desktop problem

shawlynot

Inactive User
Joined
Jun 23, 2005
Messages
36
Reaction score
0


as u can see my desktop has some spyware or something on it andi can't seem to get rid of it i have done a virus scan and us spy boy and it still has not sort it any ideas?
 
I like trend anti-spyware

or you could run through your processes one by one, type them in www.liutilities.com

stupid question, but thats not just a wallpaper is it?

what firewall are you uising by the way?
 
Last edited:
I was going to say the same thing, it does look like wallpaper, I recommend adaware. Its kept my machine clean for years.

thanks

TESTPRN
 
Download and install MS antispyware, perform a full scan and remove any entries that appear.
http://www.microsoft.com/athome/security/spyware/software/default.mspx


Downlaod and install Lavasoft Adaware
http://www.download.com/3000-2144-10045910.html

Do the same again with spybot, but when installing untick teatimer setting!
http://spybot.info/en/download/index.html



That should hopefully clear the issue if not then follow these steps below.


Download Killbox and put it on your desktop
http://www.downloads.subratam.org/KillBox.exe

b.
Download CCleaner and install it.
http://www.filehippo.com/download_ccleaner.html

c.
Download Ewido security suite.
http://download.ewido.net/ewido-setup.exe


1. After the download is complete, double click on the file to launch the install process.
2. During installation under the Additonal Options menu, you will be asked if you want to "Install background guard (required for automatic updates)" and "Install scan via context menu". Please UNCHECK both of these options.
3. Once installation is complete, launch Ewido by double-clicking the big "E" icon on your desktop. The program will prompt you to update -- click the 'OK' button.
4. The program will now go to the main screen. On the left hand side of the main screen, click on Update and then click 'Start Update'. The update will start and a progress bar will show the updates being installed. After the updates are installed, you will see 'Update Successful' in the lower left corner.
5. Close Ewido.

Then,,

Reboot into Safemode:
Turn on the computer.
Immediately begin tapping the F8 key (or F5 on some computers)
Use the arrow keys to highlight Safe Mode and press the Enter key.

When your computer is booted into Safe Mode, then continue.

Close all windows and Scan with hijackthis. Place a check mark next to each of the following that are still listed and click the "Fix Checked" button.

C:\WINDOWS\tool5.exe
C:\WINDOWS\RazeSpyware.pkg
C:\Documents and Settings\Ronan\Application Data\wklnhst.dat

Then,,

Open CCleaner.

Before first use, check under Options, Settings, and ensure "Only delete files in Windows Temp folder older than 48 hours" is unchecked.

Then open it and select the items you wish to clean up.

In the Windows Tab:

I recommend cleaning all entries in the "Internet Explorer" section except Cookies.
Clean all the entries in the "Windows Explorer" section
Clean all entries in the "System" section
Clean all entries in the "Advanced" section.

In the Applications Tab:

Clean all except cookies in the Firefox/Mozilla section if you use it.
Clean all in the Opera section if you use it.
Clean Sun Java in the Internet Section.
Clean any others that you choose.

Then click the "Run Cleaner" button

Then,,

Open Ewido

1. Click on 'Scanner' (the 3rd bar from the top on the left) and Choose 'Settings'
2. Please make sure 'Scan Every File' is selected. Finally, please click 'OK'
3. On the main screen, please select 'Complete System Scan' and the scan should begin.
4. While the scan is in progress, you will be prompted to clean the first infected file it finds. Choose clean, then put a check next to 'Perform action on all infections' in the left corner of the box so you don't have to sit and watch Ewido the whole time. Click OK.
5. When the scan is complete, click "Save Report". You scan results will be saved in a textfile. Please submit that with your next post.

If during your scan Ewido "crashes" or "hangs", please try scanning again. Before running the scan, click on 'Scanner' (the 3rd bar from the top on the left) and Choose 'Settings'. Uncheck 'Scan in NTFS Alternate Data Streams' as this can cause problems in overly infected systems. Click 'OK' and then follow the instructions from step #8 again.

Exclamation Note: Ewido is a free trial product for 14 days. Since Ewido is a trial version, the realtime guard and automatic update will stop functioning after 14 days (which is the reason we uncheck them during installation). You can use Ewido as an on-demand scanner (recommended) but you will have to manually update the definition file each time you scan.

If you decide to purchase Ewido, you can enable the 'Realtime Protect' and 'Automatic Update' functions by clicking on the 'Status' bar (Top left) and clicking on both items under "Your Security Status".

Now close ewido security suite.

Then,,

Open Killbox

Click on Tools>Delete Temp Files

Then,,

Check the following boxes:

Unregister .dll before deleting (unless it is greyed out)
Delete on Reboot

Highlight the entries in the quote box below and then Copy & paste them ONE at a time into the Killbox topmost box.
Quote:

C:\WINDOWS\tool5.exe
C:\WINDOWS\RazeSpyware.pkg
C:\Documents and Settings\Ronan\Application Data\wklnhst.dat


After pasting them into the topmost textbox. Click the Red X ...and for the confirmation message that will appear, you will need to click Yes

A second message will ask to Reboot now? you will need to click No until you have pasted the last file at which time you click yes.

Note: Killbox will let you know if the file does not exist.

After the reboot,

Download the free Ad-Aware SE and install it. If you already have Ad-Aware SE, please configure it as indicated below. If you have a previous version of Ad-Aware, please uninstall your current version and install the newest version SE 1.06.

1) Run Ad-Aware, and click Check for updates now.

2) Select Configurations (click the Gear wheel at the top) as follows:


General Button > Safety & Settings: Check (Green) all three.

Tweak Button > Cleaning Engine > UNcheck "Always try to unload modules before deletion".


Click Proceed.
3) To start the scan, Click > "Scan Now" at left


Deselect "Search for negligible risk entries" as negligible risk entries (MRU's) are not considered to be a threat.

Select "Search for low-risk threats"

Select "Perform full system scan"

Click Next

4) When the scan has completed, select Next.


In the Scanning Results window, select the "Critical Objects" tab.

Right-click on the screen and choose "Select all objects"

Click Next to remove the infections found, and click OK to the prompt.

Restart the computer.


Finally,,

Go to Control Panel click Display > Desktop > Customize Desktop > Web > Uncheck anything that is present.
 
Back
Top