Boot access to desktop problem

[Bozie One]

Hi.
Yesterday a technician from Symantec was helping to remove a virus from my
machine. He went into my registry to change some values. (I wanted to the
titles for all desktop files transparent).

Immediately afterward, a strange dialog box began to appear everytime I
would boot my machine. The dialog box appeared right after the Windows XP
splash screen. It is basically an all white box but with what looks like
"junk/trash" characters in it. Generally there are only three characters.
The first character was a like a small rectangle standing on end followed by
this: èr. The title of the dialog box was this small rectangle and ç. I
have to click OK on the dialog box and I am immediately taken to the desk
top. The characters might change on each boot, but there are two or three
and always some random, weird combination.

Any ideas as to what is causing this and how to fix it?

 

[Bozie One]

Rich. I checked my startup file and I did not see any thing called remote
connection. The only two Symantec items checked were ccAPP.exe and os
Check.exe. BTW, my startup list is very spare. In addition to those two
items, only ezSP_PX, ctfmon and the google toobar notifier are checked.

Any more suggestions?

Thanks

 

[Bozie One]

I believe they deleted iyesdelete.exe.

One more issue that might be related. IN comtrol panel, display, desktop,
customize, I did not the Web tab. I only had the general tab. The
technician went into the registry, deleted a bunch of lines and viola, the
web tab reappeared. It was immediately after this that these trash
characters started appearing.

 

[Bozie One]

Rich,

You are definitely on to something. I tried to remove the addaware2007
program from through control panel. It could NOT be removed because something
is missing (some reistry key I think with a long string of letters and
numbers). I then used CCCleaner and it said something about an MSI installer.


So...any suggestions about how to remove the Adaware program?

Thanks.

 

[Bozie One]

Hi Rich,

THanks for this information. I have removed most of the LAVASOFT programs.
Finally, I got most of it to delte. However, I have three BootExecute
programs.. All are under a similar Key system\ControlSet001\Session
Manager...ControlSet 003\SessionManger...Control\SessionManager. In NONE of
them did I find the entry LSDELETE.

I did a search for LSDELETE and found something under
Software\Microsoft\Windows\Currentrevsion\Istaller
Software\Microsoft\Windows\Currentrevsion\SharedDLLS

Any suggestions what to do next? I still get the same garabse/junk
characters on bootup.
Thanks