Re: Getting rid of malware screen theme

From: relic (complaints_at_relic211.cjb.net)
Date: 07/31/05


Date: Sun, 31 Jul 2005 02:57:38 GMT

Martin wrote:
> Just as I was ending an internet session, I found that the opening
> "wallpaper image" - or maybe 'theme' is the proper word? - had been
> hijacked by an unwanted ad for a spy removal ware called PSguard. So
> far the functions are not affected, but it's very irritating - the
> screen jet black against an intrusive message - and a quick check on
> the web confirmed it's a recent malware.
> However it seems, of course, to have blocked the function for changing
> screen wallpaper, so I can't shuck it out that way. How do I get
> around this?
>
> The PC runs on Win XP with Norton firewall and Antivirus, it's not
> part of a LAN, and otherwise it's free of manifest virus problems.
>
> note: I just checked the activities manager and there are two
> processes which could be suspect: NPROTECT.EXE and NPFMNTOR.EXE (both
> using several megs of memory right now) Those two normally belong with
> Norton, but a spyware or adware could pose under these names, couldn't
> it? They can't be closed down, however.

*PSGuard Removal*
http://labs.paretologic.com/spyware.aspx?remove=PSGuard

-- 
If there is a Tourist Season, how come we can't shoot them?