Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: cannot unlock taskbar or make changes in Start menu properties

28 Feb 2013   #1
omegatx

Win 7 Pro 64
 
 
cannot unlock taskbar or make changes in Start menu properties

(Win 7 - 64) I recently was hit with the DOJ "computer locked" hack. I followed the u-tube video instructions and restored my PC to an earlier date. This solved the issue, everything is back to normal, except I cannot make changes to the Start Menu props or unlock the Task Bar. I also ran the MalwareBytes program which removed three instances of malware. Also ran a Vipre deep scan.

I have checked the registry section regarding keys which might be locking these items, but found none. Would appreciate any ideas regarding how to approach this issue. Would creating another user account help? I thought about creating another account, signing out and signing in under that account. Would that boot Win 7 back to the default settings for the Start Menu and Task Bar? (so I could change them?)

Thanks for any ideas.


My System SpecsSystem Spec
.
28 Feb 2013   #2
cottonball

Windows 7 Home Premium
 
 

omegatx,

Some policy was probably set by the ransomware.

Let's see what we can find...

Please download SystemLook:
http://jpshortstuff.247fixes.com/SystemLook.exe
Save to the Desktop

Right-click SystemLook.exe and select: Run as Administrator

Copy the content inside the following quote box into the open field:
Quote:
:reg
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
Click the Look button to start the scan.

When finished, a Notepad window opens with the results of the scan.

Please post the SystemLook.txt in your reply.


~~~~
Next,

Let's see what your system shows with the following short scan...



Please download RogueKiller:
Tlcharger RogueKiller (Site Officiel)

When you get to the website, go to where it says:
(Download link) Lien de téléchargement:

Select the version for your system: 64-bit (button with x64)
Click the applicable dark-blue button to download.

Save to the Desktop.



Close all windows and browsers.
Right-click the downloaded file and select: Run as Administrator


At the program console, wait for the prescan to finish. (Under Status, it says: Prescan finished)


Press: SCAN



When done, a report opens on the Desktop: RKreport.txt



Please provide the RKreport.txt (Mode: Scan) in your reply.


~~~~
Also, which YouTube video did you follow?
Knowing this may help solve the puzzle. Some of the guidance seems to vary among the videos.
My System SpecsSystem Spec
01 Mar 2013   #3
omegatx

Win 7 Pro 64
 
 
More info re: Locked desktop issues

OK, quite a lot to report. Ran both apps. The results are attached.

1 txt report file from the Look app

1 txt report file from the Rogue Killer app

1 txt file from the Rogue Killer app that was located in a quarantine folder (quarantine report)

No items were deleted. The Killer app was closed after the final scan.

Thanks for any advice... Paul...
---


Attached Files
File Type: txt SystemLook.txt (1.4 KB, 14 views)
File Type: txt RKreport[1]_S_03012013_02d1001.txt (3.0 KB, 8 views)
File Type: txt QuarantineReport.txt (463 Bytes, 2 views)
My System SpecsSystem Spec
.

01 Mar 2013   #4
omegatx

Win 7 Pro 64
 
 

Sorry, forgot to give you the utube video link...
How to Remove the Department of Justice Virus - YouTube
My System SpecsSystem Spec
01 Mar 2013   #5
cottonball

Windows 7 Home Premium
 
 

Please run RogueKiller once again:

Close all windows and browsers.
Right-click RogueKiller and select: Run as Administrator

Wait until the Prescan finishes
The Status box shows: PreScan Finished

Press: Scan

When done, on the right, click: Delete

Wait until the Status box shows: Deleting Finished

Click on Report and provide the content of the new Rkreport (Mode: Remove) in your reply.


Restart the computer, and see if you can work with the TaskBar and the Start Menu.
My System SpecsSystem Spec
01 Mar 2013   #6
omegatx

Win 7 Pro 64
 
 

OK, ran the app. The report is attached. However, after booting the following happened:

My desktop icons were now back and in the order I had before the hack.
I still cannot control the start menu or task bar

Any other thoughts?


Attached Files
File Type: txt RKreport[3]_D_03012013_02d1359.txt (2.8 KB, 4 views)
My System SpecsSystem Spec
01 Mar 2013   #7
cottonball

Windows 7 Home Premium
 
 

Let's see if we can fish for the last Registry key in the previous post. It seems rather strange that SystemLook cannot find it.

Please go to Start > All Programs > Accessories, right-click the Command Prompt, and select: Run as Administrator

At the blinking cursor of the Command Prompt, Paste the following text inside the quote box below:
Quote:
regedit /e C:\advanced.reg "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"
When done, go to Start, and in the Search programs and files box above, type in: advanced

The file should appear in the Files results above.

Right-click > Open, and post the results in you reply.
My System SpecsSystem Spec
01 Mar 2013   #8
cottonball

Windows 7 Home Premium
 
 

omegatx,

Is the drive P:\ one that had XP on it at one time, or, is this a dual boot system?

Also, let's see if there is anything that prevents the loading of the Registry key.
The Event Viewer Tool (VEW) by Vino Rosso is free and can help look at system event logs for information that may be pertinent...

Please download VEW:
http://images.malwareremoval.com/vino/VEW.exe
Save to the Desktop

Right-click the icon on the Desktop (VEW.exe), and select: Run as Administrator
Click Allow at the User Account Control (UAC) prompt.

At the VEW program console:
In the Select log to query section, check:
Application
System

In the Select type to list section, check:
Critical (not XP)
Error
Warning

In the Number or date of events section, check: Number of events
Type 20 in the 1 -20 box

Now, press the Run button.

A Notepad report opens on the Desktop when done.

Please provide the report contents in your reply.
(If too large, please attach.)
 
My System SpecsSystem Spec
02 Mar 2013   #9
omegatx

Win 7 Pro 64
 
 

Got 2 replies from you. I assume I should do them in the order of posting?

Will report back. BTW, the P drive is an external drive (back up)
My System SpecsSystem Spec
02 Mar 2013   #10
omegatx

Win 7 Pro 64
 
 
locked issue

Quote   Quote: Originally Posted by cottonball View Post
Let's see if we can fish for the last Registry key in the previous post. It seems rather strange that SystemLook cannot find it.

Please go to Start > All Programs > Accessories, right-click the Command Prompt, and select: Run as Administrator

At the blinking cursor of the Command Prompt, Paste the following text inside the quote box below:
Quote:
regedit /e C:\advanced.reg "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"
When done, go to Start, and in the Search programs and files box above, type in: advanced

The file should appear in the Files results above.

Right-click > Open, and post the results in you reply.
Sorry, but your instructions did not work. When I pasted the text command into the characters ^V appeared next to the prompt. (also was I supposed to hit return?) When I place the word advanced into the search box, all I saw were links to help and documents? Sorry, I must be missing something here. I will attempt to negotiate your later post instructions... Thanks for continuing to offer suggestions... Paul...
My System SpecsSystem Spec
Reply

 cannot unlock taskbar or make changes in Start menu properties




Thread Tools




Similar help and support threads
Thread Forum
How do I make shortcuts to pinned taskbar items to Start menu?
*If this is in the wrong forum, please tell me which one to put it in. Okay, forgive me if the title is a little hard to understand. Yesterday I made a huge mistake by going to Taskbar and Start Menu and unchecking both "Store and display recently opened programs in the Start menu" and "Store and...
General Discussion
Cannot pin to taskbar, start menu or unlock taskbar
I have a client that has laptop with windows 7 Pro. He had a faulty network card, so I have added a new, usb network card. That said, He can not pin anything to taskbar or start menu. I cleared both folders of shortcuts(567 of them) but to no avail. He also has no options under his desktop...
General Discussion
Taskbar and Start Menu Properties problem
Recently opened programs does not appear in the start menu. Windows help shows Click to open Taskbar and Start Menu Properties. Click the Start Menu tab, and then click Customize. In the Customize Start Menu dialog box, in the Number of recent programs to display box, enter the number of...
General Discussion
Start Menu Properties Shortcut - Create
How to Create a Start Menu Properties Shortcut in Windows 7 and Vista This will show you how to download or create a Start Menu Properties shortcut in Windows 7 and Vista. You can also Pin to Taskbar or Pin to Start Menu this shortcut, or move where you like for easy use. EXAMPLE:...
Tutorials
Can't remember how to unlock Start Menu
Sometimes although very rarely, when I'm a little sleepy I accidentally drag instead of left-clicking and a couple times so far, I've accidentally dropped items into folders as a result from this. On most occasions I was still able to figure out how to undo my clumsiness, however. Anyway, I...
Customization
problem with taskbar and start menu properties
Hi, I have a problem with my taskbar and start menu properties, I can't choose the options in taskbar buttons, here's the screenshot: http://i49.tinypic.com/t8q7b8.jpg Anyone know how to solve the problem? Thanks:)
Customization


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 14:09.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App