Malware / Spyware removed tabs on desktop properties

[geno]

I recently removed Antivirus XP 2008 from my mother's laptop, she opened an email which linked to an install :frown: It looks like it's been removed successfully, but now my desktop properties only shows the Themes, Appearance and Settings tabs. The malware obviously removed the Desktop tab to keep me from removing its stupid wallpaper it put up. Any ideas on how I can restore the desktop properties window?

 

[MustISO]

Start, run

type Gpedit.msc

Navigate to User configuration, Administrative Templates, Control Panel, Display

Right click on Remove Display in Control Panel
Click on Properties and select Disabled

Do the same steps to change the following attributes to disabled:

Hide Desktop Tab
Prevent changing wallpaper
Hide Apperance and Themes tab
Hide Settings tab
Hide Screen Saver tab

 

[AnnonUSA]

http://www.kellys-korner-xp.com/xp_tweaks.htm

Go to line 285 and run the first script in the right hand column.

 

[cubby1223]

Eh, combofix is more thorough
http://www.bleepingcomputer.co...ix/how-to-use-combofix

 

[redbeard1]

One of fixes in this tool is one that fixes restrictive policies, like missing display tabs.

Dial a fix

Did you remove the "fake blue sreen" screensaver from the computer. It is usually included with that virus.

 

[geno]

You guys rock - I was able to disable the policy which hid the tabs which were missing. Thank you all very, very much!

 

[geno]

BTW : GPEdit didn't exist on this system, is that something which might have been deleted by the malware?

 

[redbeard1]

XP Home does not have gpedit. MS removed it in the process of making XP Home incapable of joining a domain. Even though most group policy edits are just registry changes, and as this virus demontrates, it would rather helpful to have gpedit work in Home so a person could fix these hacker tweeks with the normal MS utility, and not an outside sources tool.

 

[geno]

Can I just pull gpedit over from my XP pro machine and expect it to run on Home or no?

 

[humanure]

check this download here, open the readme file for intructions on installing it on xp home.

gpedit for xp home

 

[bruceb]

Doesn't work .. the file appmgmts.dll will not register
Something about an invalid entry point

 

[humanure]

Originally posted by: bruceb
Doesn't work .. the file appmgmts.dll will not register
Something about an invalid entry point

it should still work though, I get the same message but gpedit works.

 

[bruceb]

It did not work on a Dell 8200 ... even went directly to the gpedit.msc in the folder
and it did not open properly, as it would on a system with XP Pro .. not too important
for me to need at this time .. maybe will try it again, as I still have the files.

 

[imported_jeb]

Ref. Antivirus XP 2008 - that is one bad dude. My CA antivirus did not pick it up until the second day after I knew I had a problem and I received NO help from them on getting rid of it - a VERY difficult problem since it is always changing and moving - or helping put things back the way they were.

After 4 days I found Kaspersky antivirus program which did get rid of all of it and spent hours on thier forum helping me put things back as they were - all at no cost.

I ran a program - AVZ or something - that would give me a log of a lot of what was going on inside my computer and they would give me a script to run to solve problems.

Before I found them, the XP 2008 had put a total of 5 viruses on my computer.

I highly recommend them if you can't get the problem solved any other way. - jb

 

[bruceb]

Malware Bytes was able to get rid of it .. And a quick fix from Kelly's Korner to restore the missing tabs on Display Properties

http://www.malwarebytes.org/