Jump to content

Display Hijacker?

Recommended Posts

I discovered a few days after I installed Windows Mobile ActiveSync on my laptop that there some kind of a pop up that said I was missing something and image couldn't be displayed. I x'd out of the pop up, and finally realized that it must be a virus or something, scanned with Malwarebytes Anti-Malware. It detected a virus, but said it cleaned it. Rebooted and rescanned, came up with nothing, but my display didn't look right. After doing some research, figured I should just format hard drive and do recovery. So I tried to recover from the disks I made (I have an Acer Laptop, my only complaint about it), but it wouldn't let me, so I recovered from the Alt+F10 menu. Once I got everything back up, reinstalled MBAM, ran it and got this:

1/19/2010 7:56:28 PM

mbam-log-2010-01-19 (19-56-28).txt

Scan type: Quick Scan

Objects scanned: 92447

Time elapsed: 5 minute(s), 23 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 1

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected

Robooted again, reran scan, came up clean, but my display is still jacked up. No matter what I change, the font is still different. Start key doesn't look right (font is off, display bar at the bottom is gray instead of blue and green). SO I'm pretty sure it's still infected. Ran the DDS and GMER, GMER found nothing. DDS is as follows:

DDS (Ver_09-12-01.01) - NTFSX64

Run by Deb Laptop at 21:12:14.36 on Tue 01/19/2010

Internet Explorer: 7.0.6001.18000


Link to post
Share on other sites

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.