Solved

desktop hijacked by desktop.html

Posted on 2004-10-23
25,067 Views
Last Modified: 2012-08-13
My desktop background is now white and flashes to a light
grey. Right click/Properties on desktop and only get a
general tab - no options to change anything. The address
[URL] is file://C:\WINDOWS\Web\desktop.html. This is the
name of one of the files that I deleted after my pc was
infected by several files containing trojan viruses etc
[e.g. mstasks2.exe, system.exe, wintime.exe etc...] and
my desktop was taken over by this desktop.html and made
up of circa 20 gifs that had been created in
c:\windows\web directory.
 
Try to change desktop background via control
panel/Appearance and Themes - the Display
Properties/Desktop tab is available and indeed shows my
desired background picture, the name is highlighted but
the apply function is greyed out. Selecting ok does not
change the desktop background. Also my desired desktop
background is momentarily visible during windows shutdown.
 
Searching in the registry for desktop.html reveals the
following:-
 
In hive My
Computer\HKEY_CURRENT_USER\Software\Microsoft\Internet
Explorer\Desktop\Components\0 , the keys Source and
SubscribedURL both contain the values
c:\WINDOWS\Web\desktop.html
0
Question by:jibranilyas
    23 Comments
     
    LVL 65

    Accepted Solution

    by:
    Hello jibranilyas =)

    >> Display Properties/Desktop tab is available and indeed shows my desired background picture, the name is highlighted but the apply function is greyed out.

    Can u click the Customize button there ??
    if yes the click it, and remove all the pages enttries from here excet the My Current Home Page
    apply and now cehck ??
    0
     
    LVL 65

    Expert Comment

    by:SheharyaarSaahil
    i was assuming there that u have XP, if u dont have then check here on How to Disable Active Desktop on easlier versions of Windows >> http://www.computerhope.com/issues/ch000593.htm
    0
     
    LVL 65

    Expert Comment

    by:SheharyaarSaahil
    In Short, u are having the Avtive Desktop enabled on ur system, and u just need to disable it to get rid of that web page and to get back ur normal backgrounds :)
    Post back if u still face any difficulty.... =)
    0
     

    Author Comment

    by:jibranilyas
    yes,,, i have it enables... but i don't see the web tab in display properties
    0
     
    LVL 65

    Expert Comment

    by:SheharyaarSaahil
    which OS are u using jibran ??
    0
     

    Author Comment

    by:jibranilyas
    yuppp got it...

    i changed the resolution to the highest... so the webpage moved to the left side...

    then i went to display properties --> desktop --> customize desktop --> RESTORE DEFAULT...

    Thanks so much yar...
    0
     

    Author Comment

    by:jibranilyas
    its server 2003 :)
    0
     
    LVL 65

    Expert Comment

    by:SheharyaarSaahil
    lol..... server 2003.... the new beast ;-)
    glad u got it fixed, Cheers ^_^
    0
     

    Author Comment

    by:jibranilyas
    i know yar... just installed it...
    went to a serial bhai bandi site and look wat happened..

    glad its all well now !
    0
     

    Expert Comment

    by:johnjames123
    I have the same desktop.html but it keeps coming back.  In control panel \display\desktop \web  there is a file that states security which is this desktop.html that refers to some spyware page.  On every reboot this file is recreated and added back to the desktop active items.  There is some program that keeps adding this back to desktop active items per each boot.  Ran all kinds of spyware utilities. Some free some bought still cannot find program.
    0
     

    Author Comment

    by:jibranilyas
    right click on desktop ( meaning ,, try to get outside of that html page... go for the corners )
    or go from control panel-->display

    display properties --> desktop --> customize desktop --> RESTORE DEFAULT...

    or

    display properties-->desktop-->customize desktop-->web

    let me know
    0
     
    LVL 65

    Expert Comment

    by:SheharyaarSaahil
    john you have to post your own question in order to get a solution, posting your problem in other users questions is not considered as a good thing here :)
    0
     
    LVL 65

    Expert Comment

    by:SheharyaarSaahil
    :-o
    jibran..... o bhai kissi mod ne dekh liya na to shamat aa jaye gi tumki ;-)
    0
     

    Author Comment

    by:jibranilyas
    sheharyar bhai... abhi tak jaag rahey ho ;)

    john,,, just copy n paste my question...

    i m pretty sure ur problem will be resolved
    0
     
    LVL 65

    Expert Comment

    by:SheharyaarSaahil
    haan... aadat ho gayi hai ab :)
    0
     

    Author Comment

    by:jibranilyas
    uhhh, i c

    sowwieee.

    hey btw, have u heard the aadut song from jal ? :P
    0
     
    LVL 65

    Expert Comment

    by:SheharyaarSaahil
    hehe... yeah heard.... but i didn't like that :-S
    0
     

    Author Comment

    by:jibranilyas
    wow,.. aap kafi honest lagtey ho..
    anyway, listen to lamhey or bheegi yadein...

    gotta go... buh bye...

    us becharey ki help kardena yar :P
    0
     
    LVL 65

    Expert Comment

    by:SheharyaarSaahil
    hmmm 24 saal ka hone ke baad honest hona hi parta hai ;-)
    aaj kal Veer Zaara ka nasha chara hai mujhe, woh utre ga to zaroor sunoo ga.... hehe :->

    us becharey ki help ki to mujh bicharey ki kaun help kare ga... :-\
    lol.... take care... Allah Hafiz!!
    0
     

    Expert Comment

    by:cjones1117
    control panel>> Display>>Desktop>>Customize Desktop>>WEB>
    Under the web pages there will be a entry called security>> just delete that and you will get your desktop back.
    Hope this helps it worked for me.
    0
     

    Expert Comment

    by:jonjacobik
    Thanks.  Helped me too.

    Jon Jacobik
    Rescuecom Computer Service
    0
     

    Expert Comment

    by:RichardCoeurdeLion
    Thanks cjones,l was really scratching me head on this one.
    0
     

    Expert Comment

    by:Whelk
    Well done folks, mine was the "security" one too.
    0

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone. Privacy Policy Terms of Use

    Featured Post

    What Should I Do With This Threat Intelligence?

    Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

    Healthcare providers, insurance companies and other covered entities trust eFax Corporate to transmit their most sensitive documents. eFax Corporate can help your organization implement a HIPAA compliant cloud faxing solution.
    When the confidentiality and security of your data is a must, trust the highly encrypted cloud fax portfolio used by 12 million businesses worldwide, including nearly half of the Fortune 500.
    Hi everyone! This is Experts Exchange customer support.  This quick video will show you how to change your primary email address.  If you have any questions, then please Write a Comment below!
    Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…

    875 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    13 Experts available now in Live!

    Get 1:1 Help Now