Desktop display

[Tonsam]

Some kind of spyware is permanently showing a display "Warning spyware
detected on your computer - install an antivirus or spyware remover" . I did
install but still cannot remove this eyesore from desktop. It seems that the
Display Properties has been attacked and I have only 3 tabs showing: Themes,
Appearance and Settings.....no sign of background tab. WILL SOMEONE HELP ME
PLEASE. Thanks

 

[nass]

Some kind of spyware is permanently showing a display "Warning spyware
detected on your computer - install an antivirus or spyware remover" . I did
install but still cannot remove this eyesore from desktop. It seems that the
Display Properties has been attacked and I have only 3 tabs showing: Themes,
Appearance and Settings.....no sign of background tab. WILL SOMEONE HELP ME
PLEASE. Thanks

Who told you to download the spyware remover the alert?
If so then you have a Zlob variant and you need to run a scan with your
Anti-virus I mean a complete scan not a quick one! Also run a scan from an
online scanners to make sure your AV doing it's job.

Unexplained computer behaviour may be caused by deceptive software
http://support.microsoft.com/kb/827315

Go through these Cleaning steps:
1... First, try to clean up your caches, Internet files and delete cookies
by doing this:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:

http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm
Run disk clean up and check disk on start up.
HTH.
Let us know your progress.
nass

 

[tonsam]

Before trying out your suggestions maybe I need to be more clear. I did not
download or install the spyware from the pop up continuosly showing on my
desktop, but I bought a renowned one from the internet.

Secondly I tried to follow your instructions given by you to a previous
question to dakotaturtle. It seems that the desktop has been removed from
the registry as these could not be found:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop =

an
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop =

and

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System =
Maybe you have any other ways about it now that I have explained more?

Thank you so much

 

[nass]

Okay, what about System Restore to an earlier working Point!
Try the cleaning steps, it doesn't hurt making sure your machine clean and
your AV doing its job!!!

Can you make it clear what "Renowned one from the internet" mean. You could
be easly redirected by the Zlob infection to one of their sites and got a
nasty one
How many accounts on this machine and are you logged as Admin?
ActiveDesktop = if you installed a wallpaper that set itself as a web Item
on your desktop and can connect to the internet to call home!
Finally, what operating system you got, is it XP Home Edition or XP
professional or another Operating system version?
Let us know your progress.
HTH.
nass

 

[visman48]

Tonsam,
I too have this problem, I didn't download it, I had firewalls up, I also am
running Trend Micro, and run it every day. I did clean the registry files,
and I found the folders and deleted them. I have restore turned off because I
suspect the Trojan may be there at some earlier date. I would restore if I
could.

What values do we need to insert into the registry to get back to changing
backgrounds.

I thought about using the cleaning service, but I am not sure I trust them
either. So have half the problem resolved. I guess we still need to
resolved the desktop issue.

Thank you visman48

 

[Nick]

I've got the same problem--it seems to have hijacked my screen and it reset
my homepage. I cannot access previous restore points. My screen saver options
are just a few and I cannot find my power options anymore.

Nick

 

[PaulM]

Try running this script:
http://www.paulsxp.com/forum/viewtopic.php?f=13&t=147

--