Windows 7: Recent change to system - can't re-position desktop icons + more

Hi folks,

I see that this topic has been mentioned more than once in the past - sorry to bring it back (none of the solutions fix my problem).

A few days ago (16th July 2012) the Resident Shield of my AVG Internet Security 2012 reported an issue with the 'Services.exe' file located in C:\Windows\System32\
- specifically stating 'Trojan horse dropper.Generic_c.MMI' and saying that the 'Object is white-listed (critical/system file that should not be removed'.

After Googling this issue the avg forum suggested I use the following command in the cmd box: "sfc /scanfile=c:\windows\system32\services.exe". After doing this I had no more problems reported with services.exe.

Problem 1:
However, now, my desktop icon arrangement has reset and grouped to the left side of the screen. I can re-position each icon however, upon reboot or the desktop Refresh command all Icons return to the left - to exactly the same position. Auto arrange icons is turned off and align to grid can be turned off however, it keeps turning itself on upon reboot.
Icon re-positioning was always retained previously - this problem has only just appeared.

Problem 2:
Upon double-clicking the desktop Computer icon I am now unable to permanently set the view from 'Tiles' to 'Details' (I can, temporarily) - this was never the case until the issue above (i.e. all explorer/folder views were permanently set to detail via 'folder options/view/apply folders').

So, something has changed very recently. I've ran full scans using avg (virus,tracking and rootkit), malewarebytes mbam, spybot but the problem persists. I've re-checked system files using 'sfc /verifyonly' and no 'integrity violations' were found.

Can anyone throw some light on what might be causing this?

Hello mesab66 and welcome to Seven Forums.

If you have a restore point going back to July 15 or earlier you could see if that will correct the problem.

System Restore

You could also run the actual system file checker scan (sfc /scannow) from an elevated command prompt (option two) just to make sure you don't have any damaged or corrupt system files. If any problems are found run the scan 3 times rebooting in between each scan.

SFC /SCANNOW Command - System File Checker

Thanks for your reply. Unfortunately sfc /scannow didn't find anything.

In the meantime, I created a new windows 7 standard user account. Upon rebooting into this account I am able to permanently re-position any desktop icon. Inaddition, double-clicking the desktop 'Computer' icon allows me to permanently change the view settings to 'details' (from 'tiles'). These are both things I cannot do with my own (administrator) account.
--> I hope this helps?

--> my latest Acronis backup image is 3 months old - I've purchased and installed a fair bit since then (cakewalk sonar, propellerhead reason, etc), so if possible, I'd be keen to see if my problem is a 'simple' fix.

You could try to create a new administrator account and then replace the file permissions for the folders that you need to recover. It's a fairly complicated procedure.

Repair corrupted admin account - Microsoft Answers

You could also try a repair install.

Repair Install

BUMP - Had same issue as you and did sfc /scanfile. Also did system repair reinstall and nothing changed. Made new user account and problem was gone until I copy over my files and appdata. Came right back, anyone got fix for this??


Foxler

I think I solved it, issue is gone after removing these files.

2012-07-16 06:34:34 . 2012-07-16 06:34:34 106 ----a-w- C\Windows\Installer\{8dbef5a3-68e2-7125-0015-8c7499445e10}\L\1afb2d56.vir
2012-07-16 06:17:45 . 2012-07-16 06:17:45 232,960 ----a-w- C\Windows\Installer\{8dbef5a3-68e2-7125-0015-8c7499445e10}\U\00000008.@.vir
2012-07-16 06:17:45 . 2012-07-16 06:17:45 95,744 ----a-w- C\Windows\Installer\{8dbef5a3-68e2-7125-0015-8c7499445e10}\U\80000032.@.vir
2012-07-16 06:17:45 . 2012-07-16 06:17:45 804 ----a-w- C\Windows\Installer\{8dbef5a3-68e2-7125-0015-8c7499445e10}\L\00000004.@.vir
2012-07-16 06:17:45 . 2012-07-16 06:17:45 80,896 ----a-w- C\Windows\Installer\{8dbef5a3-68e2-7125-0015-8c7499445e10}\U\80000064.@.vir
2012-07-16 06:17:44 . 2012-07-16 06:17:44 16,896 ----a-w- C\Windows\Installer\{8dbef5a3-68e2-7125-0015-8c7499445e10}\U\80000000.@.vir
2012-07-16 06:17:44 . 2012-07-16 06:17:44 1,632 ----a-w- C\Windows\Installer\{8dbef5a3-68e2-7125-0015-8c7499445e10}\U\000000cb.@.vir
2012-07-16 06:17:44 . 2012-07-16 06:17:44 2,048 ----a-w- C\Windows\Installer\{8dbef5a3-68e2-7125-0015-8c7499445e10}\U\00000004.@.vir

Foxler

I'm just reading along trying to learn.
Foxler could you tell us where you found these files and how? How did you know they were bad files? What are these files?

Just old trick from Window 98 days, look at the AVG log to see when it happen match the date and time rang so anything on July 16th with any new added files to the system. Saw those and backup them up before removed them. There we go, the desktop and user profile work again.

Foxler

Thank you. Were they part of a infection of some kind or just the results of the infection. I have been Googling 8dbef and found loads of things it can be attached to.

starfaxACEFox, did you delete the entire {8dbef5a3-68e2-7125-0015-8c7499445e10} directory or just the files you indicated? I have a very similar problem.