Cannot change desktop background

Sony vaio z1 series
May 24, 2006 at 23:22:14
Specs: windows xp, 1
I have a trojan virus in my laptop which apparently deleated my background setting a blank blue screen. I tried to change display setting but there is nothing i can do.
Please help


Bean


See More: Cannot change desktop background

Report •


#1
May 25, 2006 at 04:45:09
You can download the free trila version of CounterSpy http://www.sunbelt-software.com/CounterSpy.cfm and use that to clean up the junk. When it is completed and you have removed the junk, you may need to reset Internet Explorer and your desktop wallpaper depending upon what malware you may have encountered. Good Luck!

Aroostook County Maine Computer Service http://www.thepc-emt.com


Report •

#2
May 25, 2006 at 12:11:31
Use all the basic free spyware progs:
Spybot S&D
Adaware SE
Spyware Blaster

Then do a free online AV scan with Housecall, Bit Defender or Kaspersky in safe mode with networking.

I wouldn't try any trial software as they use false positives and most of the time won't remove the problem.

Hopefully my advice will help you...Please post back with your results....thanks


Report •

#3
May 25, 2006 at 21:10:29
I removed a virus from my computer. When I scan my computer with Norton no viruses are detected. However, I get a blue screen on the desktop background. I am able to change the background and When I try to change the background nothing happens. When I try to open the desktop properties I am unable to.

This is my kaspersky report
KASPERSKY ON-LINE SCANNER REPORT
Tuesday, May 23, 2006 8:49:15 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky On-line Scanner version: 5.0.78.0
Kaspersky Anti-Virus database last update: 24/05/2006
Kaspersky Anti-Virus database records: 195899
---------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\
E:\
G:\

Scan Statistics:
Total number of scanned objects: 74076
Number of viruses found: 6
Number of infected objects: 14
Number of suspicious objects: 0
Duration of the scan process: 01:34:52

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\Subin Hada\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\omfg.class-c973141-19922a07.class Infected: Trojan-Downloader.Java.OpenStream.y skipped
C:\Documents and Settings\Subin Hada\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\omfge.class-66a05214-362b5593.class Infected: Trojan-Downloader.Java.OpenStream.y skipped
C:\Documents and Settings\Subin Hada\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv428.jar-167d9a12-31772f99.zip/Matrix.class Infected: Trojan-Downloader.Java.OpenStream.c skipped
C:\Documents and Settings\Subin Hada\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv428.jar-167d9a12-31772f99.zip ZIP: infected - 1 skipped
C:\Documents and Settings\Subin Hada\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv428.jar-1a3e8ca2-41bff6dc.zip/Matrix.class Infected: Trojan-Downloader.Java.OpenStream.c skipped
C:\Documents and Settings\Subin Hada\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv428.jar-1a3e8ca2-41bff6dc.zip ZIP: infected - 1 skipped
C:\Documents and Settings\Subin Hada\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv576.jar-455138dc-2d8a279e.zip/Matrix.class Infected: Trojan-Downloader.Java.OpenStream.c skipped
C:\Documents and Settings\Subin Hada\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv576.jar-455138dc-2d8a279e.zip ZIP: infected - 1 skipped
C:\Documents and Settings\Subin Hada\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv607.jar-6e539f47-4d61eb6a.zip/Matrix.class Infected: Trojan-Downloader.Java.OpenStream.c skipped
C:\Documents and Settings\Subin Hada\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv607.jar-6e539f47-4d61eb6a.zip ZIP: infected - 1 skipped
C:\nj.exe Infected: Trojan-Downloader.Win32.Small.cpg skipped
C:\Program Files\Zango Programs\Zango Toolbar\ZangoTBUninstaller.exe Infected: not-a-virus:AdWare.Win32.180Solutions.an skipped
C:\System Volume Information\_restore{E14A4764-3A66-4777-9907-1B57FF36B5D7}\RP171\A0032216.dll Infected: not-a-virus:AdWare.Win32.Agent.c skipped
C:\System Volume Information\_restore{E14A4764-3A66-4777-9907-1B57FF36B5D7}\RP171\A0032302.exe Infected: Trojan.Win32.LowZones.dp skipped

Scan process completed.


