Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Recent virus, lost Libraries, Thunderbird & Catalyst CC won't open.

20 Feb 2013   #1

Windows 7 home premium 32bit
Recent virus, lost Libraries, Thunderbird & Catalyst CC won't open.

The problem:
Yesterday my wife contracted some type of oogliness on her Toshiba laptop. On system start up the desktop would have many system error messages, one on top of the other. Also a message "Catalyst Control Center: host application has stopped working" and when attempting to open Thunderbird a message that "Thunderbird window is already open. Close window or restart computer" (or some thing like that). All her picture libraries were gone (I've only managed to recover 2 of them) and who knows what else may have been lost. This morning I had a phone call from our ISP telling us that her email account was shut down after they noticed a huge flood of emails outgoing and many of her friends called to say they had suspicious emails from her account.

What I have done, so far:
We called and texted everyone we could think of with a warning not to open any emails from her account. I performed a system restore to a point one week ago. This got rid of all the system error messages on startup but did nothing to fix the Thunderbird issue, the Catalyst Control Center error or bring back the many missing picture libraries. As I said, I recovered only 2 folders of pictures...the rest appear to be gone. I tried installing a newer version of Thunderbird over the old one...hoping to save the email program and I downloaded and installed the latest drivers from AMD. Neither of these fixed anything.

I believe the system may be a lost cause and might require a reformat and reinstall from the recovery disks we created when we unpacked the laptop originally. I would, however, like to find out what really happened before doing that? Her system runs MS Security Essential and SpywareBlaster (both woefully out of date at the bad). I updated MSSE and performed a scan which found the following:
TrojanDownloader:Win32/Dofoil.O (Removed)
TrojanDownloader:Win32/Dofoil.O (Quarantined)
TrojanDownloader:Win32/Cutwail.BS (Quarantined).

This is where I'm at, at this point. If it can be cleaned up and returned to good operation with all missing files recovered, so much the better. If not, I would still like to figure out how and what happened before doing a complete reformat and reinstall.

I have OTL downloaded on her computer and await any direction you can give.

Thank you very much, gang.


My System SpecsSystem Spec
20 Feb 2013   #2

Windows 7 Home Premium


Let's approach the issue in a mode before Windows starts.

Need some information in order to proceed...

Confirming the Operating System on the involved computer is Windows Seven 32-bit.

Also, do you have the Repair your computer option in the Advanced Boot Options menu?

To find out:

Restart the computer.
  • As soon as the BIOS is loaded begin tapping the F8 key until the Advanced Boot Options menu appears.
  • Is the Repair your computer option listed?
If you do not have the option above, do you have your Windows installation CD/DVD available?

And last, do you have a clean USB flash drive available, and do you have access to another computer?
My System SpecsSystem Spec
20 Feb 2013   #3

Windows 7 home premium 32bit

The OS is Windows 7 32bit
I do have the "repair your computer" option in the advanced boot options menu.
I do not have a Windows installation CD...the laptop did not come with one.
I do have 3 recovery disks created when we first started the computer. (2 recovery disks and a Toshiba software and drivers disk).

I do not have a clean USB flash drive (but I can get one).
I do have access to another computer (which I am using now).
My System SpecsSystem Spec

20 Feb 2013   #4

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit

Try this out

Click Computer,
In the Address bar type %AppData%,
This should take you to the Appdata/Roaming folder,
Navigate to AppData\Roaming\Microsoft\Windows\Libraries.
Make sure the folder and it contents are not hidden.
Right click the folder or files or libraries and click properties.
Uncheck the “Hidden” attribute check box.
For good measure make sure the “Read-Only” attribute check box is not checked.
Log off and log back on to apply changes.

If that doesn't help try this

Click Computer.
Right click libraries on the left hand side in the navigation bar.
Click restore default libraries.
My System SpecsSystem Spec
20 Feb 2013   #5

Windows 7 home premium 32bit

VistaKing...these things are already is how I managed to recover 2 picture folders. Many more folders are still missing, however.

I hope you will understand that I do appreciate your input but, as cottonball seems to have a plan, I do not want to confuse the issue by doing more than one thing at a time. I will wait for cottonball to tell me what he needs me to do.

Again, I certainly appreciate your input...thank you.
My System SpecsSystem Spec
20 Feb 2013   #6

Windows 7 Home Premium


Here we go, but you do need a USB flash drive...

You may want to print these instructions so you can have access to follow them.
Also, you may want to read them once befor you apply them.

Please plug a USB flash drive into a clean computer.

Go to Start > Computer
  • Double-click Computer, and select the flash drive.
  • Right-click and select: Format
  • Press Start on the Format prompt.
Next, download Farbar Recovery Scan Tool:

Farbar Recovery Scan Tool Download
Select the 32-bit download.

Save the program to the >>> USB flash drive.
Remove the drive from the clean computer.

Next, plug the flash drive into the infected computer.

