LDD15 wrote:
> I have been woking on a computer for someone who had some virus'. While doing
> this I also installed IE7 for them. I had the issue where the Tabs band was
> missing. After searching on the web I found several articles that indicated
> that you should use gpedit to set and then unset "Force classic display"
> under Admin Templates->Windows Components->Explorer. This action resolved the
> IE7 issue and Force Classic display is now set to "Not Configured". After
> doing so the desktop went back to the typical blue desktop.
>
> The problem I am having is that the desktop is now locked, meaning that I
There is no need to download a program from an unreliable source to fix
this. I'll give you a few links but it is completely possible that 1)
the computer is not as virus/malware-free as you think it is; 2)
whatever infections the computer has/had have damaged the operating
system and you should back up the client's data and do a clean install.
To make sure the computer is clean:
http://www.elephantboycomputers.com/...moving_Malware
Obviously if you were as thorough as suggested in that link, including
running SmitfraudFix, you can move on. If you weren't that thorough,
then you should go through the prep and scanning work as outlined there.
If you can't enable desktop backgrounds after a virus, MVP Kelly Theriot
has a fix. Look under Wallpaper-Desktop-Disable Changing here:
http://www.kellys-korner-xp.com/xp_w.htm
If Display tabs are missing, run Kelly's registry edit on line 285,
right-hand side "Restore all display tabs".
Check to see if these Registry entries exist:
HKCU\Software\Microsoft\Windows\CurrentVersion\GroupPolicyobject\{21A7BE9D-5027-49C1-B6F7-757B707E1C94}User\Software\Policies\Microsoft\Windows\System
If "GroupPolicyRefreshTime" and/or "GroupPolicyRefreshTimeOffset" are
there, then delete them.
HKCU\Software\Policies\Microsoft\Windows\System. If
"GroupPolicyRefreshTime" and/or "GroupPolicyRefreshTimeOffset" are
there, then delete them and then run the reg fix from Kelly's page.
A default wallpaper called wp.bmp may be set in
HKCU\Software\Policies\Microsoft\Windows\System created by the
smitfraud.c virus. Remove that and you will be able to choose different
wallpapers.
For inability to change wallpaper after malware, here is another key:
Hkey_Current_User/software/Microsoft/Windows/CurrentVersion/Policies/Explorer,
Bogus values will be set to 0. Delete or set to 1.
Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User