WarnHP.html Breaks Desktop Properties
Many of the new spyware variants aren’t shy and commonly change the entire desktop to display a range of dangerous easy to click on links. My daughter Amy recently had a rather nasty malware attack her system and took over her desktop. WinPatrol barked and luckily she was able to stop the Trojan from making itself at home, and installing a keylogger. Unfortunately, it didn’t repair some the damage which broke the ability to change her desktop wallpaper back to normal.
Like many programs WinPatrol monitors for changes in IE Start Pages but doesn’t monitor the source page used if the desktop displays as a web page. Apparently, other programs she tried fail at this as well. When she tried accessing the Desktop properties Windows displayed the following property sheet.
This appeared accessing Display applet from the Control Panel
and when Right-Clicking on the Desktop and clicking on Properties.
It turns out there’s a simple solution. Even though our newest WinPatrol beta allowed her to delete the hidden file warnhp.html, a single desktop registry entry prevented access to change back to her normal wallpaper.
If you experience similar problems try the following.
Run Regedit by clicking on the Start button and selecting “Run…”
Type in “RegEdit” and click OK.
Navigate to the following registry key
On the right side look for the following…
Doube-Click on Source and change the warnhp.html URL to say “About:Home”.
If all the malware has been cleaned up you can reboot and you should have access to your Display Properties again. Monitoring this source key has already been added our next WinPatrol release.