[smokeyyy]

Hey guys i get these 3 little things on my desktop and i have no idea wat they are.


They r almost the size of a cursor. The last time i had these i tried to restore my computer and got the BSOD.

U cant right click them and delete, no properties, cant drag to recycling bin or anything. U can only drag them.

What are they? lol

[NeonFx]

Hi there, lets see if we can figure it out

First you will need to create the batch file. To do that copy and paste everything in the quote box bollow to a notepad file (to open Notepad go to Start > Accessories > Notepad).

@echo off
cd %USERPROFILE%\Desktop
reg query HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Desktop\NameSpace\ /s > iconsinfo.txt
echo -----Files in %cd%----- >> iconsinfo.txt
dir * /b /s /on >> iconsinfo.txt
cd %ALLUSERSPROFILE%\Desktop
echo -----Files in %cd%----- > Extraiconsinfo.txt
dir * /b /s /on >> Extraiconsinfo.txt
notepad %USERPROFILE%\Desktop\iconsinfo.txt
notepad Extraiconsinfo.txt
exit

Then in the text file go to File > Save As... and in the dropdown box select Save as Type to All Files. Navigate to your Desktop.
Then in the File Name box type query.bat. This will create a batch file.

Then run query.bat by double clicking on the file you just created. You may see a black box appear this is normal

A notepad window will appear with information. Please copy and paste that here. When you close it another one will come up with more information. Please copy and paste that as well. You can then delete the .bat file along with the two text files that were created on your desktop.

[smokeyyy]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Deskt op\NameSpace\{04731B67-D933-450a-90E6-4ACD2E9408FE}
(Default) REG_SZ Search Folder

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Deskt op\NameSpace\{21EC2020-3AEA-1069-A2DD-08002B30309D}
(Default) REG_SZ ControlPanelClassicView

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Deskt op\NameSpace\{26EE0668-A00A-44D7-9371-BEB064C98683}
(Default) REG_SZ ControlPanelCategoryView

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Deskt op\NameSpace\{4336a54d-038b-4685-ab02-99bb52d3fb8b}
(Default) REG_SZ Public folder

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Deskt op\NameSpace\{450D8FBA-AD25-11D0-98A8-0800361B1103}
(Default) REG_SZ Documents
Removal Message REG_SZ @mydocs.dll,-900

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Deskt op\NameSpace\{59031a47-3f72-44a7-89c5-5595fe6b30ee}
(Default) REG_SZ UsersFiles
Removal Message REG_SZ @shell32.dll,-9047

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Deskt op\NameSpace\{645FF040-5081-101B-9F08-00AA002F954E}
(Default) REG_SZ Recycle Bin

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Deskt op\NameSpace\{89D83576-6BD1-4c86-9454-BEB04E94C819}
(Default) REG_SZ MAPI Folder

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Deskt op\NameSpace\{9343812e-1c37-4a49-a12e-4b2d810d956b}
(Default) REG_SZ Search Home

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Deskt op\NameSpace\{BD7A2E7B-21CB-41b2-A086-B309680C6B7E}
(Default) REG_SZ CSC Folder

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Deskt op\NameSpace\{ED228FDF-9EA8-4870-83b1-96b02CFE0D52}
Removal Message REG_SZ @gameux.dll,-10038

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Deskt op\NameSpace\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}
(Default) REG_SZ Computers and Devices

-----Files in C:\Users\Quinn\Desktop-----
C:\Users\Quinn\Desktop\A8.5.rar
C:\Users\Quinn\Desktop\Adobe PhotoShop PS4
C:\Users\Quinn\Desktop\Brute Forcers and Password Lists.rar
C:\Users\Quinn\Desktop\CCleaner.lnk
C:\Users\Quinn\Desktop\Downloads
C:\Users\Quinn\Desktop\dqweqweq.txt
C:\Users\Quinn\Desktop\FatalGunz.lnk
C:\Users\Quinn\Desktop\Funny
C:\Users\Quinn\Desktop\Google Earth.lnk
C:\Users\Quinn\Desktop\Hide IP Platinum.lnk
C:\Users\Quinn\Desktop\i j j i.lnk
C:\Users\Quinn\Desktop\iconsinfo.txt
C:\Users\Quinn\Desktop\Left 4 Dead.lnk
C:\Users\Quinn\Desktop\LimeWire 5.1.3.lnk
C:\Users\Quinn\Desktop\more music
C:\Users\Quinn\Desktop\my music
C:\Users\Quinn\Desktop\New Folder
C:\Users\Quinn\Desktop\passwords
C:\Users\Quinn\Desktop\query.bat
C:\Users\Quinn\Desktop\Random Pics
C:\Users\Quinn\Desktop\TeamViewer 4.lnk
C:\Users\Quinn\Desktop\TS3 - Shortcut.lnk
C:\Users\Quinn\Desktop\U95.exe
C:\Users\Quinn\Desktop\Ventrilo.lnk





the second file that appeared had nothing in it to copy

[NeonFx]

Thank you

Your problem is not what I suspected. Those registry entries are exactly as they're supposed to be.

Do you see ALL of these on your desktop? If you don't see a few, those might be what the icons are pointing to.

C:\Users\Quinn\Desktop\A8.5.rar
C:\Users\Quinn\Desktop\Adobe PhotoShop PS4
C:\Users\Quinn\Desktop\Brute Forcers and Password Lists.rar
C:\Users\Quinn\Desktop\CCleaner.lnk
C:\Users\Quinn\Desktop\Downloads
C:\Users\Quinn\Desktop\dqweqweq.txt
C:\Users\Quinn\Desktop\FatalGunz.lnk
C:\Users\Quinn\Desktop\Funny
C:\Users\Quinn\Desktop\Google Earth.lnk
C:\Users\Quinn\Desktop\Hide IP Platinum.lnk
C:\Users\Quinn\Desktop\i j j i.lnk
C:\Users\Quinn\Desktop\iconsinfo.txt
C:\Users\Quinn\Desktop\Left 4 Dead.lnk
C:\Users\Quinn\Desktop\LimeWire 5.1.3.lnk
C:\Users\Quinn\Desktop\more music
C:\Users\Quinn\Desktop\my music
C:\Users\Quinn\Desktop\New Folder
C:\Users\Quinn\Desktop\passwords
C:\Users\Quinn\Desktop\query.bat
C:\Users\Quinn\Desktop\Random Pics
C:\Users\Quinn\Desktop\TeamViewer 4.lnk
C:\Users\Quinn\Desktop\TS3 - Shortcut.lnk
C:\Users\Quinn\Desktop\U95.exe
C:\Users\Quinn\Desktop\Ventrilo.lnk

[NeonFx]

Also, do you use Google Gadgets, the Windows Sidebar or anything similar to these? that might be where they're coming from.

[smokeyyy]

yea i use the sidebar

what are they anyways? anything bad?

[NeonFx]

If you use the sidebar they could just be leftovers from unused gadgets. If you drag a gadget from the sidebar to the desktop you dislodge it from the bar. Try disabling it and see if they go away.

If that's not it, I have no idea what they are. You could start a new topic in the malware removal forum if you think it might be bad. The experts there will help you. (if you don't get help, because I know they are understaffed here, you can try geekstogo.com's malware removal forum)

They are probably just placeholders for sidebar gadgets though.

[smokeyyy]

ya thanks man

they r gone.. duno wat they were but i dont think they r bad

thankssssss

[NeonFx]

Sure thing

Go ahead and mark this thread as Solved by clicking on the button on the top of this page.