Update: Looking in my registry, the
shell key is set to
Explorer.exe C:/WINDOWS/Config/csrss.exe, but there is no Config folder and thus no csrss. Is it possible that:
- The malware deleted my config folder.
- The malware somehow messed with that value.
Again, speaking with no knowledge and completely blind, it seems like running Windows Explorer (from the start menu) runs Explorer.exe (with no parameters,) which creates the standard folder listing (what I see when I boot up,) and since that csrss.exe file doesn't exist, it's defaulting to that behaviour instead of the normal taskbar, desktop etc?