Desktop Bugged

[shivanfenix]

Tonight, it seems as if my computer has failed me! It started out when
I opened a .lua file to view. It owned with IE, and proceeded to
destroy my desktop, changing my icons so that there was this obnoxious
background behind the nameplates and in the shadows of the icon
graphic. I tried changing my background with different file types
(.jpg, .bmp, .tga), but nothing worked. In a frustration, I must've
right clicked the desktop and selected "Hide all Desktop Icons". I
then tried to right click to get my icons back, but it wouldn't budge!
I can no longer right click on my desktop, but I can right click
everywhere else. I have no icons on my desktop either.

 

[Rick \Nutcase\ Rogers]

Hi,

Where did you get this .lua file?
Have you tried System Restore?

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Windows help - www.rickrogers.org

 

[Malke]

Tonight, it seems as if my computer has failed me! It started out
when
I opened a .lua file to view. It owned with IE, and proceeded to
destroy my desktop, changing my icons so that there was this obnoxious
background behind the nameplates and in the shadows of the icon
graphic. I tried changing my background with different file types
(.jpg, .bmp, .tga), but nothing worked. In a frustration, I must've
right clicked the desktop and selected "Hide all Desktop Icons". I
then tried to right click to get my icons back, but it wouldn't budge!
I can no longer right click on my desktop, but I can right click
everywhere else. I have no icons on my desktop either.

Without knowing where you got the ".lua" file, I'm going to guess you've
been infected with one of the many Smitfraud variations. Do the
preparatory work as listed here:

http://www.elephantboycomputers.com/page2.html#Removing_Malware

Then try removal techniques/tools here:
http://www.elephantboycomputers.com/page2.html#Smitfraud_Trojan

Here are some other links in case you have a different variant:

http://www.bleepingcomputer.com/forums/topic43659.html
http://www.bleepingcomputer.com/forums/topic47826.html
http://wiki.castlecops.com/Malware_Removal:_SpyAxe_Removal

After you finish running Smitfraud-specific tools, go through the rest
of the general malware removal steps from the first link. You may need
to run HijackThis and post your log to one of the specialty forums
listed at my website above (not here, please).

Removing malware can be very complex. If after you read through the
information at the links above you decide this isn't your cup of tea
(and there is no shame in admitting that), take your machine to a
professional computer repair shop (not your local version of
BigStoreUSA).

After you get your computer cleaned up, learn to practice Safe Hex. Here
are some links to help you with that:

http://www.wilderssecurity.com/showthread.php?t=27971 - So How Did I Get
Infected Anyway?
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://www.claymania.com/safe-hex.html
http://www.aumha.org/a/parasite.htm - The Parasite Fight
http://msmvps.com/blogs/harrywaldron/archive/2006/02/05/82584.aspx - MVP
Harry Waldron - The Family PC - How to stay safe on the Internet
http://www.spywarewarrior.com/rogue_anti-spyware.htm - Eric Howes on
Rogue Antispyware Programs

Malke

 

[shivanfenix]

The .lua file belonged to one of my AddOns for World of Warcraft.
These AddOns are not malicious, and they're widely welcomed by a large
percentage of the gaming community, so I don't believe that it could be
a Trojan, but I'll try the techniques mentioned, thanks!

 

[shivanfenix]

I dont receive an error message when I right click. It simply doesn't
do anything.

 

[Malke]

The .lua file belonged to one of my AddOns for World of Warcraft.
These AddOns are not malicious, and they're widely welcomed by a large
percentage of the gaming community, so I don't believe that it could
be a Trojan, but I'll try the techniques mentioned, thanks!

It would have been great to have known this in your first post, however
a legitimate WoW file would not have caused that problem. Your
description of the symptoms sounds like you have malware. It won't hurt
to go through the removal steps in any case.

Malke

 

[Phil Weldon]

'Malke' wrote:
| It would have been great to have known this in your first post, however
| a legitimate WoW file would not have caused that problem. Your
| description of the symptoms sounds like you have malware. It won't hurt
| to go through the removal steps in any case.
_____

Considering the source of the .lua file (which is created by the Lua
lightweight programming language), what the original poster has may be
'unintentional' malware and may not be recognized by anti-malware tools.
System Restore may be in order if no malware is detected, or if any is
detected and removed and the problem persists.

Phil Weldon

| (e-mail address removed) wrote:
|
| > The .lua file belonged to one of my AddOns for World of Warcraft.
| > These AddOns are not malicious, and they're widely welcomed by a large
| > percentage of the gaming community, so I don't believe that it could
| > be a Trojan, but I'll try the techniques mentioned, thanks!
|
| It would have been great to have known this in your first post, however
| a legitimate WoW file would not have caused that problem. Your
| description of the symptoms sounds like you have malware. It won't hurt
| to go through the removal steps in any case.
|
| Malke
| --
| Elephant Boy Computers
| www.elephantboycomputers.com
| "Don't Panic!"
| MS-MVP Windows - Shell/User

 

[shivanfenix]

Well, I rebooted in safe mode and it allowed me to right click. I
re-checked the option to "Show Desktop Icons", rebooted, and now have
the right clicking function again! However, my icons are still screwed
up! I cannot remove the background to the nameplates in my icons, and
that color matches my current color scheme for the Taskbar, Window Bar,
etc. I vaguely remember this happening to me before but I don't know
how I fixed it.

 

[Rick \Nutcase\ Rogers]

Hi,

Right click the desktop, choose "arrange icons by", and look at "lock web
items on the desktop". If it is checked, click on it to uncheck it.

Go to the Control Panel/System applet/Advanced tab, click on the performance
settings button. On the Visual Effects tab, scroll to near the bottom,
ensure that "use drop shadows for icon labels on the desktop" is checked. If
it isn't, check it and apply/ok your way out.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Windows help - www.rickrogers.org

 

[shivanfenix]

Thanks everyone for their help!

But Rick, I tried that and it didn't fix it.

I'm not sured if I'm allowed to post pictures, but here is a picture of
what the icons look like now:

http://www.imagedump.com/index.cgi?pick=get&tp=400360

The text background is solid, and there is emphasized shadowing,
especially noticeable around the icon for "My Documents"

 

[Rick \Nutcase\ Rogers]

Hi,

Check the display properties/desktop tab/customize/web tab and make sure
nothing here is checked.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Windows help - www.rickrogers.org

 

[shivanfenix]

Nothing is checked.