[Solved] Half white Desktop.

[roanantelope]

Hi all,

 

My trouble started when my grandson used cheat codes on Grand Theft Auto. When he logged out of the game I ended up with a half white screen. I have contacted GTA and they assure me that the game would not cause this problem. I have done all the usual things like try and work with properties on the main screen. When the screen runs up the desktop shows normal until the icons appear. This is when the screen turns half white. All my programs are normal and I get a full screen. System restore does not help. I do get an error: Line 65 char 1 error Object does not support the action. Code 0 file://C:/documents data/microsoft/internet explorer/desktop.htt

 

Hope this helps,

regards,

Roanantelope.

:(

[KenB]

Hi and welcome to ExTS

 

These instructions involve navigating the Registry - please do not make any changes other than what I suggest.

 

Start > type in .......regedit.......ENTER

This will open the registry

 

Click the > that is to the left of the following:

 

HKEY_CURRENT_USER > Software > Microsoft > Internet Explorer > Desktop > SafeMode > Components

 

When you get to "Components" you need to click on the word itself to highlight it.

In the right panel you will see DeskHtmlVersion ............. and a value. ( this should be 0x00000000 (0) )

 

If it isn't the you need to change it.

Right click on DeskHtmlVersion and click on "Modify"

Change the number that is shown in Value Data to 0 (zero) then click on OK to make the change.

[roanantelope]

Hi KenB,

 

Thank you for your help. I followed you instructions and found that the value was not 0. I changed it to 0. But alas, the fault remained. I rechecked the value and found that it had remained on 0. When the screen comes up at first it shows the icons with a blue background then it changes back to the half white screen. I am sure you are near the fault. I await any further help that you may have.

 

Regards,

Roanantelope.

[KenB]

Hi

 

Try this:

Hold down the Windows key and tap E

Then ..........tools > folder options > view > uncheck hide protected operating system files.

Click on OK

 

Then Start ...........type in ........desktop.htt................ENTER

You should be given the location.

 

You need to rename the file desktopold.htt

 

Refresh the page CTRL + R

 

Windows should create another desktop.htt

 

Go back to .............tools > folder options > view > and check hide protected op. sys. files.

Click on OK

[roanantelope]

Hi KenB,

Thank you once again. I did as you said but desktop.htt cannot be found. I searched the computer for it but it does not seem to exist. I think that you are on top of this fault now?

 

Regards,

Roanantelope

[KenB]

C:/documents data/microsoft/internet explorer/desktop.htt

From your first post:

 

What if you click on C:\ > ..............and follow the path to Internet Explorer .......desktop.htt

If it is there right click on it and rename.

 

You may need to uncheck hide protected operating system files first

[roanantelope]

Hi KenB

Strange but I cannot find /documents data/ Only documents and settings.

 

Thanks for your patience.

roanantelope.

[KenB]

Hi

 

I would be inclined to try a System Restore to a date just before the start of your problem.

 

Start > ..........type in ............system restore ...............ENTER

You will be given a list of dates.

If the dates shown don't go back far enough there should be a box to tick for "Show more dates".

 

Select a date that you know is before the start of this problem.

Your data / files / photos etc will be fine.

 

Any updates / driver installs will need to be re-done as these will be lost.

 

See here for more info:

[roanantelope]

Hi KenB,

 

System restore does not help sorry

 

roanantelope

[KenB]

Download MalwareBytes from here:

click here

 

Install > Update > Run

 

It will produce a log in Notepad - copy this and post it in your next reply.

[roanantelope]

Hope this makes sense to you.

 

roanantelope

Malware.pdf

[maynardvdm]

Hi

 

That is not Malwarebytes.

 

Use the link Ken supplied, reg cleaners are normally not very good.

[roanantelope]

Hi KenB

 

I hope that you are able to open this file. Thanks.

 

Roanantelope

mbam-log-2012-07-15 (15-59-40).txt

[KenB]

I have posted the log as this is how our security experts like to see it.

I will ask one of them to take a look and advise further.

