Tech Problem Aggregator

hijackthis disabled, start button gone, background changed

Q: hijackthis disabled, start button gone, background changed

http://w-find.com/index.htm<---this is my homepage??

i have something very nasty. hijackthis will not run. certain applications say they need to be reinstalled. i have no start button anymore in bottom left hand corner. my files in the c:/ are all messed up and cant read them. i do not know what to do? i have run adware se, spy bot, cwsshredder. i am all out of options?

any help would be appreciated.

A: hijackthis disabled, start button gone, background changed

16 more replies
Answer Match 75.6%

I've tried spy-bot spyware removal but have had no luck... please help!
Here is a copy of my Hi-jackThis file.


Logfile of HijackThis v1.99.1
Scan saved at 12:57:53 PM, on 4/16/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\system32\gearsec.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe
C:\WINDOWS\winself.exe
C:\Program Files\Nikon\Wireless Camera Setup Utility\NkPtpEnum.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\wmsdkns.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program... Read more

A:Please help!, pop-ups, task manager disabled, display background changed :(

bump..

2 more replies
Answer Match 73.92%

Running XP, background was changed to a Spyware Guard dialogue box that says system threats found. Tried to change it and got the box saying "Your system administrator disabled the control panel." Used to get constant pop-ups from windows security and spyware guard and after running avast boot scans several times the problem still remains. I'm on a very old computer and about to build a new one, but I don't want to just trash this one. Thanks.

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\zHotkey.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\eMachines Bay Reader\shwiconem.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\Lexmark 1200 Series\lxczbmon.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Common Files\Microsoft Sha... Read more

A:Changed background, lost system admin and disabled control panel

Download ComboFix from Here to your Desktop.

**Note: It is important that it is saved directly to your desktop and run from the desktop and not any other folder on your computer**
--------------------------------------------------------------------
1. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results"
Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
Remember to re enable the protection again after combofix has finished
--------------------------------------------------------------------
2. Close any open browsers and any other programs you might have running
Double click on combofix.exe & follow the prompts.​If you are using windows XP It might display a pop up saying that "Recovery console is not installed, do you want to install?"
Please select yes & let it download the files it needs to do this
When finished, it will produce a report for you.
Please post the "C:\ComboFix.txt" along with a new HijackThis log for further review
****Note: Do not mouseclick combofix's window while it's r... Read more

3 more replies
Answer Match 68.88%

Hi guys, is it possible to change the colour of the white start button in Window 8.1?

My screen is suffering from screen burn because of the bright start button and I'm thinking it would be less severe if the button was a darker colour.

I've looked through all personalisations and everything but I can't find a way.

The button does change to black though when "High Contrast White" is selected in the personalisations, but I can't find a way other than that to do it

Thanks

A:Can the Start Button colour be changed? Windows 8.1

I don't think it's possible to change the color other than what you found. There may be some 3rd party app to do so. I know of none.

I use this. You may want to try it.

http://www.eightforums.com/free-deve...tml#post277304

4 more replies
Answer Match 68.04%

power button in start menu changed to log off automatically
i can't change to shut down in start menu properties
there is only switch user,log off,lock options
pleeeeease help

I also did a system restore

A:Power button in start menu changed to log off automatically?

Welcome to the Seven Forums.

Can you set it using the Group Policy Editor?

Power Button - Start Menu

Start > gpedit.msc > Enter



Double click on the line highlighted in the right pane of the image above and wait for the screen shown in the image below:

1 more replies
Answer Match 67.62%

I updated my 640 to Win 10 Mobile Anniversary Update using Insider Pre Release ring. The phone works VERY well. I noticed that sometimes there is a faint blue background around the Start button. It is not there all the time. I assume this has some kind of meaning. Does anyone know what the blue background around the Start button signifies?

A:Blue Background Around Start Button Win 10 Mobile AU.

can you post a photo? Does it show up in any app?

more replies
Answer Match 67.62%

I updated my 640 to Win 10 Mobile Anniversary Update using Insider Pre Release ring. The phone works VERY well. I noticed that sometimes there is a faint blue background around the Start button. It is not there all the time. I assume this has some kind of meaning. Does anyone know what the blue background around the Start button signifies?

More replies
Answer Match 67.2%

Hi All,

I have a Dell laptop which has built in windows 8 in it.
Recently it has automatically upgraded to windows 8.1.
every time when switch on my laptop
Start button and charms are disabled
so I will restart again to get it enabled it is beeeeen happening for last three months.
If some one have solution to solve without downgrading to windows 8 please suggest me a solution
please help

A:Start button and charms are disabled after window 8.1

Running

sfc /scannow

&

Dism /Online /Cleanup-Image /RestoreHealth

&

sfc /scannow AGAIN, both in administrator CMD prompts MAY help.

Dism hangs on 20% for a long time but will finish.

11 more replies
Answer Match 67.2%

I have Windows XP Home/ SP3 - the event log start button is disabled (its all gray'd out and unclickable). (you need to start it, in order for windows update to accurately update, and update everything). also (which I think is related, maybe), although I have dL'd and installed the latest Flash player 8 several times (and restarted thereafter), as well as Adobe Acrobat, I cannot play myspace or youTube videos (I get the dreaded Box with a Red X, versus a snapshot of the video with a play button) - and both sites keep telling me that I need the latest Flash Palyer 8 (I'm in a catch-22 with this). And when I go to any site for any product (ie, a printer, I'm seeking troubleshooting for it, and need to view their online manual, I also get a Red X, as if its not recognizing Acrobat/pdf. And, yes, I DO have java scripting enabled. Help!!
 

A:services.msc - event log start button disabled

9 more replies
Answer Match 66.78%

My son accidentally changed the start-up type to "Disabled" on the Group Policy service and now I (as Administrator) cannot access or do anything requiring admin privileges.

I cannot open Services, Regedit, or any other Admin tool, nor can I run a command prompt as Administrator. I am afraid to shut it down for fear of not being able to access anything when rebooted.

This laptop doesn't have a CD drive; otherwise, I would repair Windows files with the Windows disk I have.

I've tried every way I found when researching the problem, but I am denied access at every turn.

Can somebody please help??

Thank you!!

More replies
Answer Match 66.78%

Hi,

I've disabled the power/sleep button in the start menu a while ago to prevent my children from shutting down the computer. Now they are older and I want to get them to put the computer to sleep when they are not using it. Unfortunately, I can not remember how I disabled the power button. There are no group policies set and I couldn't find any settings on the registry (as suggested in your tutorials Power Button and Shutdown Options - Start Menu). Here is a screenshot of the situation:


https://www.nirvanaware.com/browser/...abledPower.jpg


Any ideas how I could enable this again?

A:disabled power/sleep button in start menu

Hi Tinschel,

Welcome to Vista Fourms.

You might see if this tutorial is what you did. To enable it again, you will just need to delete the ACSettingIndex DWORD in the registry.

Removing the Sleep function in the Shutdown menu

Hope this is it,
Shawn

5 more replies
Answer Match 65.1%

I Dont Know What Has Happened To My Computer But It Looks Everything Has Gone Bad. The Task Manager Is Disabled By Administrator When Pressing Ctrl Alt Delete. No Turn Off Button On The Start Menu!
Cannot Open Anything In New Window Or Cannot Click A Link, It Never Redirects!

Something Is Really Wrong! To Listen To Sound, Everytime I Restart I Have To Uninstall Creative Sl Audio And Put The Cd And Have To Add Hardware To Listen Cause Everytime I Restart There Comes A Error In There So I Cannot Listen

Please Help
 

A:Pleadr Help! Task Manager Is Disabled By Administrator! No Turn Off Button On Start M

11 more replies
Answer Match 60.9%

I ran Malwarebytes to try to remove a virus, (I think it was Windows Restore but it was two weeks ago). Now my desktop background has been changed to solid black and some folders are hidden. Google and Yahoo! take a long time to find search results and then they redirect if I click directly on a link. Audio advertisements play in the background and I also get pretty regular IE script errors even if nothing seems to be running. Every now and then IE will open on it's own and go to a pop-up advertisement. My computer acts like it is running IE on its own and it is constantly cycling through pop-up adds in the background, but I can't find anything on taskmanager which looks suspicious. If I run rkill.exe the audio advertisements stop but they start up again pretty soon afterward. I've been updating Malwarebytes daily and running both full and quick scans, in regular and in safe mode, but nothing shows up. I really appreciate any help I receive, as I have been trying on my own to get rid of this whit no luck.

Here are my logs:

.
DDS (Ver_11-03-05.01) - NTFSx86
Run by henrye at 2:52:41.06 on Fri 04/22/2011
Internet Explorer: 7.0.6000.16982
Microsoft? Windows Vista? Business 6.0.6000.0.1252.1.1033.18.2038.900 [GMT -4:00]
.
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\syst... Read more

A:Google redirects, IE script errors pop up, audio advertisements play in background, desktop background has changed to black

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Run this tools first - http://download.bleepingcomputer.com/grinler/unhide.exeRun Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is normal.You can download Combofix from one of these links.Link 1Link 2Link 3 1. Close any open browsers or any other programs that are open.2. Close/disabl... Read more

24 more replies
Answer Match 60.48%

hello,
i used windows home premium 64bit, when i change my desktop background, after few minutes, it'll return to the previous desktop background. can anyone help me?

A:desktop background return to previous background after changed it.

Hello Nirzan and welcome to Seven Forums.

Make sure you're following the steps in Option Two of this article, particularly Step 7, "save changes".

Desktop Background - Change

If the problem still isn't fixed, your computer may have damaged or corrupt system files. Sometimes files get damaged because of malware so run a full scan using your preferred anti-virus suite. Since no anti-virus is 100% effective 100% of the time, it's always a good idea to run some additional on-demand scans. These are free and recommended. The more scans you run (one at a time!) the greater the probability your computer is not infected.

Malwarebytes

ESET Online Scanner

SuperAntispyware

HitmanPro

If your computer comes back clean I'd next run a system file checker scan from an elevated command prompt (option two.) If problems are found, run the scan 3 times and reboot your computer after each scan.

SFC /SCANNOW Command - System File Checker

Please post back if anything helped or not.

