no icons showing, no desktop background as a result,

Ownage · #1 September 18th, 2010, 04:43 AM

I have already checked with the maleware forum and jintan helped there, cleaned that all up, and he also helped with a check for spywear, and has advised me to bring my problem here.

Im running Win7 Enterprise,

a week or 2 ago i turned my computer on and had no desktop background, and no visible icons on my desktop, i could only see the names of the shortcuts and files which i had on there.

This problem extended further as i can not see the icons when browsing through folders and removable drives. (external HHD's and USB's)

an example of this is when i open the folder pictures, i can only see the image name at the bottem underneath where the icons should be, and the icons are empty.

please help!

Thanks,

regards Andrew.

Mosaic1 · #2 September 18th, 2010, 05:35 AM

It could be that the icon database is corrupt. As for the background,
let's leave that for later.

Do you know how to boot to safe mode?

If you do, boot to safe mode. Then boot back to regular windows mode. Sometimes just booting to safe mode does the trick.
It rebuilds the icon cache.

Ownage · #3 September 19th, 2010, 08:40 AM

Yes i do know how to boot safe mode.

restarted in safe mode... no change,
restarted out of safemode... no change.

back running win7 in normal mode atm with the same problem still.

Mosaic1 · #4 September 19th, 2010, 12:49 PM

Jintan wanted to finish with you in the Malware Removal Forum and has asked me to wait on this until that has been done. Can you go over there to your posting and see what he has for you please? Or at least let him know you're ready to finish up over there.

Thanks,
Mo

Ownage · #5 September 19th, 2010, 12:56 PM

ok, i think he has taken the weekend off, coz he hasn't responded. i think he believed it wasnt a malware issue originally. but he did find some other stuff which is great. but i think we are very close to finishing in that tread. ill wait for jintan to say we are finished b4 i come back here... even though he was the 1 who suggested posing it on here....

Mosaic1 · #6 September 20th, 2010, 01:15 AM

Let's see if we can change one folder's icon to see if that works. I have several more ideas but I have to sign off.

So pick a folder (not a drive, just a folder) and right click on it. Clcik properties. When the properties page opens, click the Customize tab.

When the customize dialog appears, click change icon. Choose a folder icon from the selection and click ok. Or just click the Restore Defaults button and then OK.

Do you get a folder with an icon now?

Ownage · #7 September 20th, 2010, 11:45 AM

ok, i created a new folder on my desktop and did as you said trying mutliple different icons and did not work. the confusing thing is when i go into documents i have icons like the folder icons the word icons ect. but when on the desktop they are no more....

when i go into computer i can c the icons for the cd drives and harddrives. yet when i navigate to C:\Users\Andrew i cant see the icons there... or when i go into picutures i cant see the image icons, yet for some reason when i go to C:\Users\Andrew\Desktop i can see the icon i set for the folder...

also i tried removing everything of the desktop but it wont let me remove the recycle bin. its not the shortcut... when i right click on it there is no delete option... i only have rename, empty, properties, and empty. and in properties it only gives me the recycle bin properties.

sorry for the excess info, just trying to tell you as much as possible.

ok interesting. i was taking a screenshot of my desktop to hopefully attach somehow and when doing so it defulted to desktop, which is normal, but there were other files there i cant see... like network, computer, andrew, homegroup, all listed as system folders.... i only just noticed this....

this was in C:\Users "desktop.ini" :

[.ShellClassInfo]
LocalizedResourceName=@%SystemRoot%\system32\shell 32.dll,-21813

i know this is normal the .ini file but system root?

once again sorry for the excess... may be usefull in understanding my dilemma or useless

i have about 6 screenshots i can show you if you want,
here is a link i posted this so if you wanted to see. http://www.sendspace.com/file/1azqh6
http://www.sendspace.com/file/1azqh6

cheers.

Mosaic1 · #8 September 20th, 2010, 01:21 PM

%SystemRoot% refers to your windows folder.

C:\windows or wherever it is on the system.

I was under the impression that you had no icons anywhere at all.
A black Desktop color can mean there's an error reading the Wallpaper information in the Registry. Either the file doesn't exist or.....

And have you tried to change the Wallpaper in Control Panel >personlalization?
Also, in personalization, look to the sidebar to see a link named Change Desktop ikons. You can click on it and then select which system icons you want to show on the desktop and which you don't.

Before we go any further, let's see if this is a systemwide problem, or if it is just happening in your profile.

IF you have another user profile, please sign into it and see how it behaves. If not, then create one and sign into it.

Post back what you find.

Mosaic1 · #9 September 20th, 2010, 06:54 PM

Just before this happened, did you make any changes in display properties. like changing the screen resolution. Did you update the Display Drivers, or install any other new programs?

Ownage · #10 September 20th, 2010, 10:31 PM

when using control panel and personalisation to change the desktop background, i could not find any images to set when browsing. it would let me change to a blank color.... like blue red green. but no images. i tried opening an image and setting it as desktop background and an error came up saying cannot be set due to an internal error.

i tried viewing the icon stuff where u said, and i went to change icon and got a msg promt. saying the "C:\Windows\System32\imageres.dll contains no icons. choose an icon from the list or specify a differnent directory"

ill create a new user and log on that now.

Ownage · #11 September 20th, 2010, 10:46 PM

ok i changed useres, there was desktop icons, however i did get a msg promt soon after logging in: See the end of this message for details on

invoking
just-in-time (JIT) debugging instead of this

dialog box.

