it comes to the totally black desktop.
there is nothing, no start button, taskbaar, no desktop icon etc....

when that PC is restarted again , it becomes fine. Every things comes up.
i have attached both the images , with blank desktop and with the normal desktop after rebooting again.

what could be the problem/solution?

Specification of that System is:
Windows XP Professional Service Pack 2
Intel(R) Pentium (R) 4, CPU 2.40Ghz
1.00 GB RAM
------------

DSS Text Paste:

DDS (Ver_09-10-26.01) - FAT32x86
Run by Administrator at 11:07:16.64 on Tue 11/03/2009
Internet Explorer: 6.0.2900.2180
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1022.745 [GMT -8:00]


============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
SVCHOST.EXE
C:\WINDOWS\System32\svchost.exe -k netsvcs
SVCHOST.EXE
SVCHOST.EXE
C:\WINDOWS\system32\spoolsv.exe
SVCHOST.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe
C:\Program Files\TeamViewer\Version4\TeamViewer.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ctfmon.exe
E:\Programs\PCForum Help;System Analyzer\DDS\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.msn.com
uSearch Page = hxxp://www.google.com
uSearch Bar = hxxp://www.google.com/ie
mDefault_Page_URL = hxxp://www.yahoo.com/
mDefault_Search_URL = hxxp://www.google.com/ie
mSearch Page = hxxp://us.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*Yahoo!
mStart Page = hxxp://www.yahoo.com/
mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*Yahoo! SearchBar Home Page
uInternet Connection Wizard,ShellNext = wmplayer.exe //ICWLaunch
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
mSearchAssistant = hxxp://www.google.com/ie
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: Skype add-on (mastermind): {22bf413b-c6d2-4d91-82a9-a0f997ba588c} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
BHO: ONSPEED Toolbar: {4e7bd74f-2b8d-469e-84ba-b830e8d4e122} - c:\progra~1\onspee~1\ONSPEE~1.DLL
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: NOW!Imaging: {9aa2f14f-e956-44b8-8694-a5b615cdf341} - c:\program files\onspeed\components\NOWImaging.dll
BHO: Prefetch: {a66aa08a-9bf0-4e87-99e6-6972731d6b99} - c:\program files\onspeed\Prefetch.dll
BHO: FDMIECookiesBHO Class: {cc59e0f9-7e43-44fa-9faa-8377850bf205} - c:\program files\free download manager\iefdm2.dll
BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll
TB: ONSPEED Toolbar: {4e7bd74f-2b8d-469e-84ba-b830e8d4e122} - c:\progra~1\onspee~1\ONSPEE~1.DLL
TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll
TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
TB: {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - No File
uRun: [Rynga] "c:\program files\rynga.com\rynga\Rynga.exe" -nosplash -minimized
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [SoundMan] SOUNDMAN.EXE
IE: Add to Vbuzzer RSS list - c:\program files\vbuzzer\addurl.htm
IE: Add to Windows &Live Favorites - Sign In
IE: Download all with Free Download Manager - file://c:\program files\free download manager\dlall.htm
IE: Download selected with Free Download Manager - file://c:\program files\free download manager\dlselected.htm
IE: Download video with Free Download Manager - file://c:\program files\free download manager\dlfvideo.htm
IE: Download with Free Download Manager - file://c:\program files\free download manager\dllink.htm
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: Open in new background tab - c:\program files\windows live toolbar\components\en-us\msntabres.dll.mui/229?181b76d02d07472bac1c7351fe8311dd
IE: Open in new foreground tab - c:\program files\windows live toolbar\components\en-us\msntabres.dll.mui/230?181b76d02d07472bac1c7351fe8311dd
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {77BF5300-1474-4EC7-9980-D32B190E9B07} - {77BF5300-1474-4EC7-9980-D32B190E9B07} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
LSP: c:\progra~1\onspeed\sliplsp.dll
DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: igfxcui - igfxsrvc.dll
LSA: Authentication Packages = msv1_0 nwprovau

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\admini~1\applic~1\mozilla\firefox\prof iles\h6e1izvc.default\
FF - component: c:\program files\free download manager\firefox\extension\components\vmsfdmff.dll
FF - plugin: c:\program files\google\update\1.2.183.13\npGoogleOneClick8.d ll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll

---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);

