Spyware Notification

[Guest]

How do I recover my desktop window? It has a large notification about spyware
infection (from windows) that won' go away. Windows beta version was
downloaded and the problem appeared. I want my desktop back. Even through
control panel I cannot change my desktop theme. Thanks for any help.

 

[Guest]

How do I recover my desktop window? It has a large notification about spyware
infection (from windows) that won' go away. Windows beta version was
downloaded and the problem appeared. I want my desktop back. Even through
control panel I cannot change my desktop theme. Thanks for any help.

 

[Guest]

The same happened to me. I went to AOL help and they told me to go to AOL
spyware which I did, and downloaded their spyware free of charge. It took
away all the big messages but now my desktop is "white" and through the
control panel I can't change it as I can't scroll down the themes and the
apply button is greyed out. Anybody, please, with any solutions to this?

 

[David H. Lipman]

From: "dodge" <[email protected]>

| How do I recover my desktop window? It has a large notification about spyware
| infection (from windows) that won' go away. Windows beta version was
| downloaded and the problem appeared. I want my desktop back. Even through
| control panel I cannot change my desktop theme. Thanks for any help.



Two part reply..

Perform Part 1 then perform Part 2.

It is suggested that you execute each tool in Normal Mode then in Safe Mode.

Use the alternate if the first two parts are ineffective...
Note: Alternate only for Win2K, WinXP and Win2003 Server

Part 1
-----------

Use noahdfear's SmitFraud and SpyAxe removal tool -- SmitRem.exe
http://noahdfear.geekstogo.com/click counter/click.php?id=1

http://www.bleepingcomputer.com/forums/topic36868.html


Part 2
-----------

Download SmitFraud.exe from the URL --
http://www.ik-cs.com/programs/virtools/SmitFraud.exe

Execute; SmitFraud.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\ScanReport.HTML will be generated. At the
end of the scan, it will be displayed in your browser (Opera, FireFox or Internet Explorer).
It is suggested that you move the report out of c:\mcafee before performing another scan.

Alternate:

Secured2K's SpyAxe, PSGuard, Smitfraud, Sinnaka and Alemod removal tool.

http://secured2k.home.comcast.net/tools/AntiPuper.exe

http://forums.mcafeehelp.com/viewtopic.php?t=65072


Please Copy and Paste the contents of the HTML Log file; C:\mcafee\ScanReport.HTML in your
reply.

* * * Please report back your results * * *

 

[David H. Lipman]

From: "mjanemack" <[email protected]>

| The same happened to me. I went to AOL help and they told me to go to AOL
| spyware which I did, and downloaded their spyware free of charge. It took
| away all the big messages but now my desktop is "white" and through the
| control panel I can't change it as I can't scroll down the themes and the
| apply button is greyed out. Anybody, please, with any solutions to this?
|


See my reply to Dodge.

 

[Guest]

dodge,
try uninstalling microsoft beta anti-spyware.

Tell me if this works
yogi

 

[Malke]

dodge,
try uninstalling microsoft beta anti-spyware.

Tell me if this works
yogi

Uninstalling MSAS will not help the OP. He has a variety of the
Smitfraud infection. Following Dave Lipman's advice will solve the
issue.

Malke

 

[Guest]

Malke,
Thanks for the reply. I sure hope it does.

yogi

 

[Guest]

Thanks for your interest, however, one of the first things I did was remove
the windows beta spyware program but my desktop display notification is still
there. The beta version itself is acting like an infection. Please, help

 

[Guest]

Dodge,
Dint david's suggestions help??

yogi

Thanks for your interest, however, one of the first things I did was remove
the windows beta spyware program but my desktop display notification is still
there. The beta version itself is acting like an infection. Please, help

 

[Guest]

Yogi. David's suggestion worked great. I owe him a Thank You!!

 

[Guest]

I may seem stupid, but exactly what was David's suggestion. In his post it
says to
"See my reply to Dodge."
But I don't see his reply to dodge. Can someone repost his advice? I have
the same problem, but is occured before I loaded Microsoft AntiSpyware.

 

[David H. Lipman]

From: "dodge" <[email protected]>

| Yogi. David's suggestion worked great. I owe him a Thank You!!
|

YW !

Have a happy New Year !

 

[David H. Lipman]

From: "Don" <[email protected]>

| I may seem stupid, but exactly what was David's suggestion. In his post it
| says to
| "See my reply to Dodge."
| But I don't see his reply to dodge. Can someone repost his advice? I have
| the same problem, but is occured before I loaded Microsoft AntiSpyware.
|



Two part reply..

Perform Part 1 then perform Part 2.

It is suggested that you execute each tool in Normal Mode then in Safe Mode.

If you are using any version of Sun Java that is prior to JRE Version 5.0, then
you are are strongly urged to remove any/all versions that are prior to JRE
Version 5.0. There are vulnerabilities in them and they are actively being exploited.
It is possible that is how you got infected with malware.

Therefore, it is highly suggested that if there are any prior versions of Sun Java
to Version 5 on the PC that they be removed and Sun Java JRE Version 5.0 Update 6
be installed ASAP.

http://www.java.com/en/download/manual.jsp




Use the alternate if the first two parts are ineffective...
Note: Alternate only for Win2K, WinXP and Win2003 Server

Part 1
-----------

Use noahdfear's SmitFraud and SpyAxe removal tool -- SmitRem.exe
http://noahdfear.geekstogo.com/click counter/click.php?id=1

http://www.bleepingcomputer.com/forums/topic36868.html


Part 2
-----------

Download SmitFraud.exe from the URL --
http://www.ik-cs.com/programs/virtools/SmitFraud.exe

Execute; SmitFraud.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\ScanReport.HTML will be generated. At the
end of the scan, it will be displayed in your browser (Opera, FireFox or Internet Explorer).
It is suggested that you move the report out of c:\mcafee before performing another scan.

Alternate:


Secured2K's SpyAxe, PSGuard, Smitfraud, Sinnaka and Alemod removal tool.

http://secured2k.home.comcast.net/tools/AntiPuper.exe

http://forums.mcafeehelp.com/viewtopic.php?t=65072


Please Copy and Paste the contents of the HTML Log file; C:\mcafee\ScanReport.HTML in your
reply.

* * * Please report back your results * * *

 

[Plato]

How do I recover my desktop window? It has a large notification about spyware
infection (from windows) that won' go away. Windows beta version was
downloaded and the problem appeared. I want my desktop back. Even through
control panel I cannot change my desktop theme. Thanks for any help.

BETA means NOT YET DONE.

 

[Guest]

David,

So far it appears that the SmitRem.exe has corrected the problem.

I was not able to run it in safe mode. Is it possible that safe mode canot
be entered if I am using a wireless keyboard and mouse?

 

[David H. Lipman]

From: "Don" <[email protected]>

| David,
|
| So far it appears that the SmitRem.exe has corrected the problem.
|
| I was not able to run it in safe mode. Is it possible that safe mode canot
| be entered if I am using a wireless keyboard and mouse?
|

It may be. If the drivers aren't loaded in Safe Mode then it would be difficult to be in
Safe Mode. However, I don't think it stop you from running in Safe Mode.

Just to make sure...

Please go through the following process.


Download SmitFraud.exe from the URL --
http://www.ik-cs.com/programs/virtools/SmitFraud.exe

Execute; SmitFraud.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\ScanReport.HTML will be generated. At the
end of the scan, it will be displayed in your browser (Opera, FireFox or Internet Explorer).
It is suggested that you move the report out of c:\mcafee before performing another scan.