CompRepairGurus.com

We recently repaired a heavily infected computer. After clean-up we were unable to change the desktop background image. Even after clean-up the names of the background images were all grayed out. After a bit of research we came across several registry keys which were added by a virus.

The first thing we did was to, uncheck “lock web content” in “display properties”.

Then we deleted the following registry keys….

Click “Start” hit run (can’t see run?), type ” Regedit ” (without the quotes) and navigate to the following entries, and delete them.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Policies\ActiveDesktop\NoHTMLWallPaper = dword:00000001

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Policies\System Wallpaper = “”

Viruses are always trying to cover their tracks. This repair was no exception…. Error Message: “Task Manager has been disabled by your administrator”. There was no way anyone using this computer would even be capable of securing “Task Manager”. After a bit of research I came across two things, the first was that “Spybot” picked up this problem. The second was that, “Spybot” could only half-repair the problem. After a restart I found that either typing

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d 0 /f

into the “run command”

Or go to “Run” and type “Regedit” and navigate to

HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies\ System

and delete “DisableTaskMgr”

cleared the problem right up.

Once again, if you have any problems, please Contact Us.