Desktop Icons Got Renamed to Weird Symbols Resembling O's and X's

Hi Everyone:

        I currently have a friends computer which has a very peculiar problem.  Basically, everyone of his desktop icons have been renamed with strange symbols resembling some type of machine language, like 0's, X's, and geometic shapes.  
My friend told me his pc has been infected with a worm, but, which his desktop and startup menu icons being so messed up, I am not really sure where to begin.  

       Any thoughts or suggestions will be appreciated.

       Thank you.

       George
GMartinAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

nobusCommented:
Hello George,

first startup in safe mode (hit F8 key)
then run the usual programs : (i recommend using stinger and housecall as first ones)

      STINGER   http://www.chip.de/downloads/c_downloads_11105456.html      
      Spybot :       http://www.download.com/3000-8022-10122137.html
      adaware :  http://www.lavasoftusa.com/
http://housecall.trendmicro.com/                       online scan for trojans
http://www.ravantivirus.com/scan/

http://www.spychecker.com/program/hijackthis.html            download
http://www.hijackthis.de/index.php?langselect=english            check the log
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
tosh9iiiCommented:
It just might be in a different language.  It could be in Chinese, but since some computers can't display those characters, it appears "garbled"

If it is language, then you need to set it back to English.  You can do that by going to Control Panel>Regional and Language Options (it's represented by the globe icon)>Advanced>and selecting English from the drop down menu

The problem is that since it's in O's and X's, you can't read it.  But if you select the top one and then push the down arrow 26 times, it should lead you to English United States.
0
bradjeCommented:
From what you've written sounds like an infection which Nobus has already covered.
Though once a "friend" changed my mobile phone language to Chinese. Had a terrible time tring to get it back to English!!

:)
JB
0
Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

GMartinAuthor Commented:
Hi

       Is it possible to run Stinger outside of windows?

       George
0
nobusCommented:
No, it cannot be run in DOS
0
Cyber-DudeCommented:
Intresting;

I wonder; can he change the icons names to what they were? Can he 'rename' and write properly English letters?

Cyber
0
MangolataCommented:
Oh come on, do you not know how to rename something, right click and rename. DUH!!!!!!!!!!!!
0
GMartinAuthor Commented:
Hello Everyone:

        I now have this situation resolved.  Apparently, one or more of system files of Windows XP had been corrupted by a variant of the W32 worm as indicated by Norton Anti Virus 2002.  One file identified as being corrupted was c:\windows\system32\config.exe.  In any case, I reinstalled XP Home and the desktop, startup menu, and taskbar icon names are back to normal.  Even though I ran the latest Norton Anti Virus 2005 Trialware version, Trojan remover, and some anti-spyware utilities which indicated the pc to be free of infection, I am still a little uneasy about this because the only this I did was reinstalled XP.  I did try to perform an online scan from trendmicro.com, but, the page for performing the scan would never open.  

         On a sidenote regarding the last post by Mangolata, I would like to discourage any feedback which can be interpreted as demeaning and belittling.  Such conduct certainly has the potential of diminishing the integrity of this forum.  Besides, any comment as such takes away from the direction the post needs to go in for proper resolution to important member questions.

          In closing, I want to thank each person for their input and suggestions.  As always, there were some really good ideas brought to light.

          Thanks again.

           Regards,

          George
0
nobusCommented:
George,

i had the same thing happening :  >>    online scan from trendmicro.com, but, the page for performing the scan would never open.  <<<

Mostly i got it resolved by opening in IE >Tools >Security, and lowering the settings.
In some cases, running first adaware and spybot helped too, before running the housecall


I hope this info will help you in the future

Have a nice day

PS :  I agree with your post  completely, a little bit of courtesy won't harm nobody !
0
Cyber-DudeCommented:
Can you open any other web pages?

Cyber
0
MangolataCommented:
Sorry Gmartin, i was stressed because my pc was playing up
0
MangolataCommented:
Actually, don't lower the security levels. it put GAIN Gator spyware on without notifying me once when i did that once nobus.

Just trying to keep your PC safe.

Mangolata

:o}
0
nobusCommented:
The idea is to let him open the page from housecall, But he must reset it afterwards !
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Operating Systems

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.