Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Messed up Desktop. [CLOSED]


  • This topic is locked This topic is locked

#1
Xantos89

Xantos89

    Member

  • Member
  • PipPip
  • 63 posts
well, A while ago I went away on vacation, and when I cam back I had all these different viruses and adware and stuff. I noticed my old windows XP setup was in the classic view, and the backround was different. When I go to properties and I go to desktop, I see my backround, but theres a black box towards the top left side of the preview screen. When I go to appearance, all I see in the box is words that say, "Theme Preview". It only lets me select windows classic, and There are only blank spaces in Color Scheme and Font size.

Plz help , this is really messed up.

Here's my Hijackthis Log:

Logfile of HijackThis v1.99.1
Scan saved at 1:56:29 PM, on 9/2/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\VXNlcgAA\command.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Remote Task Manager\RTMService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposol08.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\User\Desktop\Hijthis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: officejet 6100.lnk = ?
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar3.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar3.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar3.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar3.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar3.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar3.dll/cmtrans.html
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplane...DC_1_0_0_44.cab
O16 - DPF: {3BFFE033-BF43-11D5-A271-00A024A51325} (iNotes6 Class) - http://student03.uda...edu/iNotes6.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefend...bitdefender.cab
O16 - DPF: {9FC5238F-12C4-454F-B1B5-74599A21DE47} (Webshots Photo Uploader) - http://community.web...otoUploader.CAB
O16 - DPF: {E9348280-2D74-4933-BE25-73D946926795} (DeviceEnum Class) - http://h20270.www2.h...cdetection3.cab
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\VXNlcgAA\command.exe
O23 - Service: CWShredder Service - Unknown owner - C:\DOCUME~1\User\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\V2N2PMWW\CWShredder[1].exe (file missing)
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Remote Task Manager service (RTM) - Unknown owner - C:\Program Files\Remote Task Manager\RTMService.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
  • 0

Advertisements


#2
Rawe

Rawe

    Visiting Staff

  • Member
  • PipPipPipPipPipPipPip
  • 4,746 posts
Hello and welcome!

First, can you do this:

Download smitRem.exe and save the file to your desktop.
Double-click on the file to extract it to it's own folder on the desktop.

Next, please reboot your computer in Safe Mode by doing the following;

1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Select the first option, to run Windows in Safe Mode.


Open the smitRem folder, then double click the RunThis.bat file to start the tool. Follow the prompts on screen.
Wait for the tool to complete and disk cleanup to finish.

The tool will create a log named smitfiles.txt in the root of your drive, eg; Local Disk C: or partition where your operating system is installed. Please post that log here in your next reply.

Then reboot back into normal mode..

http://www.geekstogo...pe=post&id=1806

Download the attached zip.file, unzip it. Run fixreg1.reg, then fixreg2.reg

Hit YES when Windows asks you to merge with the registry.

Reboot & post the Smitfiles.txt log. :tazz:
  • 0

#3
Xantos89

Xantos89

    Member

  • Topic Starter
  • Member
  • PipPip
  • 63 posts
kk here ya go:


smitRem log file
version 2.3

by noahdfear

The current date is: Fri 09/02/2005
The current time is: 14:51:02.92

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Pre-run Files Present


~~~ Program Files ~~~



~~~ Shortcuts ~~~



~~~ Favorites ~~~



~~~ system32 folder ~~~



~~~ Icons in System32 ~~~



~~~ Windows directory ~~~



~~~ Drive root ~~~

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


Post-run Files Present


