trojan changed my wallpaper

im2hard2resist

New Member
:eek: i had this cool web search spyware somehow on my comp, and i tried removing it using webroot spyware, it always used 2 detect but could not clean. this used 2 alter my home page, search page and add favs. then i decided 2 remove the reg.. entries manually, and there i found some suspicious search link, and may b i was a bit oversmart and brazen then, i actually tried tht link!!!!. thts when this trojan came, although mcaffee cleaned it, still it had altered my wallpaper and had things like -" ur comp is not safe, alert, with an exclamation sign" itwas horrifying. i tried out evrything, finally i used the same active wallpaper(which had alink 2 remove the virus) and went 2 tht website, but there they wanted some 50$. (it was like throwing tacks on the road and setting a garage 100 feet ahaead!!!!) it was so frustrating.. :mad: then i rightclicked on the active wallpaper( which was an html file) and manually deleted it from the comp, and set a new wallpaper, then the screen started flickering every 2 sec,, may b the old hijacked wallpaper and the new 1 conflicted . then after many reboots and virus- adware scans, the flickering stopped and the system is stable. butthe wallpaper remains palin white and is an html file perhaps camouflaging the actual desktop underneath, but i can see the icons on it, but on right clickin i get the html menu--- view source, encoding, prin, refresh..., wat can i do???? to restore my old desktop, need help guys, i m seriously bugged :confused:
 

Praetor

Administrator
Staff member
1. You'll have to disable the active wallpaper (or "share" it with the deskto) to be able to access the buttons. TO do so: (1) Control Panel (2) Display Settings (3) Desktop Tab (4) Customize Desktop (5) Web tab (6) Uncheck all the boxes (7) Click Ok (8) Click OK

2. TO deal with the trojan/spyware: (1) Disconnect from the net (2) Run a viruscheck on everything (3) Run a spycheck using a free program called SpyBot ( http://www.safer-networking.org/index.php?page=download ) and fix what problems are rewuired (4) You may also like/want HijackThis ( http://www.spychecker.com/program/hijackthis.html )
 

kb1ghc

New Member
http://www.safer-networking.org this program will get rid of it. SpyBot Search & Destroy is a completly free program, and it works great.

also, so it doesn't happen again you should try Mozilla FireFox for your web browser, i use it 100% now, and i never need to use IE.
 

Praetor

Administrator
Staff member
so it doesn't happen again you should try Mozilla FireFox
Correct me if im wrong but Firefox isnt immune to spyware and such -- it;s just most stuff is made for IE :)
 

Praetor

Administrator
Staff member
I've got that site blacklisted on my firewall (something i did soem time ago), what's the proggie called? :)
 
Top