3 more replies
Answer Match 60.48%

Hi, any help will be appreciated..
When I open my C:\WINDOWS window on My Computer, I get this weird picture of a manga-ish samurai (which I'm positive I've never intentionally downloaded) as the window background. Other folders window background are unaffected. I've tried changing Window schemes, etc but no change. My PC still works fine, everything functions (except for iTunes & quicktime, but I think its unrelated) so it's merely annoyance really, but I'm worried if it is a virus, it might spread. I've tried scanning with Ad-Aware and Avast but no virus were found. Wanted to try the online Panda scanner but took too long (I'm connecting from Indonesia)
Here's my DSS main.txt:
Deckard's System Scanner v20070807.62
Run by Admin on 2007-08-09 at 10:54:29
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
27: 2007-08-09 03:54:35 UTC - RP28 - Deckard's System Scanner Restore Point
26: 2007-08-09 02:58:43 UTC - RP27 - Installed Nokia Multimedia Factory
25: 2007-08-09 02:54:41 UTC - RP26 - Installed Nokia PC Suite
24: 2007-08-09 02:43:19 UTC - RP25 - Installed iTunes
23: 2007-08-09 02:42:05 UTC - RP24 - Removed Apple Mobile Device Support


-- First Restore Point --
1: 2007-07-23 06:05:47 UTC - RP2 - System Checkpoint

... Read more

A:Possible virus -- changed windows background (not desktop background)

Hello

Please copy this page to Notepad and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions.

It's IMPORTANT to carry out the instructions in the sequence listed below.

***************************************************

Download SDFix and save it to your Desktop. Double click SDFix.exe and it will extract the files to %systemdrive% -(Drive that contains the Windows Directory, typically C:\SDFix)

--------------------------------------------------------------------

Download Combofix and save it to your desktop.

**Note: It is important that it is saved directly to your desktop**

--------------------------------------------------------------------

Close any open browsers.

--------------------------------------------------------------------

Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.


Double click on combofix.exe & follow the prompts. When finished, it will produce a report for you.
I'll need the C:\ComboFix.txt in your next reply.

Note:
Do not mouseclick combofix's window while it's running. That may cause it to stall

--------------------------------------------------------------------

Please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, ... Read more

15 more replies
Answer Match 54.18%

Microsoft has decided to bring back the "Start button" in Windows 8.1, that's why they have included start button windows 8.1 preview. But that button is not actually a start button. The classic multi-step applicaton launcher is that we have seen in windows 7 and earlier versions of microsoft windows is still missing. Windows 8.1 Start Button is just a shortcut to the windows 8's start menu.

A:Windows 8.1 preview Start button isn't actually a Start button

Yeah..its really not what we are looking for. Best bet is to still use one of the start menu replacements.

3 more replies
Answer Match 53.34%

Hi,
In reference to the following posting, http://en.community.dell.com/support-forums/laptop/f/3518/t/19676126:
I am not the individual who initiated this query but I did have the same issue with my Dell Inspiron 5547, where it wouldn't turn on after a power button shut down.
I followed Hema's instructions by removing the battery and charger and then holding down the power button for a few seconds, and then putting back the parts. It seemed to have done the trick... At least for now. Is this just a temporary fix?
While doing a Google search for a solution I seem to have encountered a number of people who experienced the same issue. Can you also explain why this happens with this particular Dell laptop? Is it a model flaw?
Thank you

More replies
Answer Match 53.34%

My sister's Nokia n81 was infected so I connected it to the PC and made a scan with ESET Smart Security. The infection was cleaned but when the mobile was connected to another PC the background changed and my computer icon changed to the unknown file type icon. I downloaded some anti-spyware programs and got rid of infection. I changed the background but my computer icon is still unknown. I noticed that after removing the infection there is a strange entry in startup " Startup item : u Command : C:\WINDOWS\system32\kxp.exe\u ". Also in network connections in ESET Smart Security I noticed that smss.exe is connected to the internet and when I block the connection all my network activity is dead I can't even access to my router page.

Thanks in advance
DDS (Ver_09-12-01.01) - FAT32x86
Run by Dr.Hamdy at 23:54:13.84 on Fri 01/01/2010
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1256.20.1033.18.319.127 [GMT 2:00]

AV: ESET Smart Security 4.0 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET Personal firewall *enabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
SVCHOST.EXE
C:\WINDOWS\System32\svchost.exe -k netsvcs
SVCHOST.EXE
SVCHOST.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET ... Read more

A:Background changed

I solved the problem with hijackthis tool

2 more replies
Answer Match 53.34%

My background was recently changed. First what happened is beetles started to crawl out of my screen. This appeared to be a screen-saver. Than my background was changed to default, and in the middle of my screen there was a message box saying "Warning! Spyware Detected on your computer. Install a antivirus or spyware remover to clean your computer.

Heres is my logfile:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:59:49 PM, on 6/4/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\NETGEAR\WG311v3\WinDomainlogon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\arservice.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\Light... Read more

A:Background Changed.

Hi, Welcome to TSG!!
Run HJT again and put a check in the following:

O4 - HKLM\..\Run: [lphcnewj0ej6c] C:\WINDOWS\system32\lphcnewj0ej6c.exe

Close all applications and browser windows before you click "fix checked".

Please download the OTMoveIt2 by OldTimer.

Save it to your desktop.
Please double-click OTMoveIt2.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
Copy the lines in the quote box below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):

C:\WINDOWS\system32\lphcnewj0ej6c.exe

Click to expand...
Return to OTMoveIt2, right click in the "Paste Custom List Of Files/Patterns To Move" window (under the yellow bar) and choose Paste.

Click the red Moveit! button.
Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
Close OTMoveIt2
Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes. In this case, after the reboot, open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTMoveIt\MovedFiles folder, and open the newest .log file... Read more

1 more replies
Answer Match 53.34%

I want to replace the Shut Down button, with a Lock button instead
How do you do that?
I wondered this for a while actually.
I mean the button in the pic below

A:Start Menu - Replace Shut Down Button, with Lock Button

Sergio,

Right Click - Properties (on the actual Button) will change the function and wording - is that what you need or are you looking to replace with a lock graphic?

2 more replies
Answer Match 52.5%

Hi, I'm new to the forum, and fairly new to Windows 8, which I've been using from the desktop as I can't get on with the Start menu and its tiles. Not using Start8. Anyway, I was using the desktop taskbar with its Start button and Show desktop button and today they have both disappeared. How can I get them back?

More replies
Answer Match 52.5%

Toshiba Satellite w/53G HD available. Running Vista Home Premium, Firefox, Thunderbird, Open Office Suite.

When several programs are running with multiple browser windows open, the task bar is not accessible. Mouse over results in the hourglass appearing. I can minimize open windows and open a program off the desktop.

I suspect it is a memory issue. Suggestions?

A:Task bar/start button/Windows button not accessible

while this is occurring press Ctrl. +Alt. + Del. and go to the performance tab, how much of the CPU and RAM is getting utilized?

Also, how much RAM is installed in your system?

2 more replies
Answer Match 52.5%

this is my hijackthis log after cleaning up with online scans and AdAware:

Logfile of HijackThis v1.99.1
Scan saved at 11:32:54, on 20.2.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Documents and Settings\Valter\Desktop\HijackThis.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNot... Read more

A:No run button and no turn off computer button in start up menu

Welcome to the forum valter1973

Quote:




No run button and no turn off computer button in start up menu




Is that the only problem now ?
It appears you do not have a antivirus program running, why is that ?

4 more replies
Answer Match 52.5%

It seems I have the PestTrap running through my system (based on other threads I've read). I've downloaded HijackThis and now need to know what to delete. Is there an FAQ or do we post the HJT log to this forum each time?

Thanks so much for helping.
Matthew.
 

A:Background changed, ntnc.exe....help, please!!

7 more replies
Answer Match 52.5%

Hello, My computer just said that it needed to restart and had the options to restart now or restart later. I clicked restart now, so it did, but when the screen came back up it was red. It had been a drawing done in paint that I saved to the desktop. Anyway, it is now the standard red color, no signs or warnings on it, no bleeding, it's definitely the background color, not anything to do with the monitor. I went into the desktop settings, and it did allow me to change it. Would not allow me to change back to the same drawing (as this now was showing as the red background option as opposed to what it had been). However, it did allow me to pick different backgrounds, colors, etc. So...that's never happened before with the different background color of red just randomly appearing...can anyone tell me what happened? is this a trojan or virus? a default (ie. every 6 years they just change the desktop for no reason to screw with the people?? lol) Any thoughts?

More replies
Answer Match 52.5%

friend used computer on Saturday.

sunday woke up to use computer and had a popup that i was infected. the desktop was all black with the words...

Your computer is in Danger
Windows security center has detected spyware/adware infection!
It is strongly recommended to use special antispyware tools to prevent data loss.

something kept trying to download - bravesentry, but i was able to stop it from downloading.

here's my hijackthis log. (can't believe this happened , maybe i need to make my comp off limits)

Logfile of HijackThis v1.99.1
Scan saved at 5:48:03 PM, on 6/6/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\McAfee\McAfee VirusScan\Avsynmgr.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\McAfee\McAfee VirusScan\VsStat.exe
C:\Program Files\McAfee\McAfee VirusScan\Vshwin32.exe
C:\Program Files\McAfee\McAfee Firewall\CPD.EXE
C:\Program Files\Common Files\Network Associates\McShield\Mcshield.exe
C:\Program Files\McAfee\McAfee VirusScan\Avconsol.exe
C:\WINDOWS\Explorer.EXE
C:\Program Fi... Read more

A:can't changed DESKTOP background

Before you do anything else, create a folder for HijackThis and put it in a permanent folder (like C:\HJT) instead of the Temp folder. This is required because HijackThis will create backups and we don't want them to be deleted.

You may want to print out these instructions for reference, since you will have to restart your computer during the fix.

Please download FixWareout from one of these sites:
http://downloads.subratam.org/Fixwareout.exe
http://www.bleepingcomputer.com/file...Fixwareout.exe

Save it to your desktop and run it. Click Next, then Install, make sure "Run fixit" is checked and click Finish.
The fix will begin; follow the prompts. You will be asked to reboot your computer; please do so. Your system may take longer than usual to load; this is normal.

Once the desktop loads a text file will open (report.txt), you can close it - the file has already been saved.

Run HijackThis. Click "Do a System Scan Only", and place a check next to the following items (if found):

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\blank.htm
O1 - Hosts: localhost 127.0.0.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{E6F756D3-A1F8-4567-9D0D-07CE2594F152}: NameServer = 85.255.116.153,85.255.112.12

Click FIX CHECKED. Close HijackThis.

Finally, please post the contents of the text file that opened earlier (you can find it at C:\fixwareout\report.txt ) at the end of this fix.


-------------------------... Read more

9 more replies
Answer Match 52.5%

Hello everyone,

I had this recent event with my computer, where my background had changed to black. All my desktop icons were still there, except the background picture itself changed to black, It happened when I was searching in google, when I finished I noticed the random change. I checked my background themes and found a unsaved theme of a black background, then deleted the picture and changed background. This is not a huge problem, except I would like to know what caused it.

I run on Windows 8.1, on a ASUS Laptop.

Thank you!

