Wallpaper Trouble -- HELP PLEASE!

[Bilbo]

A WinXPSP2 PC got infected by the "AntiVirus XP 2008" malware thing
and it was removed, apparently effectively. And it appears that none
of the other clients on the LAN got infected by this one. That's the
good news.

The bad news is that when the user logs off, her personal wallpaper
remains on screen even after logoff is completed and the Ctl-Alt-Del
popup appears to solicit the next login.

I feel sure this is controlled by a policy or registry setting but
I've no idea how to return it to the default.

Wallpaper is one of the more obvious things corrupted by that evil
"AntiVirus XP 2008" program and all the malware it invites in.

Does anyone know how to revert this back to the Windows Default?

Thanks,

 

[The Real Truth MVP]

Two choices,
1. Use my free Remove-it software, choose yes for all options. Download it
here http://pcbutts1.com/downloads/tools/tools.htm

2. Use my Desktop Reset tool. Download it here
http://pcbutts1.com/downloads/tools/tools.htm

The desktop reset tool is built-in to the Remove-it software. The advantage
of using Remove-it is that it targets that malware and will remove what was
left over by from what you used to clean it.

 

[Malke]

Two choices,
1. Use my free Remove-it software, choose yes for all options. Download it
here http://pcbutts1.com/downloads/tools/tools.htm

2. Use my Desktop Reset tool. Download it here
http://pcbutts1.com/downloads/tools/tools.htm

The desktop reset tool is built-in to the Remove-it software. The
advantage of using Remove-it is that it targets that malware and will
remove what was left over by from what you used to clean it.

I'm so sorry that you haven't recovered from your accident, Chris.
Apparently the horror of going off a cliff has caused you to think you are
an MS-MVP when you aren't. Nor should anyone download files from a website
which hosts pr0n.

Malke

 

[Malke]

A WinXPSP2 PC got infected by the "AntiVirus XP 2008" malware thing
and it was removed, apparently effectively. And it appears that none
of the other clients on the LAN got infected by this one. That's the
good news.

The bad news is that when the user logs off, her personal wallpaper
remains on screen even after logoff is completed and the Ctl-Alt-Del
popup appears to solicit the next login.

I feel sure this is controlled by a policy or registry setting but
I've no idea how to return it to the default.

Wallpaper is one of the more obvious things corrupted by that evil
"AntiVirus XP 2008" program and all the malware it invites in.

Does anyone know how to revert this back to the Windows Default?

Honestly, I very much doubt the computer is clean. In every case but one
that I have seen with this sort of infection in the last few months (and
there have been a *lot* of them), there is also infection by Zlob and Vundo
trojans and all are protected by a rootkit.

Since this is a work computer I strongly suggest that you flatten the system
and do a clean install. If you are running a business, applying an image of
the system should take a matter of minutes. If you aren't using imaging,
now is a great time to start. I like Acronis True Image Echo Workstation
for businesses without a server. They do have server products, too.

If you don't want to take my advice, then register at one of the following
specialty forums and post whatever logs they call for. Please do not post
logs in the MS newsgroups.

http://aumha.net/ - Click on the HijackThis forum. Read the announcement and
the stickies *first*.
http://www.atribune.org/forums/index.php?showforum=9
http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://spywarewarrior.com/viewforum.php?f=5
http://forums.techguy.org/54-security/
http://forums.tomcoyote.org/

BTW, do *not* download anything from Mr. Butts as he is a) not an MVP; b)
hosts pr0n on his website; c) steals programs from others and claims
ownership.

Malke

 

[The Real Truth MVP]

You are beginning to get on my nerve. Please stop or I will embarrass you.

 

[Unknown]

Why don't you stop asking posters to download your spam??

 

[Malke]

You are beginning to get on my nerve. Please stop or I will embarrass you.

I expect you will try, just as you've done to so many others in the past
such as when you Photoshopped people's heads onto pr0nographic pictures and
posted them on your website. You are ill and I am truly sorry that you are
suffering but you need to get help and stop your [self]destructive
behavior. Then people who care about the posters in these newsgroups will
stop calling you out.

Malke

 

[cavalier]

cavalier wrote The plot thickens, no longer know who the good guys are.

 

[The Real Truth MVP]

Why don't you make me shut up by proving those lies you tell. That goes out
to everybody, post a link to porno on my website. Post proof that my
software is stolen. Show me the duplicates. Do that or STFU.


--
Ignore posts made by the person called Leythos, he is a stalker who's been
obsessed with me for years ever since I spurned his advances towards me.

You are beginning to get on my nerve. Please stop or I will embarrass
you.

I expect you will try, just as you've done to so many others in the past
such as when you Photoshopped people's heads onto pr0nographic pictures
and
posted them on your website. You are ill and I am truly sorry that you are
suffering but you need to get help and stop your [self]destructive
behavior. Then people who care about the posters in these newsgroups will
stop calling you out.

Malke

 

[Unknown]

You have been asked many times to prove you're an MVP. Quit quibbling and
prove it.

Why don't you make me shut up by proving those lies you tell. That goes
out to everybody, post a link to porno on my website. Post proof that my
software is stolen. Show me the duplicates. Do that or STFU.


--
Ignore posts made by the person called Leythos, he is a stalker who's been
obsessed with me for years ever since I spurned his advances towards me.

You are beginning to get on my nerve. Please stop or I will embarrass
you.

I expect you will try, just as you've done to so many others in the past
such as when you Photoshopped people's heads onto pr0nographic pictures
and
posted them on your website. You are ill and I am truly sorry that you
are
suffering but you need to get help and stop your [self]destructive
behavior. Then people who care about the posters in these newsgroups will
stop calling you out.

Malke

 

[Ken Blake, MVP]

Why don't you make me shut up by proving those lies you tell. That goes out
to everybody, post a link to porno on my website. Post proof that my
software is stolen. Show me the duplicates. Do that or STFU.

LOL! This from the person who has been challenged multiple times to
prove he's an MVP, consistently refuses to do so, and is surprised and
outraged when nobody believes him.

 

[The Real Truth MVP]

Me being an MVP has nothing to do with lies posted here about me and so
called porn or stolen software that nobody can find. I've said many times
that I am not going to reveal my real name to anyone and to prove my MVP
status I would be doing just that so stop asking.

 

[Unknown]

Quibble, quibble, quibble.

Me being an MVP has nothing to do with lies posted here about me and so
called porn or stolen software that nobody can find. I've said many times
that I am not going to reveal my real name to anyone and to prove my MVP
status I would be doing just that so stop asking.

 

[Bill in Co.]

It's called projection, Ken. He can't see his own projection, which,
given the nature of the poster, is really not all that surprising.

 

[Ken Blake, MVP]

It's called projection, Ken. He can't see his own projection, which,
given the nature of the poster, is really not all that surprising.

Well, in the interests of not offending anyone with my language, I'll
refrain from stating what *I* think it's called.