Unlocking the Monitor Tool under Control Panel

Question

My PC has a 'locked' monitor function under the control panel/monitor where I can not change my background. It comes up grayed out and does not let me select any backgounds. Is there a way to unlock this function? Not sure how it got locked - may have been a virus. I have since scrubed my machine and reloaded XP - it still remains locked.  Your help is greatly appreciated.

BELL BOY · Answer

Not sure what you mean by Control Panel/Monitor (it’s usually Display)?

Assuming that your PC is indeed free from virus/malware infection?

Then try this:

Right click an empty space on the Desktop screen & select Properties

Click on Desktop tab then click on the Customize Desktop button

Click on Web tab, uncheck any/all web pages & also Delete them

Uncheck the Lock desktop items box

Click OK, Apply then OK

Then check if the problem has been fixed

sberubest · Answer

Thanks for the help. Still not working. It is my DISPLAY/DESKTOP that is having problems. All I can do is change the background color. I can not select any backgounds (Up/down arrows don't work and it won' let me brouse.  Somehow somthing has it locked up and I am not sure what.

BELL BOY · Answer

Not sure if you actually did a successful WXP clean install?

If you did, then it would:

1. Fix any corrupt/missing file(s) causing the problem

2. Format WXP OS partition & remove everything (including virus/trojan infections)

If you didn’t, then problem could be from trojan causing registry change for the ForceActiveDesktopON key

To check this, you will need to open Registry Editor:

Do NOT make changes in Registry Editor unless confident & know what you are doing

Start > Run type in regedit then click OK

Open the following path in Registry Editor

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

If ForceActiveDesktopON is present, the Data value should be 0 (zero)

If it is present & the Data value is 1, then that’s causing your problem

Post back if you require further clarification on the above

Message Edited by BELL BOY on 09-11-2007 06:41 PM

sberubest · Answer

Thanks for the info on the REGEDIT. I check and it was set to (1). I set it to (0) and then rebooted. It is still locked up (grayed out). I checked after reboot and it stayed at (0). Is there something else I can check?  Appreciate the help..

BELL BOY · Answer

Didn’t want to make it any more complicated for you until Data value was confirmed

Now open the following path in Registry Editor

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System

If the following appears in the RHS pane, then delete it

Wallpaper = C:\\WINDOWS\\desktop.html

If it doesn’t fix problem, post back for a list of additional folders you will need to check for the presence of ForceActiveDesktopON entries

Alternatively, do a WXP clean install (post back first if you require guidance)

sberubest · Answer

Check the following area and all I see is:   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System (Default)    Reg_SZ  (value not set) Wallpaper  Reg_SZ   The value explorer is still set to (0)

BELL BOY · Answer

It sounds very much like you have had some sort of virus/trojan attack?

If you’ve used removal/clean-up software the registry can still remain damaged?

You have a choice:

1. Do a WXP clean install (but post back before you attempt it)

In any case, you may have to do a WXP clean install if no success with (2) (3) or (4)

2. A very long shot, only if problem is damaged/corrupt file(s) (but doubt it)

Start > Run type in sfc /scannow (note the blank space between sfc & /) then click OK
Insert WXP CD if system file check requests it & reboot when done

3. Click on kellys-korner-xp, scroll down to line 256

Click on Effects Options are Greyed Out – Appearance

4. Use Registry Editor to search for suspect entries

You should use MS registry backup procedure if making lots of changes

Look for above ForceActiveDesktopON & Wallpaper suspect values in the following predefined key folders

Some sub folders may not exist, don’t worry but you need to check anyway

HKEY_CURRENT_USER\Control Panel\Desktop

HKEY_CURRENT_USER\Software\Microsoft\

Internet Explorer\Desktop\General

Internet Explorer\Desktop\SafeMode\General

Plus!\Themes\ Apply

Windows\CurrentVersion\Explorer\Wallpaper

Windows\CurrentVersion\Themes\LastTheme

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion

HKEY_USERS\.DEFAULT\

Control Panel\Desktop

Software\Microsoft\Internet Explorer\Desktop\General

Software\Microsoft\Windows\CurrentVersion\Themes\LastTheme

HKEY_USERS\S-1-5-18\

Control Panel\Desktop

Software\Microsoft\Internet Explorer\Desktop\General

Software\Microsoft\Windows\CurrentVersion\Themes\LastTheme

HKEY_USERS\S-1-5-19\

Control Panel\Desktop

Software\Microsoft\Internet Explorer\Desktop\General

Software\Microsoft\Windows\CurrentVersion\Themes\LastTheme

HKEY_USERS\S-1-5-20\

Control Panel\Desktop

Software\Microsoft\Internet Explorer\Desktop\General

Software\Microsoft\Windows\CurrentVersion\Themes\LastTheme

HKEY_USERS\S-1-5-21-X-X-X-X\ (where X is a series of numbers)

Control Panel\Desktop

Software\Microsoft\Internet Explorer\Desktop\General

Software\Microsoft\Internet Explorer\Desktop\SafeMode\General

Software\Microsoft\Plus!\Themes\Apply

Software\Microsoft\Windows\CurrentVersion\Explorer\Wallpaper

Software\Microsoft\Windows\CurrentVersion\Themes\LastTheme

Message Edited by BELL BOY on 09-12-2007 07:27 PM

BELL BOY · Answer

Hi again, sberubest

Just noticed you posted a log in HJT forum, that’s good

You should wait for advise from forum-authorised experts, since I’m not an authorised analysis expert

But after a very quick scan of your log, one entry looks very suspicious

C:\WINDOWS\system32\wuauclt.exe

Where wuauclt.exe is very likely to be a serious RBOT-UG worm

Open above link & click on Recovery & Advanced tabs

But wait for HJT expert analysis, since there could be other infections

There are other variants w****.exe where [* = random character], read this post

Message Edited by BELL BOY on 09-13-2007 07:48 AM

Windows General

Unlocking the Monitor Tool under Control Panel

Was this post helpful?