 

====================

 

Malwarebytes Anti-Malware (Trial) 1.62.0.1300

http://www.malwarebytes.org

 

 

Database version: v2012.07.15.07

 

 

Windows XP Service Pack 3 x86 NTFS

Internet Explorer 8.0.6001.18702

Dave :: PRIVATE-4E09097 [administrator]

 

 

Protection: Enabled

 

 

2012/07/15 03:59:40 PM

mbam-log-2012-07-15 (15-59-40).txt

 

 

Scan type: Quick scan

Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

Scan options disabled: P2P

Objects scanned: 219040

Time elapsed: 6 minute(s), 56 second(s)

 

 

Memory Processes Detected: 0

(No malicious items detected)

 

 

Memory Modules Detected: 0

(No malicious items detected)

 

 

Registry Keys Detected: 6

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{d08d9f98-1c78-4704-87e6-368b0023d831} (PUP.Adware.RelevantKnowledge) -> No action taken.

HKCR\CLSID\{CA4520F3-AE13-4FB1-A513-58E23991C86D} (Trojan.Downloader) -> Quarantined and deleted successfully.

HKCR\gencrawler_gc.GenCrawler (Trojan.Downloader) -> Quarantined and deleted successfully.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CA4520F3-AE13-4FB1-A513-58E23991C86D} (Trojan.Downloader) -> Quarantined and deleted successfully.

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{CA4520F3-AE13-4FB1-A513-58E23991C86D} (Trojan.Downloader) -> Quarantined and deleted successfully.

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{CA4520F3-AE13-4FB1-A513-58E23991C86D} (Trojan.Downloader) -> Quarantined and deleted successfully.

 

 

Registry Values Detected: 1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\DOCUMENTS AND SETTINGS\DAVE\APPLICATION DATA\MEDIA FINDER\EXTENSIONS\GENCRAWLER_GC.DLL (Trojan.Downloader) -> Data: 1 -> Quarantined and deleted successfully.

 

 

Registry Data Items Detected: 0

(No malicious items detected)

 

 

Folders Detected: 2

C:\Program Files\RelevantKnowledge (PUP.Spyware.MarketScore) -> No action taken.

C:\Documents and Settings\All Users\Start Menu\Programs\RelevantKnowledge (PUP.Spyware.MarketScore) -> No action taken.

 

 

Files Detected: 16

C:\Documents and Settings\Dave\My Documents\Downloads\ADLSoft_UnCompressor_v2.exe (PUP.Adware.InstallCore) -> No action taken.

C:\Documents and Settings\Dave\My Documents\Downloads\AudioPerformerSetup.exe (PUP.BundleInstaller.IB) -> No action taken.

C:\Documents and Settings\Dave\My Documents\Downloads\Roberta_Flack_-_Set_The_Night_To_Music_(with_Maxi_Priest).mp3.exe (PUP.Adware.Agent) -> No action taken.

C:\Documents and Settings\Dave\My Documents\Downloads\ConvertWAVToMP3Setup.exe (PUP.Adware.RKN) -> No action taken.

C:\Program Files\RelevantKnowledge\ncncf.dat (PUP.Spyware.MarketScore) -> No action taken.

C:\Program Files\RelevantKnowledge\rlls.dll (PUP.Spyware.MarketScore) -> No action taken.

C:\Program Files\RelevantKnowledge\rlls64.dll (PUP.Spyware.MarketScore) -> No action taken.

C:\Program Files\RelevantKnowledge\rloci.bin (PUP.Spyware.MarketScore) -> No action taken.

C:\Program Files\RelevantKnowledge\rlservice.exe (PUP.Spyware.MarketScore) -> No action taken.

C:\Program Files\RelevantKnowledge\rlvknlg64.exe (PUP.Spyware.MarketScore) -> No action taken.

C:\Program Files\RelevantKnowledge\shfscp.dat (PUP.Spyware.MarketScore) -> No action taken.