More replies
Answer Match 52.5%

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:41:10 PM, on 9/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\QWxleA\command.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\locator.exe
C:\Program Files\Windows Media Player\WMPNetwk.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\uesiuqcr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\?icrosoft.NET\n?tepad.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\COMMON~1\mwrq\mwrqa.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

F2 - REG:system.ini: UserInit=C:\WINDOWS\SYSTEM32\Userinit.exe,C:\WINDOWS\system32\uesiuqcr.exe,
O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\QWxleA\command.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 1445 bytes

Background changes to this and can't change back:
... Read more

A:HJT Log - Background Changed - cmdService

Hello and Welcome. Apologies for any delay in replying, but we have been rather busy lately.

Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

---------------------------------------------------------------------------------------------

If you still require assistance with this issue, and since it's been several days since your original log was posted, please do this:
Download RSIT by random/random and save it to your desktop.
Double click RSIT.exe to start the tool and click Continue at the disclaimer.
When the scan completes it will open a log named log.txt maximized, and a log named info.txt minimized.
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of log.txt here.
Please attach info.txt to your post.
To attach a file to a new post, simplyClick the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
copy and paste the following into the "Upload File from your Computer" box:C:\rsit\info.txt

Click Upload.

---------------------------------------------------------------------------------------------

2 more replies
Answer Match 52.5%

When I right click on the desktop to change the background settings the only thing I can change is the background color, no pictures, cant browse for pictures or set any of the standard backgrounds as the desktop background. How is this disbaled and how can I enable it again?

Thanks in advance.

Ryan
 

A:Background settings cant be changed...

7 more replies
Answer Match 52.08%

I'm running Windows XP service pack 2, and everytime that I start up my computer the following message appears in a text-box:

"Spyware Alert!

Security warning!

Worm.Win32.NetSky detected on your machine.
This virus is distributed via the Internet through e-mail and Active-x objects.
The worm has its own SMTP engine which means it gathers e-mails from your local computer and re-distributes itself.
In worst cases this worm can allow attachers to access your computer, stealing passwords and personal data.
Viruses can damage your confidential data and work on your computer.
Continue working in unprotected mode is very dangerous

Type: Virus
System Affected: Windows 2000, NT, XP, Vista, 7
Security risk (0-5): 5
Recommendations: It is necessary to perform a full system scan"

I close this window by pressing "x" instead of "ok," and in the task bar, there is this little bubble that appears periodically from an icon that is a white x with a red background. The message in the bubble says:
"Warning! Your computer is infected! Windows has detected spyware infection! It is recommended to use special anti-spyware tools to 'pervent' data loss. Windows will now download and install the most up-to-date anti-spyware for you. click here to protect your computer from spyware!"

Well I tried to download Malware and couldn't run it or anything (it was already previously on the system;... Read more

A:Spyware alert! Background changed as well

Oh yes, I forgot that task manager wasn't working either.

12 more replies
Answer Match 52.08%

hi guys. as per title, ive tried ALL the steps here ; Log On Screen - Change the changes are said to be successful according to the softwares, but when i tested by restarting or ctrl+alt+del, it doesnt work; the logon background is still the standard windows blue wallpaper. ive tried sfc scannow, everything went back to default(ive installed custom theme, custom start orb), tried again changing the logon background, still same result. its been hours now. am really frustrated.

A:logon background changed but not working

Could be your screen resolution is not compatible? - see step 11 in tutorial.

4 more replies
Answer Match 52.08%

Respected Buherators:

my name is Ben. My problem is that, yesterday my wallpaper changed, I try to attach, how it looks like. Messeges keep coming like that on the picture, telling my computer is infected with spyware, or telling that, my computer is slower, than it should be or telling "Your security and privacy are at risk!"
Sometimes comes an internet window, I also attached it.
Sometimes comes a disgusting red window, also attached.
I already tried Norton Antivirus 2007 & Spyware Terminator, no use.
I tried to search the background image in windows folder, also faliure.

The scan reports are these:

Deckard's System Scanner v20071014.68
Run by Maestro on 2008-05-08 13:00:40
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
35: 2008-05-08 11:00:43 UTC - RP164 - Deckard's System Scanner Restore Point
34: 2008-05-08 10:32:48 UTC - RP163 - Elt?vol?tva: Windows Live Messenger
33: 2008-05-08 10:32:21 UTC - RP162 - Elt?vol?tva: Windows Live installer
32: 2008-05-08 10:32:06 UTC - RP161 - Elt?vol?tva: Windows Live bejelentkez?si seg?d
31: 2008-05-08 09:22:01 UTC - RP160 - Spyware Terminator - restore point


-- First Restore Point --
1: 2008-05-07 11:58:15 UTC - RP130 - Rendszerellenőrz?si pont
... Read more

A:changed background, spyware problems

Hi, welcome to TSF!

Sorry for the delay, helpers here are very busy,

If you still need assistance, please post a fresh main.txt log

3 more replies
Answer Match 52.08%

When I woke up this morning, my computer had a screen up over the desktop background saying that I had spyware on my computer, the FBI was watching, all this crap, and you can't close it. I have ran cleanup! and Avast and Ewido and all of them catch it, but they don't completely get rid of it. I just don't think I'm doing everything in the right order, or I'm missing a step. Here's my HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 7:32:39 PM, on 1/23/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\HJT\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Ad... Read more

A:Desktop background changed saying I have spyware

sorry i posted it twice..... so i edited the second one out.

2 more replies
Answer Match 52.08%

I'm having problems with some spyware that changed my background.Logfile of HijackThis v1.99.1Scan saved at 3:21:54 PM, on 12/26/2005Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccProxy.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEF:\Program Files\D-Tools\daemon.exeC:\WINDOWS\System32\RUNDLL32.EXEC:\Program Files\Common Files\Symantec Shared\ccApp.exeC:\Program Files\Common Files\Real\Update_OB\realsched.exeC:\WINDOWS\batserv2.exeC:\WINDOWS\System32\spoolsvv.exeC:\Program Files\Tukati\Redistributor\1\TukatiRedistributor.exeC:\Program Files\MSN Messe... Read more

A:Spyware Has Changed My Desktop Background

You may want to print out these instructions for reference, since you will have to restart your computer during the fix.Please download FixWareout http://downloads.subratam.org/Fixwareout.exeSave it to your desktop and run it. Click Next, then Install, then make sure "Run fixit" is checked and click Finish. The fix will begin; follow the prompts. You will be asked to reboot your computer; please do so. Your system may take longer than usual to load; this is normal.When your system reboots, follow the prompts. Afterwards, Hijack This will launch. Close Hijack This, and click OK to proceed. )17?s can be fixed hereAt the end of the fix, you may need to restart your computer again.Finally, please post the contents of the logfile C:\fixwareout\report.txt, along with a new Hijack This log.

11 more replies
Answer Match 52.08%

Hi all,

I have a HP split x13. My laptop was powered on and left on the sofa. I was then doing first time install on an Asus R510C which also runs windows 8 like my HP.

Once first time install was complete I restarted the laptop for any updates, then off the laptop. I went back to my HP and some how the desktop background had changed to the same default Asus background as was on the Asus laptop. The default Asus background shows off the laptop image and has Asus in big writing.

How did this get onto my HP?? I didn't do anything???

This is very freaky to me because I just off the Asus and saw the Asus background again on my HP!?

I'm freaked out so please advise!

Thank you.

A:Desktop background changed itself - freaky!!

Hi there Ecko and welcome to Eight Forums,

Relax. There is nothing to worry about. It seems that you've enabled the setting that you profile is beeing shared between the Windows 8 devices that you use. This is a feature that can be nice to use if you want all your devices to view the same profile.

You can disable this setting trough the PC settings app. Just go to the SkyDrive settings and choose for "synchronising settings". There you can enable and disable all the different settings you can share through the different Windows 8 machines you are using.

Sync Your Settings - Turn On or Off in Windows 8

Hope this was helpfull.

Greetz,

Rover

6 more replies
Answer Match 52.08%

Hi my cousin got a virus and a Trojan earlier today. It was cleaned out by his anti-virus program. His background was changed to a windows warning message saying he has adware.virtumonde and privacyremover.m64. I asked him what virus and trojan did the avg detect he says he forgot. i want to make sure it is all out of his system. Also he cant change the background back to what he had and was wondering if you could help fix it.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:21:36 PM, on 8/23/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\BCMSMMSG.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Documents and Settings\Stephen\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKL... Read more

A:Virus that changed background of comp

Hello and welcome to TSF
Download Random's System Information Tool (RSIT) by random/random from here and save it to your desktop.
Double click on RSIT.exe to run RSIT.
Click Continue at the disclaimer screen.
Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)

=======
Logs Required
Log.txt
Info.txt

1 more replies
Answer Match 52.08%

Also, it disabled my task manager, which I fixed.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:46:16 AM, on 1/26/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\system32\Userinit.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\HP\HP Softw... Read more

A:Antivirus XP Pro popups and changed background

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

1 more replies
Answer Match 52.08%

windows is erroring, but not really, its like a fake error message that says software or hardware not installed properly, but every time it pops up it says for a different reason or location. it looks like it restarts windows and goes back into the operating system start up but keeps looping back into the error, however, pressing any butten during any of the looping process takes me right back to my desktop with all my programs still open and running.

this started happening right after i had anti virus xp 2008 popping up.

Logfile of HijackThis v1.99.1
Scan saved at 10:33:37 PM, on 8/29/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\M-Audio\JamLab\JamLabInst.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\... Read more

A:Help, Windows erroring along with changed background

16 more replies
Answer Match 52.08%

one of the ID's under XP has a problem with Internet Explorer launching. It also has lost the ability to change the desktop background. i'm guessing an aftereffect from a spyware invasion I had months ago. but only this ID seems to still have the problems. I'm attaching a log from HiJack This. I appreciate any guidance you can provide.


Logfile of HijackThis v1.99.1
Scan saved at 1:28:45 PM, on 2/17/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\STOPzilla!\szntsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\ewido\security suite\ewidoctrl.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Norton AntiVirus\navapsvc.exe
C:\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\PROGRA~1\Dantz\RETROS~1\retrorun.exe
C:\PROGRA~1\Dantz\RETROS~1\wdsvc.exe
C:\Norton AntiVirus\SAVScan.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\iPod\bin\iPodService.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\Microsoft AntiSpyware\gcasDtServ.exe
C:\WINDOWS\S... Read more

A:IE not working and desktop background can't be changed

10 more replies
Answer Match 51.66%

before reading, please keep in mind that i do not know much about computers.

i need help with my desktop background. i guess it's been disabled? all i see is a black background and i cannot change it. i can still see the icons and taskbar, but no background. i have run these recently:
free internet eraser
CCleaner
Spyware terminator and
SUPERantispyware

this is what i can tell you about the laptop (althought im not sure what it really means, or if it will help)

windows vista home premium
manufacturer: Gateway
model: mt3705
processor: genuine intel(r) cpu
memory: 598mb
sytem type: 32-bit operating system

well, there isnt any more i can think of to include in this post. if you have any questions, please ask.

please help me out and thank you for any help.
 

