Desktop Hijack warnhp.html

First, thank you guys for having this really cool forum to help others! You guys are a real rare "class act".

I've been hijacked by the "warnhp.html"... the one that changes your desktop to the black screen with the spyware warning. When I clicked on the properties I found the location of the file and deleted it. Then... the white screen... that I can't get rid of.

So far, I have spent a fair amount of time reading various forums and trying different things. I have updated my Norton AV and did a full system scan. I have done ewido, pandascan, turned off system restore, spybot 1.4, adaware se, smitrem, hijack this...

I have attached the Spysweeper Session and the HJT log... Thanks again for your help!

 

Turn off Active Desktop if it is enabled.

Run CCleaner before doing the below.

Download WinPFind

Extract it to the root folder of drive C ( C:\ ). This will create a folder called WinPFind in the C:\ folder. Inside C:\WinPFind is a file called WinPFind.exe. Double-click on this file to launch the program. Once it is launched, click on the Start Scan button and wait for it to finish. This program will scan large amounts of files on your computer for known patterns so please be patient while it works as it can take a while, upwards to 30 minutes or more.

When it is done, it will show the results of the scan. Click on the Copy to Clipboard button and then paste the contents of the log in your clipboard. Then save it to a file using notepad and upload the text file here as an attachment.

 

I am running XP Professional...

I went into Start... Control Panel... Display... Desktop... Customize... Web...

In the box was a reference that the active desktop was set to "Warning Page"... I simply hilighted it and hit the delete button

IT IS GONE!!!! WOOOO HOOOO !!!!

I may still run the WinPfFind...