I need help w/ my desktop

Xiion · Post by **Xiion** » Sat Dec 17, 2005 2:51 pm

http://img526.imageshack.us/my.php?image=s5ub.png

well yesterday, my comp had spyware on it so i removed it. then i restarted my computer, and BAM i get this. i click properties on my destop, and if i try to change my destop image, it doesnt let me. the box w/ all the little destop images arent even clickable. it wont let me restore my active destop back to the original whenever i get the blue and white screen w/ the restore buton on it, and it doen even change at all, can someone please help mee out, ive tried nearly everything.

Tural · Post by **Tural** » Sat Dec 17, 2005 2:58 pm

That image makes me laugh, it's so un-Windows-y, it's funny that someone would create it.

=sw=warlord · Post by **=sw=warlord** » Sat Dec 17, 2005 3:05 pm

well the only thing i can think of is get spy sweeper and use that to scan ur whole pc it finds all the stuff most other programs miss and if u have spyware it will find it.

Ketchup_Bomb · Post by **Ketchup_Bomb** » Sat Dec 17, 2005 5:45 pm

SpySweeper, as great of a program that it is, will not detect this problem. I had the exact same thing. Tell me, do you now have an anti-spyware installed called "Spy Sherrif"?

Xiion · Post by **Xiion** » Sat Dec 17, 2005 5:50 pm

it installed itself, so i removed it because it came up as spyware...

Ketchup_Bomb · Post by **Ketchup_Bomb** » Sat Dec 17, 2005 5:56 pm

Yeah, it's still there though. It's almost the source of all your troubles.

To remove: (Now you must follow this EXACTLY)

Step 1

Configure Windows to Show all hidden files & folders and ensure you're familiar with rebooting into Safe Mode.

Download SmitRem.exe and save the file to your desktop.
Double click on the file to extract it to it's own folder on the desktop.

Place a shortcut to Panda ActiveScan on your desktop.

Download the trial version of Ewido Security Suite from here.
When installing Ewido, under "Additonal Options" uncheck "Install Background Guard" and "Install Scan Via Context Menu".

Launch Ewido by double-clicking the desktop icon and click 'OK' at the "Database could not be found!" warning.

Click "Update" on the left side of the main screen to update the definitions file.

Then click "Start Update".

When you receive the "Update successful" prompt, close Ewido Security Suite.

Note: If you have any problems with the updater, you can update Ewido manually
If you have not already installed Ad-Aware SE 1.06, follow the download and setup instructions here.
Otherwise, check for updates and download any new reference files before closing the program. We'll use it in Safe Mode later.

Step 2

Next, please reboot your computer in Safe Mode - Very Important !!

Step 3

Open the SmitRem folder and double click the RunThis.bat file to start the tool. Follow the prompts on screen.
Wait for the tool to complete and disk cleanup to finish.

The tool will create a log named Smitfiles.txt in the root of your drive, eg; Local Disk C: or partition where your operating system is installed. Please post that log along with all others requested in your next reply.

Step 4

Open Ad-aware and do a full system scan. Remove all it finds.

Step 5

Open Ewido and scan your machine.
Click on Scanner

Click on Complete System Scan and the scan will begin.

Warning: Do NOT open any other windows or your Control Panel while scanning as it may prevent scan completion!!

When prompted to clean the first infection, select "Remove" and checkmark the box beside "Perform action on all infections" in the left corner.

Upon scan completion, click the Save report button and save the report.txt to your desktop.

Then close Ewido Security Suite.
Step 6

Next go to your Control Panel and click Display | Desktop | Customise Desktop | Website | Uncheck "Security Info" if present.

Reboot back into Windows and click the Panda ActiveScan shortcut.
Once on the Panda site click the Scan your PC button and then the Check Now button on the nex screen.

Enter your Country.

Enter your State/Province.

Enter your E-mail address and click Send.

Select either Home User or Company.

Click the big Scan Now button.

Allow the Active X component to install and download the necessary files. (Note: It may take a couple of minutes)

When the download is complete, click on Local Disks to start the scan.

Upon scan completion, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location.
Post the contents of the Panda scan report, along with a new HijackThis Log, the contents of Smitfiles.txt and the Ewido Log in your next reply to THIS thread please.

Let us know if any problems persist.

{KaS} Korori · Post by **{KaS} Korori** » Sat Dec 17, 2005 5:58 pm

hey i had that sam error once. none of my spyware even detected it. that forced me to format my hard drive hopefully you dont have to do that.

I tried ad-ware
microsoft antispyware
and many more

Ketchup_Bomb · Post by **Ketchup_Bomb** » Sat Dec 17, 2005 5:59 pm

Even if you guys don't live my life style, I.E. what I do on the web, you should still format at least once every three to six months.
Me? I format once every two.
Can't be too clean.

Xiion · Post by **Xiion** » Sat Dec 17, 2005 6:00 pm

hmm, ill do that. i hope it fixes the problem cos its pissin me off

Xiion · Post by **Xiion** » Tue Dec 20, 2005 9:06 pm

sorry if this is a bump, but meh dad wanted m to post this cos thats what the stuff ketchup bomb posted for me to do...

well i couldnt find the hijack this thign and stuff but i do got the results of the panda scan... so here it is...

http://files.bmrguild.net/uploads/Activescan.txt

{KAC}Mousey · Post by **{KAC}Mousey** » Wed Dec 21, 2005 6:43 am

pretty damn severe problems man, get rid of em as soon as you can, password revealers and everything

Ketchup_Bomb · Post by **Ketchup_Bomb** » Wed Dec 21, 2005 1:48 pm

Don't worry about the logs. Those are just proofs that everything went ok.
Is everything removed? (It should work now...)

Xiion · Post by **Xiion** » Wed Dec 21, 2005 2:33 pm

yeah i got it all removed. thanks man!

Ketchup_Bomb · Post by **Ketchup_Bomb** » Thu Dec 22, 2005 12:12 pm

Glad I could help.

Now, just to let you know, I do have a PayPal account.....

oXynical · Post by **oXynical** » Thu Dec 22, 2005 12:16 pm

Meh.

Theres ketchup, selling himself.

Hehe, good job with fixing it.

Ketchup_Bomb · Post by **Ketchup_Bomb** » Thu Dec 22, 2005 12:33 pm

Now let me hear it, all together now:

"You're so 1337 Ketchup_Bomb."
"I know. Maybe one day you could be too."
"Really?"
"Nah. I just like messin' with ya."

oXynical · Post by **oXynical** » Thu Dec 22, 2005 12:43 pm

:-p.

Hey atleast Im better one thing.

Hehe.

http://www.gamer-grid.com hehe website. :-p.

But yea, lets stop spamming hehe.

Xiion · Post by **Xiion** » Thu Dec 22, 2005 2:17 pm

lol ketchup you are 1337! or better yet you are 2448!!!! j/k (i ame bad puns

) ok anyways, hows it goin w/ your job you is doin with da gfx? and yes, i also have a paypal accont and suprisingly people have actually donated to my account ive made somewhere near $100 in a week lol. im not even joking!