Problem with NoDispAppearancePage and NoDispBackgroundPage

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by BR41NZ, Aug 1, 2005.

  1. BR41NZ

    BR41NZ Private E-2

    Hey all - been assaulted with spyware recently... managed to delete it, but can't get Display Properties to show everything. I've read hundreds of threads talking about registry modification and lots of people seem to have been able to fix the problem easily. BUT! Both these keys are set to 1, disabling the tab's of course, and whenever I change them to 0, they just revert straight back to 1 as soon as I navigate away and back again in regedit.

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\NoDispAppearancePage or \NoDispBackgroundPage

    Both set to 1 and wont change. I've deleted them, and they reappear as soon as I refesh. Changed them to 00000000, and they pop back to 00000001 as soon as I refresh.

    This has got me puzzled as an african monkey in fiji. I've attached a HJT log, as well as a screenshot (cropped) of the message displaying on my desktop. Screen keeps flashing too - like it's constantly refreshing or something.

    Any help MUCH appreciated!

    Oh yeah - comp specs...

    Athlon XP 2200+
    Gigabyte GL-7N400 Pro2
    1024MB DDR400 (2x 512MB sticks in Dual Channel)
    Geforce FX 5700 256MB
     

    Attached Files:

  2. AbbySue

    AbbySue MajorGeeks Administrator

    Please follow the steps below.

    - Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above if you still have a problem:

    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENTto your next message. (Do NOT copy/paste the log into your post).
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds