cannot unlock taskbar or make changes in Start menu properties

Page 1 of 6 123 ... LastLast

  1. Posts : 31
    Win 7 Pro 64
       #1

    cannot unlock taskbar or make changes in Start menu properties


    (Win 7 - 64) I recently was hit with the DOJ "computer locked" hack. I followed the u-tube video instructions and restored my PC to an earlier date. This solved the issue, everything is back to normal, except I cannot make changes to the Start Menu props or unlock the Task Bar. I also ran the MalwareBytes program which removed three instances of malware. Also ran a Vipre deep scan.

    I have checked the registry section regarding keys which might be locking these items, but found none. Would appreciate any ideas regarding how to approach this issue. Would creating another user account help? I thought about creating another account, signing out and signing in under that account. Would that boot Win 7 back to the default settings for the Start Menu and Task Bar? (so I could change them?)

    Thanks for any ideas.
      My Computer


  2. Posts : 2,470
    Windows 7 Home Premium
       #2

    omegatx,

    Some policy was probably set by the ransomware.

    Let's see what we can find...

    Please download SystemLook:
    http://jpshortstuff.247fixes.com/SystemLook.exe
    Save to the Desktop

    Right-click SystemLook.exe and select: Run as Administrator

    Copy the content inside the following quote box into the open field:
    :reg
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
    Click the Look button to start the scan.

    When finished, a Notepad window opens with the results of the scan.

    Please post the SystemLook.txt in your reply.


    ~~~~
    Next,

    Let's see what your system shows with the following short scan...



    Please download RogueKiller:
    Tlcharger RogueKiller (Site Officiel)

    When you get to the website, go to where it says:
    (Download link) Lien de téléchargement:

    Select the version for your system: 64-bit (button with x64)
    Click the applicable dark-blue button to download.

    Save to the Desktop.



    Close all windows and browsers.
    Right-click the downloaded file and select: Run as Administrator


    At the program console, wait for the prescan to finish. (Under Status, it says: Prescan finished)


    Press: SCAN



    When done, a report opens on the Desktop: RKreport.txt



    Please provide the RKreport.txt (Mode: Scan) in your reply.


    ~~~~
    Also, which YouTube video did you follow?
    Knowing this may help solve the puzzle. Some of the guidance seems to vary among the videos.
    Last edited by cottonball; 28 Feb 2013 at 16:46.
      My Computer


  3. Posts : 31
    Win 7 Pro 64
    Thread Starter
       #3

    More info re: Locked desktop issues


    OK, quite a lot to report. Ran both apps. The results are attached.

    1 txt report file from the Look app

    1 txt report file from the Rogue Killer app

    1 txt file from the Rogue Killer app that was located in a quarantine folder (quarantine report)

    No items were deleted. The Killer app was closed after the final scan.

    Thanks for any advice... Paul...
    ---
    cannot unlock taskbar or make changes in Start menu properties Attached Files
      My Computer


  4. Posts : 31
    Win 7 Pro 64
    Thread Starter
       #4

    Sorry, forgot to give you the utube video link...
    How to Remove the Department of Justice Virus - YouTube
      My Computer


  5. Posts : 2,470
    Windows 7 Home Premium
       #5

    Please run RogueKiller once again:

    Close all windows and browsers.
    Right-click RogueKiller and select: Run as Administrator

    Wait until the Prescan finishes
    The Status box shows: PreScan Finished

    Press: Scan

    When done, on the right, click: Delete

    Wait until the Status box shows: Deleting Finished

    Click on Report and provide the content of the new Rkreport (Mode: Remove) in your reply.


    Restart the computer, and see if you can work with the TaskBar and the Start Menu.
      My Computer


  6. Posts : 31
    Win 7 Pro 64
    Thread Starter
       #6

    OK, ran the app. The report is attached. However, after booting the following happened:

    My desktop icons were now back and in the order I had before the hack.
    I still cannot control the start menu or task bar

    Any other thoughts?
    cannot unlock taskbar or make changes in Start menu properties Attached Files
      My Computer


  7. Posts : 2,470
    Windows 7 Home Premium
       #7

    Let's see if we can fish for the last Registry key in the previous post. It seems rather strange that SystemLook cannot find it.

    Please go to Start > All Programs > Accessories, right-click the Command Prompt, and select: Run as Administrator

    At the blinking cursor of the Command Prompt, Paste the following text inside the quote box below:
    regedit /e C:\advanced.reg "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"
    When done, go to Start, and in the Search programs and files box above, type in: advanced

    The file should appear in the Files results above.

    Right-click > Open, and post the results in you reply.
      My Computer


  8. Posts : 2,470
    Windows 7 Home Premium
       #8

    omegatx,

    Is the drive P:\ one that had XP on it at one time, or, is this a dual boot system?

    Also, let's see if there is anything that prevents the loading of the Registry key.
    The Event Viewer Tool (VEW) by Vino Rosso is free and can help look at system event logs for information that may be pertinent...

    Please download VEW:
    http://images.malwareremoval.com/vino/VEW.exe
    Save to the Desktop

    Right-click the icon on the Desktop (VEW.exe), and select: Run as Administrator
    Click Allow at the User Account Control (UAC) prompt.

    At the VEW program console:
    In the Select log to query section, check:
    Application
    System

    In the Select type to list section, check:
    Critical (not XP)
    Error
    Warning

    In the Number or date of events section, check: Number of events
    Type 20 in the 1 -20 box

    Now, press the Run button.

    A Notepad report opens on the Desktop when done.

    Please provide the report contents in your reply.
    (If too large, please attach.)
     
      My Computer


  9. Posts : 31
    Win 7 Pro 64
    Thread Starter
       #9

    Got 2 replies from you. I assume I should do them in the order of posting?

    Will report back. BTW, the P drive is an external drive (back up)
      My Computer


  10. Posts : 31
    Win 7 Pro 64
    Thread Starter
       #10

    locked issue


    cottonball said:
    Let's see if we can fish for the last Registry key in the previous post. It seems rather strange that SystemLook cannot find it.

    Please go to Start > All Programs > Accessories, right-click the Command Prompt, and select: Run as Administrator

    At the blinking cursor of the Command Prompt, Paste the following text inside the quote box below:
    regedit /e C:\advanced.reg "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"
    When done, go to Start, and in the Search programs and files box above, type in: advanced

    The file should appear in the Files results above.

    Right-click > Open, and post the results in you reply.
    Sorry, but your instructions did not work. When I pasted the text command into the characters ^V appeared next to the prompt. (also was I supposed to hit return?) When I place the word advanced into the search box, all I saw were links to help and documents? Sorry, I must be missing something here. I will attempt to negotiate your later post instructions... Thanks for continuing to offer suggestions... Paul...
      My Computer


 
Page 1 of 6 123 ... LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 00:54.
Find Us