In article <ux3Nc.5198$>,
lid says...
> Hi all,
>
> This is all site-unseen so sorry 'bout the sketchy details but I've just had
> a call from an ex-flatmate and as default 'PC guy' I've been called in to
> try and get it sorted.
> Details are, he recieved an email - he got a virus from it and now on boot
> he gets no desk top (windows XP home) unless he runs it via task manager. He
> also gets no internet as the dialler shortcut has corrupted or something.
>
> I'm set to pop around tomorrow night and have a look - does this sound
> familur to anyone - any ideas as to how to approach it?
>
> Cheers in advance...
>
Well I'd start by...
1) Booting to Safe mode and checking out what wierdness is loading by
using the msconfig utility from Start Menu->Run. Uncheck anything odd -
although the virus may have screwed around with services..
2) Back into normal mode. Install/use/update a virus scanner and try to
ID what the hell it was. If there is a removal toll from Symantec or
some others use that.
3) Check what is going on with the shell have a look at this reg key..
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
\Shell
4) If it is all still wierd (but not infected): consider using system
restore (ek!) or try to repair system files with the command: sfc
/scannow
5) Still no go then boot off xp cd and reapir the install.
6) If you suspect you have be hacked too then you need to go back to a
trusted backup or install from trusted media.
7) Use Linux