============= SERVICES / DRIVERS ===============

R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssflt r_tdi.sys [2009-9-16 54752]
R2 SeaPort;SeaPort;c:\program files\microsoft\search enhancement pack\seaport\SeaPort.exe [2009-5-19 240512]
R2 TeamViewer4;TeamViewer 4;c:\program files\teamviewer\version4\TeamViewer_Service.exe [2009-10-7 185640]
S2 gupdate1c9c5b376bdfc30;Google Update Service (gupdate1c9c5b376bdfc30);c:\program files\google\update\GoogleUpdate.exe [2009-4-25 133104]
S3 autorun;autorun;C:\huadio.tmp [2008-12-7 5311]
S3 fsssvc;Windows Live Family Safety Service;c:\program files\windows live\family safety\fsssvc.exe [2009-8-5 704864]

=============== Created Last 30 ================

2009-11-03 18:10:37 0 d-----w- c:\windows\pss
2009-11-03 16:49:17 0 d-----w- c:\windows\SxsCaPendDel
2009-11-03 15:48:14 0 d-----w- c:\docume~1\admini~1\applic~1\GetRightToGo
2009-11-03 13:49:42 0 d-----w- c:\docume~1\admini~1\applic~1\WinPatrol
2009-11-03 13:49:24 0 d-----w- c:\program files\BillP Studios
2009-11-02 18:46:16 0 d-----w- c:\docume~1\admini~1\applic~1\Free Download Manager
2009-11-02 18:46:11 0 d-----w- c:\program files\Free Download Manager
2009-11-02 18:46:11 0 d-----w- c:\docume~1\alluse~1\applic~1\FreeDownloadManager. ORG
2009-11-02 16:30:20 0 d-sh--w- C:\FOUND.001
2009-11-02 16:05:28 0 d-sh--w- C:\FOUND.000
2009-11-02 15:36:46 44 ----a-w- c:\documents and settings\administrator\$FFPROFINI$prefs.js
2009-11-02 14:50:47 0 d-----w- c:\windows\system32\appmgmt
2009-11-02 14:39:56 0 d-----w- c:\docume~1\admini~1\applic~1\TeamViewer
2009-11-02 14:39:48 0 d-----w- c:\program files\TeamViewer
2009-11-02 14:38:19 0 d-----w- c:\documents and settings\administrator\temp
2009-11-02 13:48:31 0 d-----w- c:\program files\Iminent

==================== Find3M ====================

2009-09-18 10:56:10 18432 ----a-w- c:\windows\system32\dllcache\iedw.exe
2009-09-11 15:33:52 133632 ----a-w- c:\windows\system32\msv1_0.dll
2009-09-11 15:33:52 133632 ----a-w- c:\windows\system32\dllcache\msv1_0.dll
2009-09-04 21:45:26 58880 ----a-w- c:\windows\system32\msasn1.dll
2009-09-04 21:45:26 58880 ----a-w- c:\windows\system32\dllcache\msasn1.dll
2009-08-26 09:16:38 247326 ----a-w- c:\windows\system32\strmdll.dll
2009-08-26 09:16:38 247326 ----a-w- c:\windows\system32\dllcache\strmdll.dll
2009-08-21 10:46:36 450560 ----a-w- c:\windows\system32\dllcache\jscript.dll

============= FINISH: 11:07:34.64 ===============


Checup Text Paste:

Results of screen317's Security Check version 0.99.0
Windows XP Service Pack 2
Out of date service pack!!
``````````````````````````````
Antivirus/Firewall Check:
Windows Firewall Disabled!
OneCare Advisor (Windows Live Toolbar)
WMIC entry does not exist for antivirus; attempting automatic update.
``````````````````````````````
Anti-malware/Other Utilities Check:
WinPatrol 2009
Adobe Flash Player 10
Adobe Reader 8.1.4
Out of date Adobe Reader installed!
``````````````````````````````
Process Check:
objlist.exe by Laurent
WinPatrol winpatrol.exe is disabled!
``````````````````````````````
DNS Vulnerability Check:
POOR! (Vulnerable to DNS cache poisoning!!-- Consider OPENDNS)

`````````End of Log```````````

Hi

Usually this issue was resolved thus:

CTRL+ALT+DEL to open Task Manager, and then New>Task, then navigate to the Windows folder and open explorer.exe

sorry i didn't get you,
do u mean i should "End Process" to the explorer.exe when blank desktop comes up ?