A:disabled background

EDIT
my teenage brother (who knew) fixed the problem somehow. i couldnt figure out how to delete my post so i am replying.

thanks!
 

2 more replies
Answer Match 51.66%

Greetings,
I am pretty decent at troubleshooting problems, but as viruses and hackers become more and more clever, it becomes more difficult for me to locate the problem myself. This time, I am actually quite stumped, which is why I registered here.

I am running Windows XP on a Dell Dimension XPS Gen 2.
The problem I am having is every time the computer is restarted, something disables my task manager. Something is rendering me unable to activate Norton's auto protect, and just today the sounds coming from the computer just echo. I have never had the echo happen so I don't know how to fix it. The task manager is easy to enable, but on a restart it just gets disabled again. Another problem that cropped up that is more games related, but I will mention because it happened around the same time: In World of Warcraft, any creature near a body of water shoots off rays of light that they don't ordinarily emit, to the point of being literally blinding.

Around the same time I was getting a BSD every restart, and had to use Last Known Good to even get the computer to start. I tried so many things to stop that one that I am not even sure what did, or if it was even me that stopped it, seeing as how problems persist.

My most recent actions to attempt to fix the problem were to run Ad-Aware SE Personal, Spy Bot Search and Destroy, a manual scan with Norton (I can still do those), run Windows Update (I am on XP SP1 by the way), and to run HijackThis to get a log that I d... Read more

A:Permissions changed, programs disabled

Hi and welcome to TSG,

Download Cleanup from Here

A window will open and choose SAVE, then DESKTOP as the destination.
On your Desktop, click on Cleanup40.exe icon.
Then, click RUN and place a checkmark beside "I Agree"
Then click NEXT followed by START and OK.
A window will appear with many choices, keep all the defaults as set when the Slide Bar to the left is set to Standard Quality.
Click OK
DO NOT RUN IT YET
Download the trial version of Ewido Security Suite here.
Install ewido.
During the installation, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
Launch ewido
It will prompt you to update click the OK button and it will go to the main screen
On the left side of the main screen click update
Click on Start and let it update.
DO NOT run a scan yet. You will do that later in safe mode.

Click here for info on how to boot to safe mode if you don't already know how.
Now copy these instructions to notepad and save them to your desktop. You will need them to refer to in safe mode.
Restart your computer into safe mode now. Perform the following steps in safe mode:
Run Ewido:
Click on scanner
Click Complete System Scan and the scan will begin.
During the scan it will prompt you to clean files, click OK
When the scan is finished, look at the bottom of the screen and click the Save report button.
Save the report to your desktop

Run Cleanup:
Click on the "Cle... Read more

1 more replies
Answer Match 51.66%

hi

in our domain we change the desktop background every month. but on some machines its not updated. their desktop shows same old wallpaper. why ?

the wallpaper is changed through group policy.


all the machines are updated.
the machines are a mix of win 7 and 8 and 32 bit and 64 bit.

i have tried gpupdate /force but it also doesnt works.

A:Desktop Background not changed on Domain users

Does it change if the computer is restarted?
Or maybe log off/on...

Do the users that have a problem with this have the UAC setting off?

9 more replies
Answer Match 51.66%

Hello, Im not sure what happened but just about an hour ago i was on the net and all of a sudden the page closed, and my backround on the desktop changed to Warning Spyware detected on your computer, and i cant get my desktop back. here is my hijackthis log, someone pls help..

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:39:55 PM, on 8/18/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ClamWin\bin\ClamTray.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Softw... Read more

A:Desktop Background Changed/Spyware Warning

Hello, PJ1 your HJT log would get read quicker if you placed in the HJT Log Forum, copy and paste.

4 more replies
Answer Match 51.66%

-The background for my desktop has changed to a flashing red and yellow WARNING sign that says:
"Warning
Dangerous Spyware
Many viruses were found on your computer such as Trojan horse, Passcapture, etc.
Your personal information can fall into in the 'third hands'.
Please check up the computer with a special software.
Thank"

-When I try to open the task manager, a message comes up saying that the administrator has disabled the task manager.

-There is a balloon on my system tray that keeps popping up that says:
"Warning! Security report
Your computer is infected! It is recommended to start spyware cleaner tool"

-Another thing is that a windows explorer window opens up randomly on My Documents sometimes.

-Also, whenever I double click something or try to open anything, multiple firefox windows open and attempt to direct me to this website:
hxxp://onlinenotifyq.net/land/eurl/?code=49
However, it instead displays a page that says: "Reported Attack Site!"

-My system has also slowed considerably

-A few days ago I noticed some suspicious behavior(unrelated to the symptoms I'm currently experiencing) such as random pop-ups so I ran a Malwarebytes scan and it returned multiple infections caused by "Vundo". Maybe it's still lingering?

Please help!



DDS (Ver_09-03-16.01) - NTFSx86
Run by Owner at 15:59:13.85 on Tue 03/24/2009
Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_07
Microsoft Windows XP... Read more

A:Background changed, bogus security alerts

Hello & Welcome to TSF
Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

In the meantime please note the following:Any recommendations made are for your computer problems only and should NOT be used on any other computer.
Please DO NOT run any scans/tools or other fixes unless I ask you to. This is very important for several reasons. Here are just two of them:
1. The tools that we use are very powerful and can cause >>irreparable damage<< to your computer if not used correctly.
2. Commercial scanners, for the most part can not completely remove some of the more "resistant" infections. This makes it much more difficult to get rid of completely.
If you get stuck or are unsure of something please ask for a further explanation, do not guess.
It will require more than one round to properly clean your system. Continue to respond to this thread until I give you the All Clean! even if symptoms seemingly abate.
Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.
If for any reason you cannot complete instructions within that time, that's fine, just put a post here so that I know you're still here. We get a lot of people who simply leave & if there is no contact for that amount of time I w... Read more

17 more replies
Answer Match 51.66%

Hello-

Just a weird thing happened yesterday. My Windows 7 background was always set to default when logging in (assume most have that background for W7) and last night it changed to a background here located here in my PC:

C:\Windows\System32\oobe\info\backgrounds

That I didn't create. I did have a nasty virus Monday (can't even believe I got nailed with one) anyway I got it cleaned and ran my scans and installed ccleaner and did that sweep of everything. Do you think ccleaner might have changed something? I mean the background is fine (below) and probably came with my HP Pavilion but just curious why it changed?

thx

PS my sounds defaulted back to default too - meaning I didn't have that start navigation enabled I turned it off (clicks every time your in a window and select something) and I had a login .wav file I used and that defaulted also. All seems well just stumped on those.

A:Any ideas how my login background screen changed on it's own?

would not worry about it to much unless something else happens. It might just be something you downloaded. So just remember what you downloaded in the past few days. That might be it.

7 more replies
Answer Match 51.66%

In Windows explorer, you can change the borders, the scroll bar, the text etc. etc. but all around those the color is white. I was thinking that perhaps in doing it a light grey (or blue, beige) etc. would be better.
Why?
Less contrast would be easier on the eyes
Less white would be easier on the monitor
Less white equals less light therefore perhaps even may lengthen the life of the monitor.
Just a thought. So is it possible to do so?
I went to Control Panel -> Window Color -> Advanced Appearance Settings -> and clicked within the active window there to change color but it didn't seem to do anything.

A:Can the white color background be changed in Explorer?

Yes it can be done and this question has been asked before. Read the entire thread here:

How to change background color of Folders in Windows 7

Note: A reboot may be required before the settings stick!

1 more replies
Answer Match 51.66%

I know this question has been asked a few times but I think my problem stems from somewhere else so I'm starting a new thread.

To give SOME background, I purchased this new LG gram(?) computer from Korea without anything installed on it. Not even windows.
I installed a legit windows 7 professional x64 myself. This was my first time... but it seems I installed all the necessary drivers and whatnot. My computer has been working perfectly fine.

And then I wanted to change the background for my log in screen. I believe windows 7 doesn't have that option.
So I tweaked some stuff following these instructions.
How to Set a Custom Logon Screen Background on Windows 7, 8, or 10

That site wasn't the one I saw but the instructions are exactly the same.

And all was good for a few days.
But then, all of a sudden, my computer started freezing whenever my computer goes to sleep and I wake it up. And I immediately thought it's the background so I deleted the folder that I made.
I went back to the website to look at the instructions. There was a warning saying things might get messed up if I change the theme. And that was exactly what I did the day it started freezing.
So I went back, created the folder again, changed all the setting to how it was. And the background was my custom picture.

But it's still freezing....

I haven't touched the windows theme since.

Also, it doesn't seem to freeze all the time. Maybe like 3/5 times it goes to sleep.
It does't seem to matt... Read more

A:Freezes on log in screen after waking up (Changed Background)

Hello ladynarmo, and welcome to Seven Forums.

If you like, you could do a system restore using a restore point dated before you did this to undo and hopefully sort this for you.

System Restore

3 more replies
Answer Match 51.66%

Hey,This really stumped me. Windows firewall came up asking to allow or deny "a.exe". Denied it, then my background changed to "You are infected with spyware" and I always get a message asking me to install some remover. It was totally out of the blue! Not even browsing at the time!ram Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXELogfile of Trend Micro HijackThis v2.0.2Scan saved at 12:09:41 AM, on 19/08/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16705)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\RTHDCPL.EXEC:\Program Files\iTunes\iTunesHelper.exeC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\Program Files\CyberLink\PowerDVD\PDVDServ.exeC:\Program Files\Common Files\Real\Update_OB\realsched.exeC:\Program Files\... Read more

A:Constant Virus Alerts + Background Changed

Ok, so this virus seems to be on a lot of peoples computers considering the amount of posts its getting on here.I've been teaching myself how to analyse hijack this logs and this is my most recent log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 4:43:24 PM, on 21/08/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16705)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\iTunes\iTunesHelper.exeC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXEC:\Program Files\SAGEM\SAGEM [email protected] 800-840\dslmon.exeC:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exeC:\Program Files\Common Files\LightScribe\LSSrvc.exeC:\Program Files\Alwil S... Read more

9 more replies
Answer Match 51.66%

i cant change my desktop background picture position from stretch to any other mode if i go to personalization and then to desktop background as i change picture position to tile and as i press ok it return back to stretch mode again... hope this problem can be sorted out

A:desktop background cant changed from stretch mode

Various HP computers' are affected by this.

Your HP support page is: Software & Driver Downloads HP Pavilion dv4-1506tx Entertainment Notebook PC - HP Customer Care (United States - English)

Choose the 32 bit or 64 bit version of Windows 7, depending on which you have. Then click open the Software solutions bit and download the "Wallpaper Picture Position Enabler"








  
Quote: Originally Posted by ace9062


i cant change my desktop background picture position from stretch to any other mode if i go to personalization and then to desktop background as i change picture position to tile and as i press ok it return back to stretch mode again... hope this problem can be sorted out

9 more replies
Answer Match 51.66%

Got a call from my mom. She states that the background color changed when browsing the internet.

