1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Solved: Fixing A Trojan's Aftermath...

Discussion in 'Virus & Other Malware Removal' started by Flipdude91, Aug 2, 2006.

Thread Status:
Not open for further replies.
Advertisement
  1. Flipdude91

    Flipdude91 Thread Starter

    Joined:
    Aug 2, 2006
    Messages:
    7
    Well, a few days ago i recieved a trojan (webroot told me that it was detected and was "critical")

    After multiple scans, the trojan was removed, but there is still a few problems.

    1st off, the computer specs. are...


    Microsoft Windows Xp Home Edition
    Version 2002 , Service Pack 2

    Dell Dimension DIM2400


    >>>back to the problem

    The aftermath is thus, Background Picture won't return (its just blank, the regular blue color)

    After following this path
    Desktop>>Properties>>Desktop

    I'm shown a list of Possible Backgrounds (like any other Windows Computer)
    except, I cannot click any of the pictures to set as the background.

    can anyone help?
     
  2. Cheeseball81

    Cheeseball81 Retired Moderator

    Joined:
    Mar 3, 2004
    Messages:
    84,315
    Hi and welcome :)

    Download and save Cleandesktop to your computer from this link: http://www.thespykiller.co.uk/files/cleandesktop.exe and double click on the cleandesktop.exe

    It will automatically extract to c:\desktopclean where it needs to be to run and will automatically run the cleandesktop.vbs script.

    If it doesn't open then go to c:\desktopclean and double click on the cleandesktop.vbs
    Do not run any other file from there please unless asked to.

    If you have script blocking enabled you will get a warning about a malicious script wanting to run.
    Please allow this script to run. It is not malicious.

    If you get a message when you first run it "Can not find script file "blah blah blah" then don't worry just doubleclick the cleandesktop.vbs script again you sometimes get that message when a script blocker blocks the script.

    It will then kill Explorer. You will lose your taskbar and desktop.
    It will repair the registry entries returning your normal desktop and context menu functions.

    It will restart Explorer.

    Once you have performed the big cleanup, each of the other Users on the System needs to be signed in to clean up their desktop and regain the right click.

    I have included another vbs to do this. It is named Other Profiles Regfix.vbs.

    Have each User sign in and run Other Profiles Regfix.vbs
    Open C:\ (Go to Start>Run and type C: Press enter) and Open the c:\desktopclean folder. D
    ouble click on Other Profiles Regfix.vbs

    Explorer will be ended and that user's active desktop registry entries will be repaired.
    Explorer will be restarted.

    To restore the desktop to whatever picture you normally have right click on a blank part of desktop & select properties/desktop & select your prefered picture press apply & then ok to exit and then press F5.

    You will need to do this step for every user account.
     
  3. Flipdude91

    Flipdude91 Thread Starter

    Joined:
    Aug 2, 2006
    Messages:
    7
    Thanks , problem solved :D
     
  4. Cheeseball81

    Cheeseball81 Retired Moderator

    Joined:
    Mar 3, 2004
    Messages:
    84,315
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/488956

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice