deleted explorer

XP Home SP2. Avast Home (free edition), found explorer.exe to be infected and deleted it. I have navigated to system restore via task manager but after restore I am still left with a screensaver but no Icons or menus. I dont have the origional XP disk. Help Please!!!

What virus was reported in explorer.exe?

Trojan Gen (unknown)

It doesn’t sound like a false alarm (as I don’t think there were any Trojan-Gen detections added recently). So, I’d rather say it was some fake file… do you know what was the full path of the file?

Sorry dont know the path. The virus name may not even be correct. The PC belongs to someone else. I removed approx 300 trojans, diallers, hijackers and malware. The file was deleted on start-up scan. System retore points were also infected. There was an object called Abetterinternet that SpyBot could not remove.

Check the Event Viever under Antivirus. Logs in avast! Log Viewer (Warning section) should also provide info regarding this detected sample.

Thanks. Do you know the path to these logs?

Right-click on “a” ball next to the clock,move to avast! Log Viewer and click it.
Now select Warnings section in Log viewer and search for explorer.exe detection which should be listed in there.
Extend the description column so you’ll see full path of detected file.

Sorry, dont have any Icons at all. No taskbar. I can only run programs by starting task manager File>New task and browsing to the executable file. Dont suppose you know the path to the exe for the ball icon/process.

Ok,which OS were you running? Windows XP SP2 English?
If correct i can send you my file. I can even make a self-extract package that will automatically place explorer.exe into Windows folder.

I would be eternally grateful!!! My e-mail address is r_pc@btinternet.com.

DOWNLOAD:
http://rapidshare.de/files/4088652/Explorer_backup.exe.html

Download the package and launch it through browser (Internet Explorer i assume) when it’s downloaded. WINDOWS folder will be automatically selected,so just hit Install. After this open task Manager,go to File\Run and type in explorer.exe,or just restart PC. This should give you back the interface.

This Explorer is from WINDOWS XP SP2 system,but not from Home Edition,but Professional. But as far as i know they both use identical shell executable.

I hope this will help :slight_smile:

Any success?