Like changing the desktop color, is there a way to change colors of website backgrounds? I did not think so..

More replies
Answer Match 51.66%

I was just online and a red circle with a white X appeared on my task bar, and my desktop background has been changed to a message saying

"YOUR SYSTEM IS INFECTED. System has been stopped due to a serious malfunction. Spyware activity has been detected. It is recommended to use spyware removal tool to prevent data loss. Do not use computer before all spyware removed."

in the display, where you change the desktop, it won't let me and has a file called "critical_warning" at the bottom.

I'm also getting a pop up warning every so often now.

I have no idea what to do and I would greatly appreciate anyone's help.

A:Virus changed my background/keeps giving me warnings.

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

1 more replies
Answer Match 51.66%

When ever I change my background after I restart my computer it turns into a blue solid color. I want my backgrounds to stay because now every time I restart my computer I have to change it. Under the personalization panel it shows I still have a picture seleteced but it just wont show anything into I click a new picture.

A:My desktop background wont stay changed.

Are you saving the changes..?

9 more replies
Answer Match 51.66%

I'm trying to fix a computer that has spyware and trojans on it. So far I've run combofix and smitfraud in safemode along with spysweeper which found a lot of different threats.

Unfortuntely the problem is still occurring. The desktop background changed to a spyware warning and a balloon continues to pop up in the taskbar by the clock stating the the computer is infected. I also received occasional IE pop ups that bring me to antispywareupdates.net.

Also, I noticed that the taskbar balloon pops up in safemode as well. I've attached a screenshot of the desktop.

Logfile of HijackThis v1.99.1
Scan saved at 5:09:36 PM, on 2/24/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbload.exe
C:\WIN... Read more

A:Solved: Desktop background changed, pop ups, alerts and more

nevermind, I was able to fix everything. It was the Qoologic infection that was causing all of the problems.
 

1 more replies
Answer Match 51.66%

And I've messed around so much trying to fix it myself (before asking for help) 'cuz I'm sure it's simple, that now I'm not sure I can remember what I did just before the problem showed up or what I've done to 'try' to correct it. My 1st shot, even tho' blurred, will show that the 'text color' below each icon was white & easy for me to read. The 2nd, after it changed, shows the color more blackish, harder to read. I also think there's a bit of difference in background color? I also messed that up again just before I came to post but didn't think to get a shot.

A:My desktop icons & background color changed

you ain't gonna believe this!!!! I closed the forum after I posted above, didn't bother to look at my desktop, clicked on my search site to look for something else which also involved clicking on dt & when I did so, would you believe that the text was back to white!! The background color is still not what I want but am half afraid to try correcting that now. I know there are some issues with my PC (mainly the idiot sitting here typing) but there's no way I can do a 'reinstall' which seems to be the posted answer so many times when I read other posts.

9 more replies
Answer Match 51.66%

Hi guys, I'm going to be honest with you...I was watchin a pornography video and it told me to download something to watch the video...it all happened so fast, I went along and did it despite my regular precautions....now it's saved on my computer and it changed my background, deleted my links to stuff like my documents, etc... and now says it is gathering my email, personal info, etc.... in the bottom right hand corner of the screen, next to the time it says "virus alert!"and it constantly comes up with a fake anti virus called "Antivirus 2008 pro" telling me I need to download that in order to fix it.please help meI sent a document containing a print screen version of what my computer looks like now.I am freaking out because i have exams tomorrow and I didn't want this to end this way...I haven't been able to study because I have been trying to fix thisI need help please!thank you so much to anyone who gives me adviceEdit: Moved topic from XP to the more appropriate forum. ~ Animal

A:New Virus, Changed Background, Deleted Stuff, Need Help!

Hello and welcome please run these tools. Post back the scan results and the PC condition afterward,thanks.First follow these instructions;Run SmitFraudFix by S!Ri.Post the scan report in your next reply.The report can be found at the root of the system drive, usually at C:\rapport.txt .You may want to print those instructions. Let all steps complete. Step 1 is done in Normal mode Step 2 (cleaning) from Safe mode.How to enter safe mode(XP)Using the F8 MethodRestart your computer. When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu. Select the option for Safe Mode using the arrow keys. Then press enter on your keyboard to boot into Safe Mode. NEXT please run this scan:Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on Download_mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a sca... Read more

1 more replies
Answer Match 51.66%

Windows XP...My desktop background has changed to a default.htm file that reads "Warning: Spyware threat has been detected on your PC" etc. I also get bogus popups periodically in the lower left corner. One example (there are several variations): "Your computer not protected against spyware.Spyware able to steal your data including passwords, credit card numbers, etc. Scan your computer for spyware immediately!Full system scan is highly recommended."Internet explorer occasionally opens to spyware software site and other random places.I have run Adaware, Spybot and AVG.I also ran combofix and hijack this. Logs follow:combo fix log (I replaced real the user name with "username":ComboFix 08-10-18.03 - username 2008-10-19 12:31:36.1 - NTFSx86Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.720 [GMT -5:00]Running from: C:\downloads\ComboFix.exe.((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))).C:\Program Files\GetModuleC:\Program Files\GetModule\GetModule24.exeC:\WINDOWS\default.htmC:\WINDOWS\system32\msansspc.dll.((((((((((((((((((((((((( Files Created from 2008-09-19 to 2008-10-19 ))))))))))))))))))))))))))))))).2008-10-19 12:35 . 2008-10-19 12:36 1,961 --a------ C:\WINDOWS\default.htm2008-10-19 11:24 . 2008-10-19 11:31 <DIR> d-------- C:\Program Files\Spybot - Search & Destroy2008-1... Read more

A:malware: desktop background changed plus popups

ComboFix logs should not to be posted outside the HijackThis forums. It is an extremely powerful tool which should only be used when instructed to do so by someone who has been properly trained. ComboFix is intended by its creator to be "used under the guidance and supervision of an expert", NOT for private use. Please read Combofix's Disclaimer. Using this tool incorrectly could lead to disastrous problems with your operating system such as preventing it from ever starting again.Please create a new topic explaining the nature of your problem. Describe pop-ups and system tray or desktop icons that have appeared. Explain what is "going wrong" with your computer. Note any tools you have used and their respective results.If needed, we will direct you to our HJT Preparation Guide.Thank you for using BleepingComputer as your malware removal source.This topic is now closed.

1 more replies
Answer Match 51.66%

Windows XP Pro theme changed to Core I believe. I know where to change theme and colors but with everything black I can barely tell where the window is open. I don't need to watch as I type so is there a command to change theme or colors to default or classic from run?

More replies
Answer Match 51.24%

A little while ago my laptop (specs in profile) was infected with a redirect link virus that caused a bluescreen (memory dump) error, and for some reason now my button and scroll bar style is more...XP I guess? I'm not sure if I still have the virus (or if my browser setting changed) or if a setting on my computer was changed, but it's really not aesthetically appealing at all (of course, having taken 3 graphic arts classes this is something I simply can't ignore). If anyone can help me I would be very grateful

*Note: There's also something wrong with my startup repair, it just asks me for a new user but won't let me sign in at all...

Thanks in advance, SawronZXZ~
 

A:Solved: [Help] Button/Scroll Bar Styles Changed

So it's miraculously fixed now. Huh. Well that just leaves the link hijacker.
 

1 more replies
Answer Match 51.24%

Hi,
Somehow the history button has been disabled on my vista home premium,its greyed out how to I get it back please??
Thankyou

A:Have disabled history button Help please

Hello, and welcome to the Vista Forums!

Thanks for creating a new topic. However, to keep it everywhere, I shall duplicate!

Here is what you need to do. Download the file attached to this post. When asked, select "Save as". Wait for it to download. Once it has "after only a few seconds" you must open it.

Inside there are two files. Copy them BOTH to your Desktop. Once you see both files on your Desktop, you can close the window, and just look at your Desktop.

Look at the two files. One is called "Enable", the other "Enable_Delete_Browsing_History". Double click on "Enable! It should have a little picture of two cogs next to it.

All done! All should be as was before. Please don't hesitate to ask if you need screenshots, or help!

Richard

5 more replies
Answer Match 51.24%

Hi.

Im presently working on my brother's laptop with xp home edition.
We'd like to go to tcp/ip tab to change its properties but it's likely we are restricted as there is a pop-up preventing us to continue and this is a home pc.How can this be like this?I was trying to open gpedit.msc but then it said no internal command as such.Please help.

A:Tcp/ip Properties Button Disabled

The reason for the error concerning gpedit.msc is because XP Home Edition does not support group policy editing (XP Pro does). As far as the other issue it would help if you would tell us exactly what the pop-up says...It will give more of an idea of what the problem actually is....I can only guess that you are having some kind of connection issue...Is that why you want to change properties in that tab?

4 more replies
Answer Match 51.24%

hi,
anyone know what could cause the standby button to be disabled?
it work at the start, then recently it got DISABLED(greyed). and in display properties -> screensaver -> POWER -> advance
it does not has the selection "stand by" in the Power Button list.

could it be a virus?spyware? or simply some drivers problem?

a solutions or suggestion would be greatly appreciated.
 

A:STANDBY button in XP got disabled.!!help

I hope this site has the answer.
 

3 more replies
Answer Match 51.24%

So I upgraded to windows 10 a few months ago and everything was running smoothly. Then literally over night the wi-fi button has become permanently disabled. If i try to click on it, nothing happens. If I try to flick the Wi-Fi switch in the settings, it goes straight to off and never turns on.

I have tried updating my network adapter drivers, troubleshooting the connect (just says "wi-fi is disabled, please enable it" without giving a fix to the solution, and reinstalling windows 10. Nothing has seemed to work, and I am still stuck without Wi-Fi.
Does anyone have any ideas on what I could try or how I could fix it?

Will answer all of your questions,

Cheers.

More replies
Answer Match 50.82%

I downloaded this to my computer and now I cannot re-find this file. I do not have an option of setting wallpaper on my screen. I already read an older post as to how to fix this and have downloaded Add_Screen_Saver_Option.reg and now I cannot find it on my 'puter. Also, from the stat button, then search (then I click on files and fo0lders, which isnt mentioned in the older post) when I typed in "Regedit" in a search block my 'puter came up with no results so the rest of the instructions did nothing for me. Can someone walk me thru the process of getting this option back in my control panel?!?

Just so you know, right now, I can pick a picture anywhere on my puter and right click on it and set for background. That part works fine but each time I shut down and restart the background picture is gone. This is getting "old". Thanks for any replies.

A:Missing Desktop Background button

Hello Gabowman, and welcome to Vista Forums.

One of these tutorial should be able to help you restore the "Desktop Background" option in the Personalization window.

Display Settings - Enable or Disable Changing

or

Desktop Background Wallpaper - Prevent Change

Hope this helps,
Shawn

1 more replies
Answer Match 50.82%

Hi,
I share a computer with my mom, and a couple of days ago she got a couple of trojans. It was no problem, I got rid of them with Malwarebytes Anti-Malware. Everything was fine...then today I turned the computer on and the desktop background was changed.

It's a big black box and says:

Quote:




YOUR SYSTEM IS INFECTED!

System has been stopped due to a serious malfunction.
Spyware activity has been detected.

It is recommended to use spyware removal tool to prevent loss.
Do not run any application before all spyware removed.




Something pops up and automatically starts scanning, I'm able to stop it. Everytime I restart, it happens again though.

Problem is I can't open Malwarebytes Anti-Malware. When I try, it says:
"Windows cannot access the specified device, path, or file. You may not have the approptiate permissions to access the item."
I tried in safe mode...says the same thing.


Please help.

A:Virus changed desktop background, Can't open Malwarebytes

Forgot to add something, the virus that pops up and starts scanning is Internet Security 2010.

4 more replies
Answer Match 50.82%

I have Windows 7 Home Premium 32 Bit, left work Friday came in Monday morning turned on PC my normal desktop background was different, the toolbar was missing. Internet Explorer was missing all my favorites. Can I get them back?

A:Desktop Background changed,missing toolbar, IE favorites gone

Sounds like maybe your user profile was corrupted and you are using a temp profile. Did you see any error messages when you first logged in?

3 more replies
Answer Match 50.82%

I normally set my background color to black but lately it has been changing to blue on its own. I have searched online and can't find any HELPFUL OR USEFUL answers. Anyone figure this one out yet?

A:My desktop background color wont stay changed.

I figured out that the updated TeamViewer 7 is now changing the background to blue and it stays that way even if teamviewer is disconnected.

9 more replies
Answer Match 50.82%

Whenever I try to change my desktop background image to "Desktop Harmony", the default Windows 7 background, no error message comes up but it stays the solid color. But when I change solid color to solid color, the result is different. The background changes.

BTW, I recently reinstalled Windows, I think I fixed my driver problem because I restored Windows.old, but I can't seem to get rid of all the errors such as this one.

edit: I tried to delete TranscodedWallpaper.jpg from
%USERPROFILE%\AppData\Roaming\Microsoft\Windows\Themes\

but, Windows keeps making the jpg file AGAIN and AGAIN..... so I need a solution

A:Desktop background images cannot be changed from solid colors

Welcome to Seven Forums YPMagic. You might try running the System File Checker and see if it finds any problems

SFC /SCANNOW Command - System File Checker

Your specs say you have Ultimate, confirm the Group Policy Editor settings are not preventing the change by policy.

Desktop Background Wallpaper - Prevent Change

You are the administrator of the PC?

A Guy

1 more replies
Answer Match 50.82%

HI THERE,
IM NEW TO TECHGUYS AND WOULD LIKE SOME REALLY APPRECIATED HELP PLEASE.

IVE HAD THIS PROBLEM FOR THE LAST COUPLE OF DAYS. BASICALLY I GET THESE POPUPS SAYING YOUR COMPUTER IS AT RISK OF BEING TAKEN OVER ETC DOWNLOAD THIS AND THAT............TO GET RID OF IT AND TRIES TO REDIRECT INTERNET EXPLORER OVER THERE. PLUS ON TOP OF THAT RECENTLY MY BACKGROUND HAS BEEN CHANGED TO A RED DEVIL SORT OF THING WARNING ABOUT PRIVACY AND DOWNLOAD THIS AND THAT. ALSO IN THE TASK TRAY AT BOTTOM OF SCREEN I GET A FLASHING RED CROSS ICON.

I'M NOT SURE BUT THIS MIGHT BE DUE TO ADWARE.WIN32 OR WORM.WIN32.NETSKY OR SOME TROJAN. I HAD NORTON ANTIVIRUS AND KAPERSKY INTERNET SECURITY WHICH ARE CLEARLY NOT AFFECTIVE.

IM COPYING MY INITIAL HIJACK THIS LOG BELOW SO PLEASE IF SOME ONE COULD GET BACK TO ME SOON WOULD REALLY APPRECIATE THIS THANKS!!!!!!!!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:16:59, on 31/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\Apple... Read more

A:!!HELP NEEDED!!! Background Has Been Changed And Am Getting Weird Popup Messages

OH AND DID I FORGET TO MENTION I CANT ACCESS OR OPEN MY C DRIVE :
 

2 more replies
Answer Match 50.82%

Hello,
 
Today, as I was browsing around the internet, I found firefox starting to behave strangely. Each time I went to open a new tab, firefox opened a new window instead. My mouse scroll wheel also started to control the 'forward' and 'back' buttons in the browser(so, if I scrolled down, I would return to a previous page). The scrolling function on webpages also seemed to be disabled(the scroll bar on the side did nothing). I did not think much of this, thinking perhaps my settings in the browser had changed(perhaps after an update of some sort), however upon checking the settings, none had been modified.
 
I closed down firefox at this point, and decided to restart it, at which point I was given the option of resetting firefox, or starting it in safe mode. I chose first to start in safe mode, however the behavior I've described persisted anyway. Safe mode seemed to function fine otherwise(it reset my homepage to the default firefox page and so on) but the abnormal behavior with browser functions continued.
 
I then closed it down, again, after taking another look at the browser settings(they had not changed from before). I then tried 'resetting' as the prompt came up when I restarted firefox, and firefox went through the reset process, backing up the old data from the browser, importing some bookmarks and so on, and then resetting everything else. The reset completed, however firefox did not start after the reset process. Again, I was prompted to either 're... Read more

A:Odd browser behavior, mouse button functions changed

After those are done please do these. Please download MiniToolBox, save it to your desktop and run it.Checkmark the following checkboxes:Flush DNSReport IE Proxy SettingsReset IE Proxy SettingsReport FF Proxy SettingsReset FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Users, Partitions and Memory size.Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.Note: When using "Reset FF Proxy Settings" option Firefox should be closed. Download TDSSKiller and save it to your desktop.Extract (unzip) its contents to your desktop.Open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.If an infected file is detected, the default action will be Cure, click on Continue.If a suspicious file is detected, the default action will be Skip, click on Continue.It may ask you to reboot the computer to complete the process. Click on Reboot Now.If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.If a reboot is required, the report can also be found in your root directory (usually C:\ folder) in the form of TDSSKiller_xxxx_log.txt. Please copy and paste the contents of that file here....ADW CleanerPlease download AdwCleaner by Xplode and save to your Desktop.Double-click on AdwCleaner.exe to run the tool.Vista/Windows 7/8 us... Read more

3 more replies
Answer Match 50.82%

There is something preventing my desktop background pictures from appearing. I can select the solid background colors, but upon selecting images, they do not appear. In stretched mode, there is a missing image icon in the top left corner of the screen. I can see the desktop at startup and shutdown when whatever is covering my desktop is inactive.

This is the third time I have seen this happen as a result of a certain spyware (prunnet, wlloginproxy.exe). It is a rootkit. Well I removed everything except I still cant see my desktop background.

I have tried using vb scripts to clean my desktop. I used a couple popular ones but they only removed the problem for a second, and then it was reinitialized. I have deleted or deactivated all the nodesktop entries in the registry and tried deleting and removing all of the activedesktop entries. I actually got the problem deactivated (but not fixed) by turning off activedesktop via the registry. I was not totally satisfied though, and I reran all the vbs desktop cleaners and the problem returned.

Can ANYONE help me? I have read probably 50 forum entries across the net for 3 days and there are so many similar problems that it has been impossible to find the solution to this more recent method of deactivating the desktop.

A:desktop background images disabled

Right click on the desktop and select Properties > Desktop tab > Customize Desktop button > Web tab. If there is an entry there delete it and then click OK. Now you should be able to change the desktop background.

3 more replies
Answer Match 50.4%

in simple terms how do i fix two problems.my first is my standby/hibernate button has been grey for ages and wont work and also i get the error loading nvqtwk message when i turn my computer on.how do i fix the first and get rid of the second problem.many thanks from a not very technically minded grandmother.

A:standby/hibernate button is disabled and

Hello atwickwitch, Welcome to TSF!

nvqtwk is associated with the nVidia graphics/video card.
If you have recently uninstalled this, it can be disabled via the startup programs.

Go Start > Run > type in the box msconfig > Startup > scroll down the page until you see the nvqtwk entry and tick the box to disable it > ok; reboot the computer.

Upon reboot, a box will appear saying that you have altered the startup programs, just tick the box not to show the panel again.
As for the Hibernation issue, please try this...

Go Start > Control Panel > Switch to Classic View > Power Options > Hibernate > tick the box enable Hibernation > Apply > OK.
Reboot the computer....upon reboot, should now be set.

Post back with the results.

Kind Regards,

5 more replies
Answer Match 50.4%

Hi,
My computer is intel d865gbf with 2.4 ghz processor and operating system is winodws xp professional with service pack 2.The problem I am facing is when i run direct x diagonostic tool, in display tab "AGP texture acceleration" button is disabled.Even I tried on windows 2000 same problem occured.Eventhough i Installed directx 9.0c the problem didn't solve.I have also updated the vga driver of it upto date but problem not solved.So can anyone please give me proper solution to enable AGP texture acceleration

A:AGP texture acceleration button disabled.

HI shiva,
Have u checked whether ur AGP display drivers are properly installed after the installation of WindowsXP, if not then plz reinstall the AGP display drivers and restart ur system. then run dxdiag and check with AGP texture acceleration.

2 more replies
Answer Match 50.4%

All of a sudden, my firewall indicated that several programs were trying to access the internet. I blocked them, but it didn't seem to stop whatever it is that has infected my system. I can no longer access my task manager, when I delete the registry entry blocking access, it immediately returns. My desktop wallpaper has changed to a blue screen with a warning about my computer being infected with spyware. I also get pop-ups directing me to a site selling anti-spyware software. My computer has slowed down considerably. The name of the software that these pop-ups are trying to convince me to get is "PC Protection Center 2008", and was obviously created by the same folks that infected my system to begin with. How convenient! Posted below is the hijack this log. Any assistance is appreciated.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:20:51 PM, on 9/6/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AT&T\AT&T Internet Security Suite\Fws.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe
C:\P... Read more

A:Task mgr disabled; desktop changed to blue screen

Hello and welcome to TSF.

Apologies for the long delay in response. We have a large number of HijackThis logs to handle and it?s taking us longer to catch up. If you haven?t received help elsewhere already and still require assistance please perform the following:Download RSIT by random/random and save it to your desktop.
Double click RSIT.exe to start the tool and click Continue at the disclaimer.
When the scan completes it will open a log named log.txt maximized, and a log named info.txt minimized.
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of log.txt here.
Please attach info.txt to your post.
To attach a file to a new post, simplyClick the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
copy and paste the following into the "Upload File from your Computer" box:C:\rsit\info.txt

Click Upload.