C:\Documents and Settings\All Users\Start Menu\Programs\RelevantKnowledge\About RelevantKnowledge.lnk (PUP.Spyware.MarketScore) -> No action taken.

C:\Documents and Settings\All Users\Start Menu\Programs\RelevantKnowledge\Privacy Policy and User License Agreement.lnk (PUP.Spyware.MarketScore) -> No action taken.

C:\Documents and Settings\All Users\Start Menu\Programs\RelevantKnowledge\Support.lnk (PUP.Spyware.MarketScore) -> No action taken.

C:\Documents and Settings\All Users\Start Menu\Programs\RelevantKnowledge\Uninstall Instructions.lnk (PUP.Spyware.MarketScore) -> No action taken.

C:\Documents and Settings\Dave\Application Data\Media Finder\Extensions\gencrawler_gc.dll (Trojan.Downloader) -> Quarantined and deleted successfully.

 

 

(end)

[Starbuck]

Hi roanantelope

 

You seem to have been selective in what you removed.

To be honest MBAM doesn't flag things for the sake of it.

Obviously the experts there deem this RelevantKnowledge program as Potentially Unwanted due to the spyware it contains.

If you want to clean this properly, i suggest you re-run MBAM and have those lines removed.

[roanantelope]

Hi Starbuck,

 

I have done as you suggested.

 

Roanantelope.

 

 

Malwarebytes Anti-Malware (Trial) 1.62.0.1300

 

 

http://www.malwarebytes.org

 

 

Database version: v2012.07.18.04

 

 

Windows XP Service Pack 3 x86 NTFS

Internet Explorer 8.0.6001.18702

Dave :: PRIVATE-4E09097 [administrator]

 

 

Protection: Enabled

 

 

2012/07/18 05:14:49 PM

mbam-log-2012-07-18 (17-14-49).txt

 

 

Scan type: Full scan (C:\|D:\|F:\|)

Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

Scan options disabled: P2P

Objects scanned: 361890

Time elapsed: 1 hour(s), 4 minute(s), 33 second(s)

 

 

Memory Processes Detected: 0

(No malicious items detected)

 

 

Memory Modules Detected: 0

(No malicious items detected)

 

 

Registry Keys Detected: 1

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Uncompressor (PUP.Adware.InstallCore) -> Quarantined and deleted successfully.

 

 

Registry Values Detected: 0

(No malicious items detected)

 

 

Registry Data Items Detected: 0

(No malicious items detected)

 

 

Folders Detected: 0

(No malicious items detected)

 

 

Files Detected: 1

C:\Program Files\Uncompressor\Uninstall\Uninstall.exe (PUP.Adware.InstallCore) -> Quarantined and deleted successfully.

 

 

(end)

[Starbuck]

Are you still having the problem?

[roanantelope]

Hi Startbuck,

 

Yes the problem is the same. To my logic the fault must lie in the last part of the program when it displays the icons. The desk top displays the screen saver until the appearance of the icons. Then the screen goes half white. When I choose a program or the browser the full screen reappears.

 

Roanantelope.

[RandyL]

"Active desktop"

I believe that on xp you can right click the desktop and disable active desktop.

 

This feature is not needed if you use a bitmap file for a background.

 

Edit:

 

http://www.computerhope.com/issues/ch000593.htm This link might help.

[roanantelope]

Thank you Randyl,

 

You cracked the problem. You are an ace. But all the other members taught me a lot, So A BIG THANKS TO ALL.

 

Roanantelope.

[RandyL]

You're welcome. I finally remembered that I had a similar issue way back with Windows Millenium Edition.

[Starbuck]

Nice call Randy. :)

[KenB]

Nice call Randy

 

He has his uses now and again :)

 

Nice one Randy.

[RandyL]

Thanks Starbuck. Coming from you that's high praise.

 

Ken your humor is always welcome. Yes I have issues now and again. :)

But my issues are nothing compared to those of Windows ME.

 

Active desktop always was a problem on older operating systems now that I recall. Best left turned off if you ask me.

 

Thanks for marking this thread solved Ken.