************** Exception Text **************
System.IO.FileNotFoundException: File not found.
at Microsoft.VisualBasic.Interaction.Shell

(String Pathname, AppWinStyle Style, Boolean Wait,

Int32 Timeout)
at

EULA.NET.Form1.Display_Uninstalled_Confirmation()
at EULA.NET.Form1.Timer2_Tick(Object sender,

EventArgs e)
at System.Windows.Forms.Timer.OnTick(EventArgs

e)
at System.Windows.Forms.Timer.Callback(IntPtr

hWnd, Int32 msg, IntPtr idEvent, IntPtr dwTime)

************** Loaded Assemblies **************
mscorlib
Assembly Version: 1.0.5000.0
Win32 Version: 1.1.4322.2443
CodeBase:

file:///c:/windows/microsoft.net/framework/v1.1.43

22/mscorlib.dll
----------------------------------------
EULA.NET
Assembly Version: 1.0.2700.17977
Win32 Version: 1.0.2700.17977
CodeBase: file:///C:/DELL/E-Center/EULA.exe
----------------------------------------
System.Windows.Forms
Assembly Version: 1.0.5000.0
Win32 Version: 1.1.4322.2032
CodeBase:

file:///c:/windows/assembly/gac/system.windows.for

ms/1.0.5000.0__b77a5c561934e089/system.windows.for

ms.dll
----------------------------------------
System
Assembly Version: 1.0.5000.0
Win32 Version: 1.1.4322.2443
CodeBase:

file:///c:/windows/assembly/gac/system/1.0.5000.0_

_b77a5c561934e089/system.dll
----------------------------------------
System.Drawing
Assembly Version: 1.0.5000.0
Win32 Version: 1.1.4322.2032
CodeBase:

file:///c:/windows/assembly/gac/system.drawing/1.0

.5000.0__b03f5f7f11d50a3a/system.drawing.dll
----------------------------------------
AxInterop.SHDocVw
Assembly Version: 1.1.0.0
Win32 Version: 1.1.0.0
CodeBase: file:///C:/DELL/E-

Center/AxInterop.SHDocVw.DLL
----------------------------------------
Interop.SHDocVw
Assembly Version: 1.1.0.0
Win32 Version: 1.1.0.0
CodeBase: file:///C:/DELL/E-

Center/Interop.SHDocVw.DLL
----------------------------------------
Accessibility
Assembly Version: 1.0.5000.0
Win32 Version: 1.1.4322.573
CodeBase:

file:///c:/windows/assembly/gac/accessibility/1.0.

5000.0__b03f5f7f11d50a3a/accessibility.dll
----------------------------------------
Microsoft.VisualBasic
Assembly Version: 7.0.5000.0
Win32 Version: 7.10.6001.4
CodeBase:

file:///c:/windows/assembly/gac/microsoft.visualba

sic/7.0.5000.0__b03f5f7f11d50a3a/microsoft.visualb

asic.dll
----------------------------------------
Microsoft.mshtml
Assembly Version: 7.0.3300.0
Win32 Version: 7.0.3300.0
CodeBase:

file:///c:/windows/assembly/gac/microsoft.mshtml/7

.0.3300.0__b03f5f7f11d50a3a/microsoft.mshtml.dll
----------------------------------------
CustomMarshalers
Assembly Version: 1.0.5000.0
Win32 Version: 1.1.4322.573
CodeBase:

file:///c:/windows/assembly/gac/custommarshalers/1

.0.5000.0__b03f5f7f11d50a3a/custommarshalers.dll
----------------------------------------

************** JIT Debugging **************
To enable just in time (JIT) debugging, the config

file for this
application or machine (machine.config) must have

the
jitDebugging value set in the system.windows.forms

section.
The application must also be compiled with

debugging
enabled.

For example:

<configuration>
<system.windows.forms jitDebugging="true" />
</configuration>

When JIT debugging is enabled, any unhandled

exception
will be sent to the JIT debugger registered on the

machine
rather than being handled by this dialog.

so yeah. think i answerd all so far.

Ownage · #12 September 20th, 2010, 10:51 PM

update.

the new user account wont set a background image.
went into the icon thing and had the same missing .dll file promt. and also when i was trying to set a theme, it prompted me with an error in "syncing multiusers error .... system error, code 5" something like that.

Mosaic1 · #13 September 21st, 2010, 02:48 AM

Two quick possibilities.

Either IconCodecService.dll is missing or corrupt. OR you have no read permissions for this registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows

Go to start >run and type sfc /scannow
Press enter.

This will take a while to run. Hopefully it will replace the file

You had malware,right? Did you run Combofix?

If so, can you search for swreg.exe please?

I want to use it to check Registry Permissions on the key.

Mosaic1 · #14 September 21st, 2010, 03:00 AM

As for the JIT debugger, that refers to some program written in Visual Basic crashing.

We'll have to look at your system. Sign into whichever User Account you signed into when you received that long error.

Then run Rsit.exe or dds. Whichever of those 2 programs you have. Post the logs. We'll see what we can find.

Ownage · #15 September 21st, 2010, 04:32 PM

umm so i ran sfc /scannow and swreg.exe and both times i saw a cmd box pop up then disapear... and i have waited a fair while for something to come up and nothing. so i will run combo fix now and post the results here.

following that i will run rsit and dds in the second account i made and post them back here.