Help PLEASE! Desktop image stuck/will not change.

[Guest]

Some few days ago I unwittingly contracted a piece of adware which advised me
that I had virus' on my machine, and then installed a new desktop image
telling me to buy their product.

Naturally the agent was wiped out, and my original desktop returned.
HOWEVER, if I try to set ANY image as a desktop, or to scroll in the image
selection box, it is completely impossible, it's like someone has super-glued
the scroll bar down and stuck one image only as a default desktop.

I know this might only appear to be cosmetic, but not only does it annoy me
on that level, but also as it may be indicative of something more severe
which has locked a control panel down. I've run a few reputable app's to try
to clear this up, but they all tell me my machine is uninfected by anything,
and that all seems to be a-ok with my system etc.

Please help someone?

Many thanks in advance.

 

[Harpo]

If you have SpyAxe, PSGuard, Smitfraud, Sinnaka Advertisments or detections
for Puper or Alemod that can not seem to be removed automatically, please
try this automated removal tool.

AntiPuper v1.0 by secured2k
http://secured2k.home.comcast.net/tools/AntiPuper.exe

What does this tool do?
This tool will attempt to delete several known Trojan files. These files are
modified by the malware authors and encrypted to avoid detection.
Fortunately, many of these tend to use the exact same file names. If the
files are in use, locked, protected, etc, this program will schedule Windows
to remove the files upon restarting.

This program will also remove some common security policies that are changed
by viruses and worms. Policies that lock out your desktop changes, windows
update, Windows Firewall, Explorer Run policies, Registry editing, and more
are all reset.

Finally, if you have an infected Alemod WININET.DLL file, this program will
try to copy a clean version from your Windows File Protection folder and
replace the bad copy on restart. If a backup copy can not be found, the tool
will quickly look for McAfee Antivirus files and attempt to clean a copy of
the file to replace the bad one on reboot. If all of this fails, you will
need to manually replace/clean your WININET.DLL file.

 

[Guest]

Have you tried using Spybot and Ad-Aware to get rid of all the adware on your
machine?

 

[Guest]

Have you tried using Spybot and Ad-Aware to get rid of all the adware on your
machine?

Oh indeed. Both Microsoft software and also spybot/adblock and tune-up
utilities amongst other things.

I am quite confused as to what to do.

 

[Chuck]

Oh indeed. Both Microsoft software and also spybot/adblock and tune-up
utilities amongst other things.

I am quite confused as to what to do.

Watch the movie, and tell us if it resembles your problem.
<http://isc.sans.org/diary.php?storyid=975>
http://isc.sans.org/diary.php?storyid=975
<http://www.websensesecuritylabs.com/images/alerts/wmf-movie.wmv>
http://www.websensesecuritylabs.com/images/alerts/wmf-movie.wmv

 

[Leythos]

If you have SpyAxe, PSGuard, Smitfraud, Sinnaka Advertisments or detections
for Puper or Alemod that can not seem to be removed automatically, please
try this automated removal tool.

http://forums.mcafeehelp.com/viewtopic.php?t=65072

PCButts, rather than try and make it look like you know something, why
not just post a link to the AUTHORS posting at McAfee.

 

[Guest]

I had the same problem. I had to copy a clean wininet.dll file to my
c:\windows\system folder. And then I had to go to the web tab of the desktop
section as listed and uncheck the webpage listed. Desktop is back to normal.
Some of these trojans are supremely obnoxious. Good luck.