Re: background tab and others disappeared in my display tabs

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 04/19/05


Date: Tue, 19 Apr 2005 09:15:39 -0400

From: "dieyong81" <dieyong81@discussions.microsoft.com>

| dear friends,
| i was surfind the internet when i got a pop up that my computer contain
| viruses and i need to download a spyware i pressed cancel since i know that
| it can be a virus. I was chocked to see that my background was change to a
| bluse screen with a pictures that says that "your computer contain viruses
| and i need to download a spyware "
| I became more chocked after i tried to change the background again to the
| original one and found that the background tab and others were not
| avaialable. the only things available were screensaver tab and the settings
| tab. I found out after doing some searches on my computer that a file called
| wp.exe was causing thi sproblem. I delete it from the registery and from all
| my computer and the background file wp.exe which was shown on my computer and
| i restarted my computer to see that the background was changed to black but
| still can do anything in the display.
| what do you think might be causing the problem and what should i do.
| N.B: the wp.exe was found and deleted by Norton Antivirus 2003 and by Ad
| Aware Spyware but still the the same problem
| help please.
| thanks for ur time and for your care
| ayman

Realize that web pages or screens can be made to look like authentic warning pages. Some
even look like a BSoS (Blue Screen of Death) this is a Social Engineerinmg attempt to get
you to install their malware. They can be pretty convincing !

Just to make sure, please perform the following....

Dump the contents of the IE Temporary Internet Folder cache (TIF)
Start --> Settings --> Control Panel --> Internet Options --> Delete Files

Dump the contents of the Mozilla FireFox Cache
Tools --> Options --> Privacy --> Cache --> Clear

1) Download TrendMicro Sysclean by other of the following 2 methods

Trend Sysclean Method 1
---------------------------------------
Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Create a directory.
On drive "C:\"
(e.g., "c:\sysclean")

Download SYSCLEAN.COM and place it in that directory.
Download the signature files (pattern files) by obtaining the ZIP file.
For example; lpt584.zip

Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM.

Trend Sysclean Method 2
---------------------------------------
Download the utility SYSCLEAN_FE at the following URL --
http://www.ik-cs.com/got-a-virus.htm
SYSCLEAN_FE automates the download and execution process of the Trend Sysclean Package.
Direct URL --
http://www.ik-cs.com/programs/virtools/Sysclean_FE.exe

2) Download Ad-aware SE (free personal version v1.05)
        http://www.lavasoftusa.com/

        Update Ad-aware with the latest definitions.
3) If you are using WinME or WinXP, disable System Restore
        http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode and shutdown as many applications as possible.
5) Using both the Trend Sysclean utility and Ad-aware, perform a Full Scan of your
        platform and clean/delete any infectors/parasites found.
        (a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
        Trend Sysclean utility and Adaware
7) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
        System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) If you are using WinME or WinXP, create a new Restore point

* * Please report back your results * *

-- 
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


Relevant Pages

  • Re: Windows XP installation
    ... | trojan horses that I can't seem to get rid of. ... | install XP will it get rid of all of the spywares and viruses? ... Trend Sysclean Method 1 ... Download SYSCLEAN.COM and place it in that directory. ...
    (microsoft.public.security.virus)
  • Re: Possible Trojan/Worm
    ... | On my main XP Home PC, which is providing Internet access to another PC ... | trying again, which eventually means XP reaches it's port limit, gives ... Download TrendMicro Sysclean by other of the following 2 methods ... Trend Sysclean Package ...
    (microsoft.public.security.virus)
  • Re: Desparate for help!!!!!!
    ... | possible as some of the sites I am working with require IE6. ... Other javascripts work just fine. ... Trend Sysclean Package ... Download SYSCLEAN.COM and place it in that directory. ...
    (alt.computer.security)
  • Re: Virus problem
    ... | screen a open file security warning comes up about a file called svhost.exe. ... What can I do to clear the virus off my machine? ... Trend Sysclean Package ... Download SYSCLEAN.COM and place it in that directory. ...
    (microsoft.public.security.virus)
  • Re: Generic Backdoor.t virus... Cant get rid of it....
    ... | Backdoor.t" virus. ... | trying to infect our machines? ... Trend Sysclean Package ... Download SYSCLEAN.COM and place it in that directory. ...
    (microsoft.public.security.virus)