1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Display Properties - Missing Tabs (Trojan-Spy.HTML.Smitfraud.c)

Discussion in 'Virus & Other Malware Removal' started by rdkapp, Jul 7, 2005.

Thread Status:
Not open for further replies.
Advertisement
  1. rdkapp

    rdkapp Thread Starter

    Joined:
    Jan 5, 1999
    Messages:
    197
    I recently cleared my computer of spyware related to PSGuard. Among other things, it put a Windows Blue Screen Security Warning tiled on my Desktop which stated the following:

    A fatal error in IE has occured at 0028:C0011E36 in VXD VMM(01) + 00010E36. Error was caused by Trojan-Spy.HTML.Smitfraud.c

    *System cannot function in normal mode. Please check your security settings.

    *Scan your PC w/any available antivirus/spyware remover program to fix the problem.


    When I opened Display Properties, there were only 3 tabs (Screen Saver, Effects, and Settings). The Background tab was missing, so I could not change my Desktop.

    I went ahead and cleaned my computer of the spyware using SpSeHjfix.zip, CWShredder, and HiJackThis.

    My computer is now spyware free, but my Desktop continues to show the Windows Blue Screen Security Warning tiled and the Display Properties is still missing the Background tab, as well as the Appearance and Web tabs. Can anyone help me take back my Desktop and restore the Display Properties tabs?

    My computer is running Windows 98SE. If anyone can please help me, I'd certainly appreciate it.
     
  2. Bob Cerelli

    Bob Cerelli

    Joined:
    Nov 2, 2002
    Messages:
    22,468
    Try:

    Start Regedit
    Go to HKEY_Current_User / Software / Microsoft / Windows / CurrentVersion / Policies
    Delete NoDispCPL. This disables the Display Control Panel

    This is a good example where even though a virus or Trojan program may have been removed, not all of the damage or changes they make are fixed.
     
  3. rdkapp

    rdkapp Thread Starter

    Joined:
    Jan 5, 1999
    Messages:
    197
    Thanks Bob, but before I do that, I want to make sure I understand what you mean by "disables the Display Control Panel." Am I disabling it so it can reload in full, with all tabs in place, or what? Please explain. I don't want to go changing something in the Registry without understanding what I'm doing. Thanks again.
     
  4. Elvandil

    Elvandil

    Joined:
    Aug 1, 2003
    Messages:
    51,988
    Clear as mud, eh?

    The presence of that entry in the registry will disable some aspects of the Display control. Removing it may return that functionality.

    You can right-click on the key and export it before deleting in case you want later to undo any changes you made. This is good practice whenever altering the registry.
     
  5. Bob Cerelli

    Bob Cerelli

    Joined:
    Nov 2, 2002
    Messages:
    22,468
    If the NoDispCPL key is there, just delete it.

    But in re-reading your post, you can get to the Display page, just not the Background page. If that is the case, delete NoDispBackgroundPage
     
  6. rdkapp

    rdkapp Thread Starter

    Joined:
    Jan 5, 1999
    Messages:
    197
    Thanks Bob and Elvandil.

    Yes Bob, that is correct. The Background tab, the Appearance tab, and the Web tab were missing in Display Properties. As you instructed, I deleted NoDispBackgroundPage and the Background tab reappeared without even rebooting. The key was in:

    HKEY_Current_User/Software/Microsoft/Windows/CurrentVersion/Policies/System

    I also found NoDispAppearancePage in that folder and deleted it also, and the Appearance tab reappeared. Now, the only thing missing is the Web tab. There was nothing else in that folder and I didn't have time to poke around for "NoDispWebPage" or whatever? Any ideas?
     
  7. Bob Cerelli

    Bob Cerelli

    Joined:
    Nov 2, 2002
    Messages:
    22,468
    Glad those specific reg edit helped solve the problems.

    I'm not sure how to get the Web tab back but hopefully that is not nearly as critical (unless you want to display web pages on your background). Most folks don't care to do this.
     
  8. rdkapp

    rdkapp Thread Starter

    Joined:
    Jan 5, 1999
    Messages:
    197
    You're right Bob. I've never used the Web tab. I'm not even sure what you can do on that tab. But it was a challenge to put my computer back the way it was before the spyware. And I found it.

    The value is NoActiveDesktopChanges and I found it in the following key:

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

    I deleted it and the Web tab reappeared. It's great when you can figure things out on your own. I feel like I one-upped the creator of the virus/spyware that infected my computer.

    Thanks again Bob and Elvandil.
    By the way, Elvandil, I like your avatar.
     
  9. Elvandil

    Elvandil

    Joined:
    Aug 1, 2003
    Messages:
    51,988
    Thanks for the followup and congratulations on finding the solution.
     
  10. Bob Cerelli

    Bob Cerelli

    Joined:
    Nov 2, 2002
    Messages:
    22,468
    Glad the instructions were clearer than mud and helped you solve all your problems ;-) As you see, registry edits are not that hard to do or figure out.
     
  11. Elvandil

    Elvandil

    Joined:
    Aug 1, 2003
    Messages:
    51,988
    It's too bad you didn't get help from the posters, but you at least had the initiative to find the solution without help. Good luck to you.
     
  12. Bob Cerelli

    Bob Cerelli

    Joined:
    Nov 2, 2002
    Messages:
    22,468
     
  13. Elvandil

    Elvandil

    Joined:
    Aug 1, 2003
    Messages:
    51,988
    My sincere apologies. The only one I noticed was : NoDispCPL.

    You are correct and you did find the solution.
     
  14. rdkapp

    rdkapp Thread Starter

    Joined:
    Jan 5, 1999
    Messages:
    197
    Bob certainly helped me with the missing Background tab, but I found the solutions for the missing Appearance tab and Web tab.

    By my count, that's 2/3 me and 1/3 Bob. :D

    But who's counting? ;)

    Truthfully though, I would not have found my 2 solutions w/out Bob's initial direction.

    Thanks again guys.
     
  15. Elvandil

    Elvandil

    Joined:
    Aug 1, 2003
    Messages:
    51,988
    For future reference, you can access these entries and other security-related settings in comfort with this "Security Console". It was intended to give some control over these things to Home Edition users without their having to access the registry (since they don't have the Group Policy Editor) and take those risks. But it is also a convenient quick tool for Pro users:

    http://www.dougknox.com/xp/utils/xp_securityconsole.htm

    You'll find that this program places or removes those entries that you have been dealing with, and many more, all from one central location. And, since it can be run from a floppy, you can make these security settings to a machine and protect it from others when you are away. Much easier than the old-fashioned way :D.

    OK. So it's 2/3 for you.
     
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/378681

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice