Malware (?) changes the target of icon shortcuts for Properties window

Prorootect

Level 69
Thread author
Verified
Nov 5, 2011
5,855
'Properties' window instead of icon targets ..
I had malware (or Windows flaw) which suddenly changes the target of all icon shortcuts for 'Properties' window .. Issue with all the icons (shortcut icons of my software, locations ..).


This problem is solved now, but I'm curious why this sudden change has happened; when I clicked on the browser icons or taskbar Quick Launch icons, this has launched 'Properties' window instead of targeted application.
So seeing this sudden bad behavior, I immediately cut the power of - and restart - my modem box (to change the IP) - and closed, then returned back to my account. And then this problem has disappeared.

I used IE8 and SlimBoat two browsers while this problem is created by clicking on the pictures in Google Images, then some links .. I think.
I use Windows XP.

So what you think about the cause of this strange behaviour, please?

On the Web, I found some links, perhaps related:
Delta-homes.com Virus : on pcrisk.com : http://www.pcrisk.com/removal-guides/7250-remove-delta-homes-com-redirect-virus
Remove delta-homes.com virus (Removal Guide): http://malwaretips.com/blogs/delta-homes-removal/
How to Remove Safe.v9.com virus (Removal Guide): http://malwaretips.com/blogs/safe-v9-virus/
Internet Explorer Icon Problems - Family PC (XP Home, IE8): http://answers.microsoft.com/en-us/...-xp-home/ed28d527-ef95-4603-9912-e7560930877d
 
Last edited:

Prorootect

Level 69
Thread author
Verified
Nov 5, 2011
5,855
hmm maybe nobody has ever seen this problem .. and has no idea what could be
 

WinXPert

Level 25
Verified
Honorary Member
Top Poster
Malware Hunter
Well-known
Jan 9, 2013
1,457
Probably this is caused by corrupt association of Shortcut *.lnk files. One way to fix that is by repairing the registry

Code:
Windows Registry Editor Version 5.00

[-HKEY_CLASSES_ROOT\.lnk]

[HKEY_CLASSES_ROOT\.lnk]
@="lnkfile"

[HKEY_CLASSES_ROOT\.lnk\ShellEx]

[HKEY_CLASSES_ROOT\.lnk\ShellEx\{000214EE-0000-0000-C000-000000000046}]
@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT\.lnk\ShellEx\{000214F9-0000-0000-C000-000000000046}]
@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT\.lnk\ShellEx\{00021500-0000-0000-C000-000000000046}]
@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT\.lnk\ShellEx\{BB2E617C-0920-11d1-9A0B-00C04FC2D6C1}]
@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT\.lnk\ShellNew]
"Command"="rundll32.exe appwiz.cpl,NewLinkHere %1"
 

Prorootect

Level 69
Thread author
Verified
Nov 5, 2011
5,855
OK. WinXPert, thank you!
- but why this happened suddenly in my PC after I surfed on Google Images .. hmm
 

WinXPert

Level 25
Verified
Honorary Member
Top Poster
Malware Hunter
Well-known
Jan 9, 2013
1,457
It's hard to speculate, unless you can retrace your steps and replicate the errors. There is a strain of worms that do this things like Link Runner but they are transferred via USB drives.
 

Prorootect

Level 69
Thread author
Verified
Nov 5, 2011
5,855
It's not rainning here for now, so no worms .. LOL
I searched for 'bonobo' on Google images, then click on some links ..

Another problem has been created simultaneously, I found solution: mixed content in 'My documents' box ( there has been a change in the order of the lines, the lines changed its place), after I clicked on 'Browse' button in pixlr - to repare this, I used Windows Restore point.
 
Last edited:

WinXPert

Level 25
Verified
Honorary Member
Top Poster
Malware Hunter
Well-known
Jan 9, 2013
1,457
Well good for you
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top