Bean


Report •

Related Solutions

#4
May 25, 2006 at 21:53:13
First go to Control Panel/Java and delete the temp files/clear the cache.You are using an older version which can be exposed to malware so proceed to add/remove programs and un-install your java.Also uninstall this-Zango Programs\Zango Toolbar\ says it adware-spyware.

Download and install the latest version of Sun Java

Download Ewido then set it up this way Ewido Setup Instructions Make sure to update it.You will need this later in safe mode

Please download ATF-Cleaner to your desktop from this link
ATF-Cleaner You will need it later in safe mode

First purge the restore folder. For instructions on how to purge system restore click Here

Next follow these directions to reboot into Safe Mode

Run Ewido and let it delete all that it finds.

Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.

Reboot into to normal windows and run the Kaspersky scan again.


Report •

#5
May 27, 2006 at 03:11:08
hello thanks for the help
I was able to delete about 32 of the infected files following the steps. However, after everything, I am still not able to get my desktop properties activated. So I still have a blue background.
Following is my latest Kaspersky scan report

KASPERSKY ON-LINE SCANNER REPORTKASPERSKY ON-LINE SCANNER REPORT
Saturday, May 27, 2006 4:44:25 AM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build
2600)
Kaspersky On-line Scanner version: 5.0.78.0
Kaspersky Anti-Virus database last update: 27/05/2006
Kaspersky Anti-Virus database records: 196674


Scan Settings
Scan using the following antivirus databaseextended
Scan Archivestrue
Scan Mail Basestrue

Scan TargetMy Computer
C:\
D:\
E:\
G:\

Scan Statistics
Total number of scanned objects68908
Number of viruses found2
Number of infected objects2
Number of suspicious objects4
Duration of the scan process01:05:50

Infected Object NameVirus NameLast Action
C:\Documents and Settings\Subin Hada\Desktop\hijackthis\hijackthis.log
Suspicious: Exploit.HTML.Mht skipped

C:\Documents and Settings\Subin Hada\Desktop\hijackthis.log Suspicious:
Exploit.HTML.Mht skipped

C:\RECYCLER\S-1-5-21-4243532757-1049945814-2207885815-1006\Dc143.class
Infected: Trojan-Downloader.Java.OpenStream.y skipped

C:\RECYCLER\S-1-5-21-4243532757-1049945814-2207885815-1006\Dc145.class
Infected: Trojan-Downloader.Java.OpenStream.y skipped

D:\desktop\hijackthis\hijackthis.log Suspicious: Exploit.HTML.Mht skipped

D:\desktop\hijackthis.log Suspicious: Exploit.HTML.Mht skipped

Scan process completed.


Bean


Report •

#6
May 27, 2006 at 06:02:32
Bean, Empty your Recycle Bin and see Response Number 2 in the thread at the link below.

Desktop Background Problems

Tufenuf


Report •

#7
May 27, 2006 at 16:46:00
hello I tied the suggestion but nothing changed.
I have my all DWord values set to 0.
Any other suggestions.
Right now I am running eTrust Antivirus web Scanner. Let me see what it can do.


Bean


Report •

#8
May 27, 2006 at 18:43:16
Found this pertaining to a spysheriff infection that left the user with problems changing his desktop background.Maybe it will help you.

Look Here


Report •

#9
May 27, 2006 at 23:09:23
Sorry I do not think it is spysheriff because I do not see it in my "processess" tab. I neither have "winstall".
however, I eTrust Antivirus Web scanner found 2 of the following viruses. I do i remove them?

C:\Documents and Settings\Subin Hada\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\
C:\Documents and Settings\Subin Hada\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\


Bean


Report •

#10
May 28, 2006 at 05:42:19
Bean, To remove those JAR cache files follow the instructions for "Windows" at the link below.

Clear JAR Cache

Tufenuf


Report •

#11
May 28, 2006 at 08:56:53
I'm not saying you have spysheriff.The steps listed on that page are supposed to return your settings back to default which is what you want isn't it?.

Report •

#12
May 28, 2006 at 14:39:29
Hello murr thank you for the suggestion. It did help to get my background back. I really appreciate you all help.
Thank you again

Bean


Report •

#13
May 28, 2006 at 15:26:53
One more thing. Now that I could change my desktop back ground, my desktop icons have a blue back ground and the icon titles have a blue back ground too. I do not know if my problem has been completely solved or is it just some minor thing I need to do to make it transparent to the desktop back ground.


Bean


Report •


Ask Question