Properties

[Lanny Bender]

My Grandson (13) has a laptop on which I can't set Display Properties for
the Desktop. He's running Windows XP Pro, SP-2, on a Dell Inspirion 6000,
with 512MB RAM.

When he brought me the laptop there were all kinds of spyware and viruses on
it. I cleaned it using MS AntiSpyware and AVG Free, along with the MS
update for KB890830. There was SpySheriff and SpyAxe plus some other
trojans and worms on his laptop. Finally got it cleaned. But since there
was a blue screen with a red box telling him he had a Spyware Infection on
his PC, as his desktop display, I went to the Properties for his desktop. I
couldn't change his desktop. The Browse and Position were grayed out.

I then investigated what was the desktop displaying. I found that he had a
"desktop.htm" as the display. So I deleted it. When I went back to the
desktop display Properties, I found I still couldn't change his Desktop.

If anything, what am I doing wrong?
Lanny

 

[Malke]

My Grandson (13) has a laptop on which I can't set Display Properties
for
the Desktop. He's running Windows XP Pro, SP-2, on a Dell Inspirion
6000, with 512MB RAM.

When he brought me the laptop there were all kinds of spyware and
viruses on
it. I cleaned it using MS AntiSpyware and AVG Free, along with the MS
update for KB890830. There was SpySheriff and SpyAxe plus some other
trojans and worms on his laptop. Finally got it cleaned. But since
there was a blue screen with a red box telling him he had a Spyware
Infection on
his PC, as his desktop display, I went to the Properties for his
desktop. I
couldn't change his desktop. The Browse and Position were grayed out.

I then investigated what was the desktop displaying. I found that he
had a
"desktop.htm" as the display. So I deleted it. When I went back to
the desktop display Properties, I found I still couldn't change his
Desktop.

If anything, what am I doing wrong?
Lanny

You may not have totally cleaned out the SpySheriff/SpyAxe cr*p. Here is
the procedures, which should enable you to have control over the
desktop again.

First run noahdfear's SmitFraud and SpyAxe removal tool -
http://noahdfear.geekstogo.com/click counter/click.php?id=8
References - http://www.bleepingcomputer.com/forums/topic36868.html
http://malwareremoval.com/plog/index.php?op=ViewArticle&articleId=48&blogId=3

Next run David Lipman's tool
http://www.ik-cs.com/programs/virtools/SmitFraud.exe

David's Instructions:
Execute SmitFraud.exe (Note: You must accept the default of C:\McAfee)
Choose Unzip
Choose Close

NOTE: You may have to disable your software firewall or allow WGET.EXE
to go through your firewall to enable WGET.EXE to download the needed
McAfee-related files.

Execute c:\mcafee\clean.bat (or Double-click on 'Clean Link' in c
\mcafee)

A final report in HTML format called C:\mcafee\ScanReport.HTML will be
generated. At the end of the scan, it will be displayed in your browser
(Opera, FireFox or Internet Explorer). It is suggested that you move
the report out of c:\mcafee before performing another scan.

That should take care of the desktop issue. You may want to review these
general malware removal steps to make sure you've covered all of them:
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Malke

 

[Lanny Bender]

You may not have totally cleaned out the SpySheriff/SpyAxe cr*p. Here is
the procedures, which should enable you to have control over the
desktop again.

First run noahdfear's SmitFraud and SpyAxe removal tool -
http://noahdfear.geekstogo.com/click counter/click.php?id=8
References - http://www.bleepingcomputer.com/forums/topic36868.html
http://malwareremoval.com/plog/index.php?op=ViewArticle&articleId=48&blogId=3

Next run David Lipman's tool
http://www.ik-cs.com/programs/virtools/SmitFraud.exe

David's Instructions:
Execute SmitFraud.exe (Note: You must accept the default of C:\McAfee)
Choose Unzip
Choose Close

NOTE: You may have to disable your software firewall or allow WGET.EXE
to go through your firewall to enable WGET.EXE to download the needed
McAfee-related files.

Execute c:\mcafee\clean.bat (or Double-click on 'Clean Link' in c
\mcafee)

A final report in HTML format called C:\mcafee\ScanReport.HTML will be
generated. At the end of the scan, it will be displayed in your browser
(Opera, FireFox or Internet Explorer). It is suggested that you move
the report out of c:\mcafee before performing another scan.

That should take care of the desktop issue. You may want to review these
general malware removal steps to make sure you've covered all of them:
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Dear Malke,
While I was waiting for your reply, I tried to run Panda Software's
ActiveScan. I found that his mother had disabled ALL ActiveX controls. etc.
After enabling ActiveX, I ran Panda's ActiveScan. It's still running, and
the bar shows it's only half done. It's already found 39 Spyware, 6 Hacking
Tools, 2 dialers, and 2 suspicious files.

If after Panda does its thing and I still can't set Desktop Properties, I'll
do as you suggested. I'll run SmitFraud and do the other cleaning methods.
Lanny

 

[Plato]

My Grandson (13) has a laptop on which I can't set Display Properties for
the Desktop. He's running Windows XP Pro, SP-2, on a Dell Inspirion 6000,
with 512MB RAM.

First step is do DEMAND that your grandson practices safe computing. If
he refuses, then dont repair his pc anymore.

Since he didn't practice safe computing, and was doing file sharing,
etc. format his pc, bring him back to basics. aka factory fresh.

 

[Lanny Bender]

http://malwareremoval.com/plog/index.php?op=ViewArticle&articleId=48&blogId=3

Dear Malke,
While I was waiting for your reply, I tried to run Panda Software's
ActiveScan. I found that his mother had disabled ALL ActiveX controls. etc.
After enabling ActiveX, I ran Panda's ActiveScan. It's still running, and
the bar shows it's only half done. It's already found 39 Spyware, 6 Hacking
Tools, 2 dialers, and 2 suspicious files.

If after Panda does its thing and I still can't set Desktop Properties, I'll
do as you suggested. I'll run SmitFraud and do the other cleaning methods.
Lanny

I downloaded the Trial Version of Panda's "Titanium 2006 Antivirus +
Antispyware" program. When I ran it, it disinfected all of the incidents of
malware. Still not able to change wallpaper for the desktop.

Did a search of forums for a similar problem "Can't change wallpaper...", on
my PC. I found a reply on http://www.bullguard.com/forum/12/... which said
to delete the Registry key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\System
"Wallpaper"=SZ:C:\WINDOWS\desktop.html.
When I deleted this entry I was able to change wallpapers on his desktop.

You might want to make note of the Registry editing process for future
reference.

Thanks Malke for your help.
Lanny

 

[Malke]

You might want to make note of the Registry editing process for future
reference.

Thanks, I know the registry editing process. We generally try to stay
away from that as solutions for most users in this group unless
absolutely necessary.

Glad you got it sorted. Thanks for taking the time to post back.

Malke