Hijacked Desktop

[Guest]

Hello all. I seem to have a virus on my father's pc. It has changed his
desktop to a lavender color and will not allow this to be changed. I searched
the registry and found a folder named unknown. Should I delete this file from
the registry? Any suggestions from someone familiar with this type of virus?
Thanks

 

[Guest]

Hello all. I seem to have a virus on my father's pc. It has changed his
desktop to a lavender color and will not allow this to be changed. I searched
the registry and found a folder named unknown. Should I delete this file from
the registry? Any suggestions from someone familiar with this type of virus?
Thanks

Hi Brian,
Could you give us the whole string/Name of the registry to be able to tell
you is it safe to delete ot not. say
HKEY_LOCAL_MACHINE\Softwares\System\Windows.
And to my knowledge there is a Lavender Background on XP as one of Many
included with the set up.
Are you sure it is a virus and what Procautions you did implement to get rid
of it and did you father has anti-virus installed or not?.
Please state wht steps you done and what you didn't and if there are any
Unnormal Behavior on his computer like ( slow down, Sluggish Applications,
wiered Pop-Ups on the internet, Junk e-mails, unfunctioning
applications.etc..).
HTH.
Please report back.
Regards,
nass

 

[Guest]

I don't have it in front of me but the folder is named Unknown, the shell
says open as, and the command has "Open as run.dll". This seems fishy to me
in itself. When you pull up the desktop properties you can tell it is a
virus, you are unable to click anywhere to change the settings and there are
gibberish wallpapers. Also computer is extremely slow even after cookie
deletion and defrag. Computer is lees taht a year old running Norton's 2006.
Does this help? Thanks

 

[Guest]

I don't have it in front of me but the folder is named Unknown, the shell
says open as, and the command has "Open as run.dll". This seems fishy to me
in itself. When you pull up the desktop properties you can tell it is a
virus, you are unable to click anywhere to change the settings and there are
gibberish wallpapers. Also computer is extremely slow even after cookie
deletion and defrag. Computer is lees taht a year old running Norton's 2006.
Does this help? Thanks

Hi Brian,
Yes Run.dll is a fishy Runing processor runing on the computer I can't agree
more, actualy it is a spyware or a Bad software installed by somehow on your
father computer.
First thing is to scan for Malwares on his computer by downloading these
Utilities and Run it on his computer to clean up:
http://www.lavasoftusa.com for Lavasoft SE for personal use.
http://www.safer-networking.org for spybot S&D but please don't run it in
Tea Time.
Then to be sure it is completely clean download the HijackThis File and Run
it on his computer then send the Report to the Aumha Forum, there are Experts
most (in fact all of them) of them respectable MVPs from here will help you
to get rid of the Malwares as sending the Log file is not permitted here in
this NG.
http://www.aumha.org/free.htm HijackThis.
I bleive that your Dad computer have some Browser Helper Objects installed
by some toolbars causing this Malwares to infect his computer and allow
others too like My web search.
HTH.
Please let us know your result.
Regards,
nass