~~~ Program Files ~~~



~~~ Shortcuts ~~~



~~~ Favorites ~~~



~~~ system32 folder ~~~



~~~ Icons in System32 ~~~



~~~ Windows directory ~~~



~~~ Drive root ~~~



~~~ Wininet.dll ~~~

CLEAN! :tazz:

What next??
  • 0

#4
Rawe

Rawe

    Visiting Staff

  • Member
  • PipPipPipPipPipPipPip
  • 4,746 posts
Did you do the regfixes?
  • 0

#5
Xantos89

Xantos89

    Member

  • Topic Starter
  • Member
  • PipPip
  • 63 posts
yup, i did both and rebooted, no dice, I still have a messed up desktop.
  • 0

#6
Rawe

Rawe

    Visiting Staff

  • Member
  • PipPipPipPipPipPipPip
  • 4,746 posts
Ok, do this.

Go to Control Panel click Display > Desktop > Customize Desktop > Web > Uncheck "Security Info" if present.

Then copy and paste text in the box below to an empty notepad file (Starting from REGEDIT4). Make sure there's NO Blank line above "REGEDIT4"!

REGEDIT4

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoViewContextMenu"=-

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoViewContextMenu"=-
"NoActiveDesktop"=-
"ForceActiveDesktopOn"=-

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop]
"NoChangingWallPaper"=-
"NoComponents"=-
"NoAddingComponents"=-
"NoDeletingComponents"=-
"NoEditingComponents"=-
"NoHTMLWallpaper"=-


Name it as an fixdt.reg and then click "Save". Save it to your desktop. Then double-click on the fixdt.reg file on your desktop and when it prompts to Merge with the registry, hit YES.

Then reboot. Post a fresh HiJackThis log and let me know what problems are left. :tazz:
  • 0

#7
Xantos89

Xantos89

    Member

  • Topic Starter
  • Member
  • PipPip
  • 63 posts
First I'd like to say, sorry for not mentioning I'm kinda noob at this. But heres what I have done.

I went to control panel, then to appearence and themes, then to display, then to desktop, then to customize desktop, then to the web tab, and I found nothing except a thing where u can check or uncheck My Current Homepage.

Then I right clicked my desktop, went to new text document, and put in the stuff in the box.

I wasn;t sure what you meant by double click that file because it just brings me to the words in the notepad again.

So I went and did that fixreg 1 and 2 thing again just to see if thats what you meant and I rebooted. Nothing happened. Plz explain what I am supposed to do.
  • 0

#8
Rawe

Rawe

    Visiting Staff

  • Member
  • PipPipPipPipPipPipPip
  • 4,746 posts
Go to Start and open notepad. Please make sure it's an blank file, then copy all the text in the box in my previous reply to it.

Name the notepadfile as an fixdt.reg and then click "Save". Save it to your desktop. Then double-click on the fixdt.reg file on your desktop and when it prompts to Merge with the registry, hit YES.

Then reboot. Let me know if you're still having problems with the background after this.. Can you change your XP theme?
  • 0

#9
Xantos89

Xantos89

    Member

  • Topic Starter
  • Member
  • PipPip
  • 63 posts
:tazz: I did everything you said and I still cannot change the theme, nor can I change the appearence. Istill can change the backround but thats it....

What should I do?
  • 0

#10
Rawe

Rawe

    Visiting Staff

  • Member
  • PipPipPipPipPipPipPip
  • 4,746 posts
Oh, sorry, I thought you had problems with the background.

For the theme..

Download the following file (from Kelly's Korner);

http://www.kellys-ko...s/Resources.zip

Make sure you when extract it, the destination is c:\Windows.
(where c: is the partition where XP is installed).

Reboot.

Go to Display Properties and XP style should be back.
  • 0

Advertisements


#11
Xantos89

Xantos89

    Member

  • Topic Starter
  • Member
  • PipPip
  • 63 posts
:) Oh, so all that stuff I did before was for nothing... :tazz: k

Anyway, I did what you said, extracting it to that file and stuff, but when I did it said that there was a file with that stuff already in C:windows or whatever. I said yes to all anyway. and well, still nothing works :)

Edited by Xantos89, 02 September 2005 - 03:01 PM.

  • 0

#12
Rawe

Rawe

    Visiting Staff

  • Member
  • PipPipPipPipPipPipPip
  • 4,746 posts
Ok, which tabs are gone from properties?
  • 0

#13
Xantos89

Xantos89

    Member

  • Topic Starter
  • Member
  • PipPip
  • 63 posts
The tabs arn't gone, but I'll explain each.

At themes, it's at Windows XP, it's got the backround I selected but in the space where its usually like what the windows will look like, it's got this black box. If I select another theme, say Windows classic, an "Error Loading Theme" box comes up saying,

"The theme could not load. Unspecified error

File:C:WINDOWS\resources\Themes\Windows Classic.theme

Desktop is fine.

Screen saver is fine.

In appearence all there is in the box where it used to show what the windows will look like, it says "Theme Preview".

Windows and buttons:
Windows Classic style-can't change this when I go to tab this is the only option

Color scheme:
-nothing can't select anything either

Font size:
-nothing here either, can't select anything

Settings is fine, nothing wrong with that.

And that's the basics of what I got on properties menu :tazz:

Edited by Xantos89, 02 September 2005 - 03:03 PM.

  • 0

#14
Xantos89

Xantos89

    Member

  • Topic Starter
  • Member
  • PipPip
  • 63 posts
did I stump ya? :tazz:
  • 0

#15
Xantos89

Xantos89

    Member

  • Topic Starter
  • Member
  • PipPip
  • 63 posts
PLZ HELP ME!!!!!! :tazz:
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP