Windows explorer not responding WHEN I load it with Win key+E.. Y?

[Guest]

Ok, Here is the thing. Earlier today I was downloading some different things,
and sometihng that I went to download came up on Norton Anti virus Auto
Protect... It was W32.IRCBOT
I have been trying to find it, it said that it couldn't be removed. I have
ran NAV since and came up with nothing.. Hijackthis, stinger, panda online
scan, Spybot, Adaware.. you name it.. But I can't find it.. so I'm thinking
that auto protect must have stopped it from coming on my system..
The problem that I am having now may have to do w/ that.. I don't know.. BUT
Now, when I press the windows key + E to bring up the windows explorer it
starts to come up, and it's like it just hangs while it is bringing up My
computer, my documents, etc.. and I have to close it.. and when I do it also
closes EXPLORER.EXE Which is a pain!! Cause I keep the quick lauch on the
toolbar, and I have it set a certain way, and when it closes, it takes it
away. When I bring it back, it is all messed up.

But I can go to start, run and type Explorer and it will come up. I dont'
know what it is. Does ANYONE know anything? I would really appreciate it..

 

[Kelly]

Check your runkeys for this entry for starters:

"Microsoft Secure Messenger.NET Service" = "securitychk.exe"

to the registry keys:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

More info here:
http://securityresponse.symantec.com/avcenter/venc/data/w32.ircbot.f.html
and here depending on your version:
http://www.google.com/search?hl=en&q=W32.IRCBOT&btnG=Google+Search

Good luck!

 

[Guest]

Hey, Thanx for the reply. I just checked those in regedit, and there wasn't
anything in there that wasn't suppose to be. But, on that link that you gave
me.. for the w32.ircbot... it was for W32.IRCBOT.F
And it gives a total different way to delete, it says to disable system
restore.. I know there are several different ones followed by .F , .E and
something else. So does this apply to what I had.. I just looked in my log
file and it was just w32.ircbot..

But does anyone know what is causing the windows explorer to do that?? I
swear, it doesn't make much sense, that it only does it when I do the
keyboard shortcut, and not go to it through run.

 

[Kelly]

I also sent you the link that listed every variable. Do as it says, create
a restore point and then use the Disk Cleanup to delete all but the last
restore point. The virus will be gone, if your virus checker already deleted
it from your system.

Right click your Root drive/Properties/Disk Cleanup ... let it run. Then
click on More Options/System Restore/Clean up.

But does anyone know what is causing the windows explorer to do that?? I
swear, it doesn't make much sense, that it only does it when I do the
keyboard shortcut, and not go to it through run.

Clean your system, then try to figure it out.

 

[Guest]

Hey,
Sorry I didn't get back to you last night, I went to bed. But, I didn't see
the link about the variables or whatever.. But last night I did the disk
cleanup.. it had me restart to run it, and I did. It took forever... but I
havn't cleaned my restore points yet. I will try that in a min. But as of
right now, it is still doin that when I bring up the windows explorer through
the keyboard shortcut. Do you think that the virus had anything to do w/ that?

I have one more ?
it happend when I was downloading something off of a P2P program, and it
came up when it started downloading, so it didn't even finish downloading. It
was from NAV 2004 Auto Protect. What I am trying to figure out, where it came
up through auto protect, b4 it even got finished downloading if it picked up
that the virus was in it, and stopped it from coming on my system.
in my log file, it showed that it came up 2 times in the same min. and sec.
And under action taken, one of them said "access denied" and the other said
"repair failed"
the reason I ask is because, from everything that I have read about the
virus, where it explains where it is on the pc, and what it adds to the
registry and all... I can't find a trace of it. There isn't anything in the
registry where it says to look, and it didn't add a certain folder that it
said that it would... So do you think that it blocked it from coming on my
system?

I think if it did put it on my system that it is gone now.. the main thing I
am trying to figure out is why that the windows explorer is stopping
responding when I bring it up through the windows shortcut... The windows
explorer pops up, and when it is bringing up all the directories... to the
left, it is like it just freezes. And if I click on any of it, it says that
it has stopped responding. SO then I have to close it, and when I do, it
closes the whole Explorer.exe... my tool bar and all. Just like if I bring up
the task manager and close Explorer.exe and then go to NEW TASK and type in
EXPLORER.EXE to bring it back up.
What I dont' understand is it works if I go to run, and type in Explorer. I
use the windows shortcut for windows explorer ALL THE TIME. So, it kinds
sucks... So far I havn't noticed anything else that is acting up.. other than
that.. i will post it here if I find anything else that isnt' working right.
But thanx allot for you time.. I do appreciate it.