14 more replies
Answer Match 50.4%

I put this shortcut to the attached file onto my desktop so I could change the Wallpaper photo without bothering to do the old Right click, Next Background loop. Donno where I got this from, here maybe? Meantime, I will take credit for it!

More replies
Answer Match 50.4%

on internet i got a warning to ask me to unblock, block some file and i chose to block of course. then my computer said my firewall was off (like it turned it off), then i can connect to the internet and i get something wanting me to install some anti spyware crap so i control+alt+delete and ended that process. now i can't get on the internet and my background was changed to a white screen with a window that says the following

Windows Warning Message!

Warning!
Spyware detected on your computer!

Install an antiviirus remover to clean your computer

Warning! Win32/Adware.Vitumonde
Detected on your computer

Warning ! Win32/PrivacyRemover.M64
Detected on your computer.

I have disconnected that computer from the internet while i hopefully correct this issue.

I am running AVG virus scan right now. Also running Supera AntiSpyware that i got the last time i had my PC checked via this site.

I am unable to connect to the internet on that pc at them moment so need to know how to get hijack this on that pc.

Please advise!!!!!

BTW, my wife needs this computer for her school classes she started Yesterday!!!
 

A:Solved: Virus Changed background, killed internet connection

16 more replies
Answer Match 50.4%

I posted here a few days ago about a "Warning Spyware detected on your computer" Has been put on my desktop and i cant get it off. Now my programs wont work, as soon as i try to open IE, or anything my computer freezes up and my monitor goes to black like my pc was in hibernate. In my last post someone replied telling me to do a Active scan with Panda something and to post the log, so here is my hijackthis log, and under it is my Active Log, I really need some help cuz right now all i can do is bring up firefox on my PC, i cant really do much else.

hijack thiis log
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:39:55 PM, on 8/18/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ClamWin\bin\ClamTray.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system... Read more

A:Desktop Background Changed/Spyware Warning/programs not working

Firstly, you have already recieved good advice about where you should post your log. Read it again very carefully.

Secondly, it is against forum rules to mutli-post about the same problem in this fashion.

Thirdly, we are all volunteers and you need to have a bit more patience. You are in the right place to be helped by some of the best experts on the web.

2 more replies
Answer Match 50.4%

Hello all, thank you for taking the time reading this and trying to help I very much appreciate it.Okay so my background has changed to a blue background with the writing. "Warning spyware has been detected on your pc, your computer has several fatal errors due to spyware activity. It is strongly reccomended to install an anti-spyware software to close all security vulnerabilities. Anti spyware helps project your pc against spyware and other security threats. Click here to scan your pc(hyperlink)I also get a random red "Windows security center system warning" that says Alert details file: c:\windows\kvnab.exe threat: adbreakand another windows security center warning that looks more genuine and says my threat is TrojanDownloader.xs risk level 5 red boxes.Also ontop of this bunk i get random popup bubbles that take me to about:security in my windows explorer brower that want me to purchase anti spyware.I've scanned the computer with the latest version of SD and it went from 140 entries to like 40. But it doesnt seem to want to get rid of everything. I also had command service spyware which i opened cmd and typed sc delete cmdservice which seems to have gotten rid of it. Spybot couldnt.Something was trying to change my registry but i set spybot to deny it"browser helper object" about 8 of them.and on top of everything i can't open task manager because it's been "disabled" by an admin. So the spyware took that out too. I've never rea... Read more

A:Background Has Changed, And Getting Spyware Popups Wanting Me To Purchase Software.

Hello Technique,Welcome to Bleeping Computer Definitely more going on that just Zlob. This tool is not a toy. If used the wrong way you could trash your computer. Please use only under direction of a Helper. If you decide to do so anyway, please do not blame me or ComboFix.1. Download this file - combofix.exe http://download.bleepingcomputer.com/sUBs/ComboFix.exe http://www.forospyware.com/sUBs/ComboFix.exe http://subs.geekstogo.com/ComboFix.exe2. Double click combofix.exe & follow the prompts.3. When finished, it will produce a log for you. Post that log in your next reply please, along with a new HijackThis log.Note:Do not mouseclick combofix's window while it's running. That may cause it to stall.Thanks,tea

4 more replies
Answer Match 49.98%

My computer got spyware from some website that my cousin visited. After nod32 detected the spyware, nod32 removed it. But the spyware changed my desktop background to a html page I think, and disabled background changing.

Here's what my desktop looks like:



I checked the policies and set it to allow background changing, but it's still disabled. In safemode, the background is normal, but the backgroud properties window still won't let me select a background.

How can I fix this?

A:Virus disabled changing desktop background

G'Day OuTLawz, Welcome to TSF!


I recommend that you read this article… "Having problems with spyware and pop-ups? - First Steps"; follow the instructions very carefully; then, post all the requested logs and information; as instructed, in the HiJackThis Log Help Forum.
(Simply, click on the coloured links to be re-directed.)

Please ensure that you create a new thread in the HiJackThis Log Help Forum; not back here in this one.

When carrying out The 5 Steps, if you cannot complete any of them for whatever reason, just continue on with the next one until they are all completed.
However,it is extremely important to make mention of the fact that you could not complete any of the steps in your post to The HJT Help Forum; where an Analyst will assist you with other workarounds.

Once done, please be patient, as the Security Team Analysts are usually very busy; one of them will answer your request as soon as they can.

Good Luck with it.

Kind Regards,

1 more replies
Answer Match 49.98%

Howdy! Woke up yesterday to find my computer with some malware on it....my desktop is now blue and says "Warning! Spyware detected on your computer!", I can't access my Task Manger (error appears saying "task manager disabled by administrator", even though I'm the only user on this computer) and I have pop-ups left and right.I would appreciate any help! Here is my log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 20:05:38, on 6/22/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16674)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Lavasoft\Ad-Aware\aawservice.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exeC:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exec:\program files\mcafee.com\agent\mcdetect.exec:\PROGRA~1\mcafee.com\vso\mcshield.exec:\PROGRA~1\mcafee.com\agent\mct... Read more

A:"warning!" Background + Task Manager Disabled

Hello chrisj198 and welcome to BC. Let's see what we can find. Please follow the steps below in order:Before running a new scan let's clean out the temporary folders. Download ATF Cleaner to your Desktop.Double-click ATF-Cleaner.exe to run the program.Click Select All found at the bottom of the list.Click the Empty Selected button.If you use Firefox browser, do this also:Click Firefox at the top and choose Select All from the list.Click the Empty Selected button.NOTE : If you would like to keep your saved passwords, please click No at the prompt.If you use Opera browser, do this also:Click Opera at the top and choose Select All from the list.NOTE : If you would like to keep your saved passwords, please click No at the prompt.Close ALL Internet browsers (very important).Click the Empty Selected button.Click Exit on the Main menu to close the program.Now download OTScanIt from here or here to your Desktop and double-click on it to extract the files. It will create a folder named OTScanIt on your desktop.Note: You must be logged on to the system with an account that has Administrator privileges to run this program.Close ALL OTHER PROGRAMS.Open the OTScanIt folder and double-click on OTScanIt.exe to start the program (if you are running on Vista then right-click the program and choose Run as Administrator).
In the Drivers section click on Non-Microsoft.Under Additional Scans click the checkboxes in front of the following items to select them:Reg - BotCheck
File - Additio... Read more

1 more replies
Answer Match 49.98%

Ive encounted "problem" that disables my task manager and puts a screen up over my background saying "Warning!.. etc.etc." which I cant seem to move to access the "X". In control panel, when trying to delete a few programs that appear unnecessary (Home search assistant, search extender, shopping wizard) an error occurs saying "Unable to open "http://looking-for.cc/uninstall/programname.html". I ran HijackThis and was wondering if I could send you my log so that you could point out the malicious lines I need to check and scan/fix.

Logfile of HijackThis v1.99.0
Scan saved at 2:41:53 PM, on 2/7/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\winjs32.exe
C:\Program Files\Viewpoint\Viewpoint M... Read more

A:Task manager disabled/Background jacked. help?

16 more replies
Answer Match 49.98%

Attached please find my HJT log file..please advise as I am in middle of something important. I cannot access task manager and I keep getting popups from my norton antivirus which expired recently but still running.Would really appreciate help.Logfile of HijackThis v1.99.1Scan saved at 12:58:26 AM, on 10/15/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeC:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exeC:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exeC:\Program Files\Norton AntiVirus\navapsvc.exeC:\Program Files\Norton AntiVirus\IWP\NPFMntor.exeC:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exeC:\WINDOWS\system32\svchost.exeC:... Read more

A:Task Manager Disabled And Desktop Background Is Taken Over

Please click here http://www.majorgeeks.com/Sun_Java_Runtime...ment_d4648.html to download the latest version of JAVA Install the application, then go to the Add/Remove Programs options in the Control Panel and Remove ALL previous versions of JAVA.======================If norton has expired remove it via add remove programs======================You should print out these instructions, or copy them to a NotePad file for reading while in Safe Mode, because you will not be able to connect to the Internet to read from this site.Please download SmitfraudFix (by S!Ri)Extract the content (a folder named SmitfraudFix) to your Desktop.Next, please reboot your computer in Safe Mode by doing the following :Restart your computerAfter hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;Instead of Windows loading as normal, a menu with options should appear;Select the first option, to run Windows in Safe Mode, then press "Enter".Choose your usual account.Once in Safe Mode, open the SmitfraudFix folder again and double-click smitfraudfix.cmdSelect option #2 - Clean by typing 2 and press "Enter" to delete infected files.You will be prompted: "Registry cleaning - Do you want to clean the registry?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.The tool will now check if wininet.dll is in... Read more

1 more replies
Answer Match 49.98%

Well some months ago our switch user button just disappeared from the start menu. I tried fixing it myself and looking around on the internet but I could not find an answer nor could I get it to work again. I am afraid to use system recovery or backup because I do not want to uninstall virus protection or anything.

How can I do this please. I sometimes do not want to log my account off and have to log back in and wait for everything to load.

A:Switch User Button Involuntarily Disabled

In the start menu, type services.msc then hit enter.

Look at the Secondary Logon service and make sure it is set to automatic and started too. If not started, do so and reboot.

8 more replies
Answer Match 49.98%

Okay. My son downloaded Desktop Architect (DA), which is a 9x/2K program. I use Windows XP. The program disables the "Effects" button in Desktop->Display Properties->Appearance. Even after the program is uninstalled, the button is still disabled.

Here is what I have tried to fix it so far:

* Uninstall program
* Reboot
* Run registry cleaner
* Reboot

This Failed. So i installed and then uninstalled DA again, still the "Effects" button is disabled.

