Help with desktop hijacker

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by YYZcars, Apr 15, 2005.

  1. YYZcars

    YYZcars Private E-2

    I scanned with AVG earlier and found I had some viruses which AVG seems to have gotten rid of the last 3 scans have come back clean. The only problem is my desktop background seems hijacked and I cannot find any viruses or any spyware that is causing it. It seems to be a message relating to "TrojanSpy.html....". It looks like a microsoft blue screen but I doubt it is. I posted a screenshot of the desktop and a hijackthis log below. I cannot change the desktop in the display section of the control panel. The computer is running WIN ME. THX

    Edit by chaslang: Unrequested inline log removed.
     

    Attached Files:

    Last edited by a moderator: Apr 15, 2005
  2. YYZcars

    YYZcars Private E-2

    Anyone? Please, I need this to be fixed ASAP. Thank You
     
  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please read and follow the sticky threads. Do not post HJT logs unless requested and do not post them inline when they are requested. You must follow standard cleanup procedures given below.
    Part of your problem is the C:\wp.exe process which is loaded by the below:

    O4 - HKCU\..\Run: [WindowsFY] C:\WP.EXE

    And this too:
    O4 - HKLM\..\Run: [Security iGuard] C:\Program Files\Security iGuard\Security iGuard.exe

    Look for an uninstall to Security iGuard in Add/Remove programs

    But there is more to it then that.

    - Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus RemovalMake sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem:

    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds