Destop icons dead / Desktop Security 2010

[SuperDave]

What happens when you create a new icon for ex. SI.Com-Golf?

[JimJamie46]

They don't work.
A Firefox shortcut copied to the desktop will not work.
System tray internet shortcuts don't work either.
Any non internet shortcut desktop icon will work.
IE favorites don't work. An IE favorite copied to the desktop does not work.
Links in email (Outlook Express 6) do not work.

[SuperDave]

It works for me. When I was on a site I went to File, Send to, shortcut to desktop. Try it and see if it will work.
I don't believe that this problem with the icons are caused by malware. Perhaps, you should start a new thread in one of the software forums on this site.

[JimJamie46]

Well of course it works for you!

I am 99% sure this problem was caused by the Desktop Security malware.

I will look elsewhere on this site for help.

[SuperDave]

Did you try creating a new icon to one of those sites you mentioned?

[JimJamie46]

Yes, I tried that too. It doesn't work.

[SuperDave]

Could you please run ESET scan again and this time make sure that the "Remove Found threats" box is checked.

[JimJamie46]

Log below. Within ESET should I delete these files?

C:\Documents and Settings\Administrator\Local Settings\Application Data\Identities\{1570271F-33DC-4C63-B828-70C579138C9A}\Microsoft\Outlook Express\Emails0106to1208.dbx   Win32/Sober.O worm   unable to clean
C:\Documents and Settings\Administrator\Local Settings\Application Data\Identities\{1570271F-33DC-4C63-B828-70C579138C9A}\Microsoft\Outlook Express\inboxcopy0407.dbx   Win32/Sober.O worm   unable to clean
C:\Qoobox\Quarantine\C\Program Files\FunWebProducts\Installr\1.bin\F3PLUGIN.DLL.vir   a variant of Win32/Toolbar.MyWebSearch application   cleaned by deleting - quarantined
C:\Qoobox\Quarantine\C\Program Files\FunWebProducts\Installr\1.bin\NPFUNWEB.DLL.vir   Win32/Toolbar.MyWebSearch application   cleaned by deleting - quarantined
C:\WINNT\Fonts\navdb.dbx   IRC/Zcrew.A trojan   cleaned by deleting - quarantined
C:\WINNT\Fonts\nordb.dbx   IRC/Zcrew.A trojan   cleaned by deleting - quarantined
C:\WINNT\system32\BNC.MRC   probably a variant of Win32/Randon.G1 worm   cleaned by deleting - quarantined

[SuperDave]

Within ESET should I delete these files?

Yes, please delete these emails and run ESET again.

[JimJamie46]

By looking at the text this appears to be a file folder of emails spanning two years.         "Emails0106to1208.dbx"         
What are the odds deleting this folder will cure my problem?
I think very slim, since I have not even been in that folder for months.

[JimJamie46]

I cut the two file folders out and put them on a thumb drive.
I ran the full scan. Results were all zeros.
No change in the icon situation.

[JimJamie46]

This fixed it. From Elise the Romanian at MalwareBytes

Forum Deity
******

Group: Experts
Posts: 1,846
Joined: 13-January 10
From: Home
Member No.: 29,666



   
Hello, lets attempt to repair your Internet shortcuts. Please make sure to do the following steps in the given order; if you encounter a problem at any point, just stop and post back here.

Warning: this fix is for this user only. Using this fix on another computer is at your own risk and can cause damage.

BACKUP THE REGISTRY
---------------------------
Backup Your Registry with ERUNT

    * Please use the following link and scroll down to ERUNT and download it.
      http://aumha.org/freeware/freeware.php
    * For version with the Installer:
      Use the setup program to install ERUNT on your computer
    * For the zipped version:
      Unzip all the files into a folder of your choice.

Click Erunt.exe to backup your registry to the folder of your choice.

Note: to restore your registry, go to the folder and start ERDNT.exe


Click Start > Run, in the box that opens type notepad and press enter.
Copy/paste the text in the codebox below in Notepad and save it as fixme.bat to your desktop.
CODE
REGEDIT4

; @echo off
; regquery "HKEY_CLASSES_ROOT\InternetShortcut" >> export.txt
; REGEDIT.EXE /S "%~f0"
; start export.txt
; del %0

[-HKEY_CLASSES_ROOT\InternetShortcut]
Exit Notepad and double-click on fixme.bat to run it.

A textfile named export.txt should open. Please posts its contents in your next reply.


Open Internet Explorer, click the Tools menu, select Internet Options, Programs
Click "Reset Web Settings". Click Apply/OK to exit the internet options and verify if the desktop shortcuts work now (to be sure everything is in place, restart your browser after changing the settings).


--------------------
Regards,
Elise