>>>Restart the computer.
  • As soon as the BIOS is loaded begin tapping the F8 key until the Advanced Boot Options menu appears.
  • Use the arrow keys to select the Repair your computer menu item.
  • Select your language settings, and click: Next
  • Select your User account and click: OK (If you did not set a password, leave blank.)
On the System Recovery Options menu you get the following options:
  • Startup Repair
  • System Restore
  • Windows Complete PC Restore
  • Windows Memory Diagnostic Tool
  • Scan your computer's memory for errors.
  • Command Prompt
Select: Command Prompt
  • In the Command window, at the bliking cursor type notepad and press: Enter
  • In Notepad, under the File menu select: Open
  • Double-click Computer, find the flash drive letter, remember what letter it is, click on it, and press: Open
  • Close out of Notepad.
  • Click the Command window
  • Type x:\frst.exe, and press: Enter
    Note: Replace the drive letter x with the drive letter of your flash drive!
The tool starts and prepares to run. Follow the prompts.
  • Click Yes to the disclaimer.
  • Press: Scan
  • When done, the program saves the FRST.txt report, on the flash drive.
Click the Command prompt window, and type exit, and press: Enter

Back at the System Recovery Options, press: Restart

When the computer boots back into Windows, please provide the FRST.txt in your reply.
It is located in the USB flash drive.
My System SpecsSystem Spec
20 Feb 2013   #7

Windows 7 home premium 32bit

OK...I will do this tomorrow when I have a flash drive in hand. I will then get back to you here.

Thanks man.

My System SpecsSystem Spec
20 Feb 2013   #8

Windows 7 Home Premium

Fine, whenever you are ready.

In the meantime, if you can run programs from the infected computer, do the following:

Please download RogueKiller:
Tlcharger RogueKiller (Site Officiel)

When you get to the website, go to where it says:
(Download link) Lien de téléchargement

Select the version that applies to your system: (the blue button without x64)
Click the blue button to download.

Save to the Desktop

Close all windows and browsers...

Right-click RogueKiller and select 'Run as Administrator'

Press: SCAN

A report opens on the Desktop: RKreport.txt

Please provide the RKreport.txt (Mode: Scan) in your reply.
(Please do not delete anything!)
My System SpecsSystem Spec
20 Feb 2013   #9

x64 (6.3.9600) Win8.1 Pro & soon dual boot x64 (6.1.7601) Win7_SP1 HomePrem

@viciii3: Once you're sure that your system is clean - cottonball is very good so definitely keep following his (avatar looks male to me) advice - please advise on Libraries missing.

Libraries only point to real locations and present contents from those locations in one place. If you look at the acutal file for a library, it isn't much more than an XML file. What I'm trying to determine is whether the library-ms file was corrupted or if the files it referenced wre corrupted. sometimes viruses just make us panic into thinking they
did more dmage.

I'm not sure, that's why I ask.

<?xml version="1.0" encoding="UTF-8"?>
<libraryDescription xmlns="Error">
    <property name="HasModifiedLocations" type="boolean"><![CDATA[true]]></property>
My System SpecsSystem Spec
20 Feb 2013   #10

x64 (6.3.9600) Win8.1 Pro & soon dual boot x64 (6.1.7601) Win7_SP1 HomePrem

Virus info:
Encyclopedia entry: TrojanDownloader:Win32/Dofoil.D
Encyclopedia entry: Win32/Cutwail - according to MS this is a rootkit.

You're in good hands with Cotton - Good luck,

My System SpecsSystem Spec

 Recent virus, lost Libraries, Thunderbird & Catalyst CC won't open.

Thread Tools

Similar help and support threads
Thread Forum
Lost Thunderbird & important folders when synchronising computers!
Hi I bought a new Dell PC with Windows 8.1 and wanted to transfer files from my old PC (Windows 7) to it. I used a program called Goodsync which has a function called Goodsync Connect which connects and synchronises the 2 computers. To my horror, at the end of the synchronisation, the files from...
Backup and Restore
How do I open XP icon libraries which have libraries within them
I am new to WIN7, and have the rest of my computers running XP. I have a number of icon libraries in a folder c:\icons which contain contain icon libries within them. eg C:\icons\animals.ico contains further folders cats.ico, dogs.ico ... I have not been able to get WIN7 to open these,...
General Discussion
Lost ALL Photos and Videos in Libraries/Album Art Screwed Up :o
I'm in such a mess! I'm new to Windows 7 and "Libraries". Just as I got it all figured out and organized, I seem to have really made a mess by trying to keep WMP from monitoring my video and picture libraries. Now when I click on Start/Pictures or Start/Videos it's EMPTY! Also, and I don't know...
Music, Pictures & Video
Lost Libraries
Ok this one has me a bit stumped. I have not done a lot of troubleshooting with Windows 7 in the past and the libraries are new, though I think I have them figured out. What happened to me is my Windows 7 Ultimate 32 bit machine crashed when I went to install Firefox's new browser. Computer went...
General Discussion
Win 7 SP1 cannot open Mozilla Thunderbird
Hi, Newbie here so excuse my deemed as inane questions and comments. Foolishly I installed Windows 7 SP1 Update on my kid's Toshiba Mini Notebook yesterday. They have Win 7 Starter. It locked the whole desktop and all of the programs as insufficient permissions. Uninstalled WIN 7 SP1...
Windows Updates & Activation

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 02:29.
Twitter Facebook Google+