Yes, I know I can enable/disable most of the features in the "Effects" tab through third party "Tweak XP Ultimate 2K Extreme" type programs, but i'd rather not.

The Author Ken Foster has dissapeared off the face of the earth and left no contact details, and totally abandoned DA. The www.desktoparchitect.com website has been taken over by another company, who sell a similair unrelated product. So you see there is no help for this product.

I do NOT want to re-install XP. And any system restore info was not taken before DA was installed. And I do not have my XP disk.

So, Anyone know how to fix this?
 

More replies
Answer Match 49.98%

Hi,

This is the second time this has happened within about three weeks. My left mouse button and enter key on the keyboard has been disabled. All other functions like the right mouse button and other keys on keyboard seem to be working fine.

So, with the execute button or key disabled, I am unable to open or run any program, like Spyware Doctor or Norton's AV. Am also unable to download, open and run your scan utilities as I cannot execute anything.

Does anyone have any idea how to regain control of the mouse buttons and enter key on the keyboard so I can run some scans?


Thanks!
Art

More replies
Answer Match 49.98%

Hi - I am trying, per your guide, to use gmer to scan my Win XP Home/SP3 system. First, my Symantec AV gives the popup message (Even with AutoProtect Off) SYMANTEC TAMPER PROTECTION ALERTTarget: C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeEvent Info: Open ProcessAction Taken: BlockedActor Process: C:\Documents and Settings\Katherine.HPDV8210\My Documents\Malware Scan\gmer\gmer.exe (PID 2964)Time: Friday, July 03, 2009 10:16:25 AMSecond, inside gmer, the scan button is disabled.But, it lists the followingGMER 1.0.15.14972 - http://www.gmer.netRootkit scan 2009-07-03 10:29:26Windows 5.1.2600 Service Pack 3---- System - GMER 1.0.15 ----SSDT spgh.sys ZwEnumerateKey [0xF72A5CA2]SSDT spgh.sys ZwEnumerateValueKey [0xF72A6030]---- Devices - GMER 1.0.15 ----Device \FileSystem\Ntfs \Ntfs 8A8B51F8AttachedDevice \FileSystem\Ntfs \Ntfs SYMEVENT.SYS (Symantec Event Library/Symantec Corporation)Device \FileSystem\Fastfat \Fat 8A506500AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)AttachedDevice \Driver\Tcpip \Device\Ip SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)AttachedDevice �... Read more

A:GMER issue - scan button disabled

Hello and to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.-----------------------------------------------------------We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, ... Read more

2 more replies
Answer Match 49.98%

Thanks in advance for your help.

On my home PC (an HP Pavilion, XP Media Center edition, Version 2002, SP 2), I clicked where I shouldn't have and have downloaded malware. The symptoms are:

1. a slower PC,
2. the CTRL+ALT+DEL bring up a message that says "Task Manager has been disabled by your administrator" instead of the task manager,
3. a new toolbar with drop down menus in IE with the options to Remove Popups, Scan Spyware, Security Test, and Spam Protection.
4. the toolbar mentioned in item 3 is identified as etlrlws when I right click in the menu area.
5. a popup dialog with "windows internet explorer" in the blue bar area. The text of the message is "NOTICE: If your computer is infected, you could suffer data loss, erractic PC behavior, PC freezes and crashes. Detect and remove viruses before they activate themselves on your PC to prevent these problems. Do you want to install TrustedAntivirus to scan your PC for malware now? (Recommended)" "OK" "Cancel"

For Item 5 , I selected cancel.

Actions taken:
1. went to internet options and deleted temp files, cookies, history, completed forms (should have been none anyway) and passwords (should have been none anyway).
2. searched the net and found way too much information. some of the links on trustedantivrus just seemed to be more ads for them.
3. I updated my Norton antivirus and ran it. The only thing it found was a tracking cookie which it always finds.
4. I unin... Read more

A:Solved: Malware that has changed IE menu and disabled Task Manager

15 more replies
Answer Match 49.98%

About a week ago I realized I had the Vundo Trojan along with Estalive adware and various other adware problems. I was able to remove that trojan using AT&T yahoo spyware scanner, Malwarebytes, and SpywareDoctor. I also had something called TotalVirusProtection, which I learned was something called Rogue Antispyware. Everything seemed fine until now.

Well now my little hell is back. I have another strange spyware tool as an icon at the bottom right corner of my screen, constantly saying that I have a virus. My scans are taking forever, and I managed to use the AT&T one to show that I had "Cobfinn Trojan". That was all that came up, I removed it, but it sure isn't gone. My task manager is disabled, and when I try to run it an error appears stating "Task Manager disabled by administrator". Whenever I startup windows, the system gets a 1 minute shut down timer after the windows desktop shows and it says: "Windows must now restart because DCOM server process launcher service terminated." All of my desktop icons are gone. After about 30 seconds the icons appear but the background changes into a black screen with a large flashing icon in the center telling me I have a virus or something. My internet keeps opening on its own to a site that tells me to buy "antivirusXPpro-2009". I get error messages stating "ntdll64.exe has encountered a problem and needs to close." I have never heard of that file. I have no idea where t... Read more

A:Shut down countdown! Desktop Changed! Pop-ups! Disabled task manager!

UPDATE! I was finally able to reactivate spyware doctor. I turned on Intell-Guard and ran an Intelli-scan. I removed: Trojan.Generic, Trojan-Proxy.Agent.JO, Trojan.FakeAlert, Trojan.FraudPack.ANY
I no longer have the "red x" icon symptom, but everything else is still messed up. Spyware Doctor recently blocked Trojan.Pakes.kzx (I think that was the name, Pakes or Packs I missed it). I keep getting this message now: "The application or dll C:\Windows\System32\Px.ax is not a valid windows image" Spyware doctor is blocking many threats right now, one every 30-60 seconds or so.

Remaining Symptoms:
-computer suddenly sluggish
-system 1 minute shutdown countdown whenever I turn on the computer
-Startup very slow
-Desktop changed into a black screen with flashing box in center telling me I am infected
-On startup desktop has no icons and after a few seconds the background changes into the above warning screen.
-I keep getting this message now: "The application or dll C:\Windows\System32\Px.ax is not a valid windows image"

Logfile of HijackThis v1.99.1
Scan saved at 2:58:19 PM, on 4/15/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Pro... Read more

2 more replies
Answer Match 49.98%

I have a Lenovo T450s with a 4G card and a data plan through T-Mobile. Since I pay per GB, I'd like to limit data usage.

Under Settings->Network and Internet->Data Usage->Edit, there is a "Restrict Background Data" with the option Always, When I'm Near My Limit, and Never.

I changed this to "Always", close the settings, and reopened the settings.

It always switches back to "Never".

Why can't I change this?

PS - I'd really like to easily control what software can talk to the internet. I opened Atom text editor and it auto downloaded a 160MB update. Someone uploaded files to a shared Google Drive folder and it downloaded 500MB of files.

A:Restrict Background Data - Settings Button Broken?

Hi, To control per program access to the internet, you need a good firewall, perhaps a commercial one.

Here's what Comodo says (random choice of supplier), but in this list:
Best Free Firewall Protection | Gizmo's FreewareHow does a firewall help out?

A good personal firewall will

Block all unauthorized inbound or outbound connection attempts on your computerAllow you to specify exactly which programs are permitted to access the internetStealth the ports on your computer so hackers cannot locate and attack youLet you specify parental controls to filter out inappropriate websitesMaintain detailed activity and connection logs so you can troubleshoot issuesIsolate your internet browser in a virtual container so online threats cannot access your private data

You may already have set this.. if not, it may be relevant (uploading updates to others):
Data Usage->Edit - I don't have that setting, perhaps 'cos I've not set something to specify I've a data limit or it's not a mobile device.

1 more replies
Answer Match 49.98%

I am using Windows XP Professional and I am unsure of what happened to my desktop. I don't recall installing anything to make it change. But now I can see the background color, before the change the icons were translucent and blended in with the red moon theme. How can I change it back? Plus I have the computer set fot adjust for best appearance. Thanks
 

A:Solved: XP Professional icons changed from translucent to show background color

7 more replies
Answer Match 49.56%

Well I guess I went somewhere I wasn't suppose to. I didn't have AVG or SpyWare Guard running because I forgot I disabled everything on start up.This bug really screwed things up. Changed my background to some weird colors. Everything is running extremely slow. Task Manager is disabled along with anything involving Reg Edit as well as some other things. I scaned with AVG and it found some stuff but I know theres alot left.I cleaned up some things I knew weren't suppose to be there and here is the HiJack log I have now. I also have the HiJack log before I cleaned up some stuff. From what I've found so far this is a really nasty bug Thanks for the help in advance!Logfile of Trend Micro HijackThis v2.0.2Scan saved at 8:54:35 PM, on 1/7/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceServic... Read more

A:Colored Background, Disabled Reg Edit and Task Mngr.

Howdy, my name is Hoov, and I will be helping you with your dilemma. I appologize for the delay in getting you help.Please make sure you watch this thread for responses. If you click the options tab at the top of your first post, you can select to track this thread. Here is what I am asking you to do during the repair of your computer*Tell me everything that you have done, if anything, to try and fix this problem.*Please only use 1 forum to help clear up your problem. Posting on more than 1 and following instructions from more than 1 forum will cause those helping you to pull out thier hair.*Follow my instructions - If you can't for some reason, or if you don't understand something, please tell me. If you deviate from my instructions, tell me, it may make a difference on where we go. Don't install anything, even other programs that have nothing to do with security or malware, it could cause things to change, and I would never know it. *Have faith. I will do all I can to get your computer working, and if I can't - someone else here will know something else to try. *Stick with me to the end. My aim is to fix your problems, and give you the tools and knowledge to keep this from happening again.Now onto trying to fix your computer.Run an online virus scan called Kaspersky from HERE.1. At the main page. Press on "Accept". After reading the contents.2. At the next window Select Update. Allow the Database to update.Note: If prompted to run or update your Java, then follow... Read more

9 more replies
Answer Match 49.56%

My brother say he was visiting anobib.com, forum site, and it was after this when all of this started happening. He somehow got rid of windows defender it looks like b/c I cannot find it on the computer through control panel. The background still is all black with a message saying "Warning, you've been infected with spyware, etc" Thanks for the help

A:Disabled Task Manager, ?Windows Defender?, Background too

Please download Malwarebytes Anti-Malware (v1.34) and save it to your desktop.alternate download link 1alternate download link 2If you have a previous version of MBAM, remove it via Add/Remove Programs and download a fresh copy.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself.Press the OK button to close that box and continue.If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install. Alternatively, you can update through MBAM's interface from a clean computer, copy the definitions (rules.ref) located in C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware from that system to a usb stick or CD and then copy it to the infected machine.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan in progress" will s... Read more

3 more replies