How can I restore the Windows desktop after a virus attack?

The Windows operating system of all versions (especially without the installed updates) is known for a huge number of vulnerabilities, if you did not take care of security in advance.

These measures should include installing an antivirus, using the system from a regular account (without administrative rights), replacing standard Windows programs with alternative ones (Firefox or Opera) and "personal vigilance", including a ban on visiting suspicious sites.

If you did not comply with any of these points, then with a high probability of catching a malicious program. Often this is a so-called blocker, extorting money for a paid SMS, otherwise the system refuses to load, and you just want to restore the desktop again.

Get rid of this software will help any cleaning antivirus (recommended bundle AVZ and utilities Cure IT). Usually, virus removal takes 2-3 hours. There were also specialized utilities for getting rid of blockers. They perfectly solve the problem of how to restore the desktop after the banner. For example - Kaspersky Windows Unlocker, completely eliminating the infection and its consequences.

Usually after removing such malicious programs (if no specialized recovery utility is used) only the desktop background is shown with no signs of icons and the Start menu, then the question arises how to restore the desktop. However, the cursor works. In this case there are two ways - simple and relatively complex.

The first is to "cure" the system through a special AVZ function. This is done extremely simply (even for an inexperienced user). Download on the "healthy" computer the latest version of this program and write it to the USB flash drive. After that, start Windows on the computer where you need help.

After the background of the desktop appears, press the key combination "counter + alt + divides" - in this sequence. In the menu that appears, select "File". We launch a new task - AVZ. Now you need to find the path to the startup file on the flash drive.

In the window of the running program, once again select the "File" menu, and then "System Restore", mark a couple of daws options for restoring explorer startup parameters, and also with "Delete system process debuggers". After that, we certainly press the "Run" button. So we answered the burning question, how to restore the desktop in most cases.

Now you can reboot and the standard shell of the explorer.exe system will start on its own.

The second way - more time consuming and requiring at least the initial skills of editing the registry, it is difficult, but also gives an answer to the question of how to restore the desktop. This categorically does not suit newcomers. Although, if the PC is not working, and you just want to experiment, then why not? So, we press the familiar combination of keys - "counter + alt + divides". We start the registry editor with the regedit command and subsequently check the following:

1. The lack of keys called useinit, explorer and authorization winlogon in the "Image File Execution Options" section on the following intricate path of the system configuration store HKEY_LOCAL_MACHINE (then go to SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion). If the keys are still there, fearlessly delete them.

2. We search for the insidious section explorer.exe and delete it if we found HKEY_CURRENT_USER in the "bush", that is, in fact, the user profile (the "hive" is created at the moment of the first login) to the same complex address Software \ Microsoft \ Windows NT \ CurrentVersion \ Devices.

3. It remains only to check for correctness of the shell start parameters, which are in HKEY_LOCAL_MACHINE, select the "hive" SOFTWARE.

We go down even lower in the hierarchy - choose Microsoft, and then Windows NT. We stop at the end point - the CurrentVersion section.

First of all, we look that Shell has a value exclusively explorer.exe, and Userinit - strictly logonui.exe.

Secondly, the line C: \ WINDOWS \ system32 \ userinit.exe, (yes, right with a comma) is the correct value of the ULHost parameter. This is guaranteed to solve the problem of how to restore the desktop. After adjusting these parameters and restarting (via "Task Manager"> "Shutdown"> "Restart"), you will again be able to see all the desktop icons, as well as the taskbar and, accordingly, the Start menu.