Results 1 to 7 of 7
  1. #1
    Super Moderator jscher2000's Avatar
    Join Date
    Feb 2001
    Location
    Silicon Valley, USA
    Posts
    23,112
    Thanks
    5
    Thanked 93 Times in 89 Posts

    Re: Hijacked Desktop

    Yes, you do need some anti-spyware!!

    To clear the web page desktop, try the Display control panel, Desktop tab, Customize desktop button, Web tab. Delete any pages there.

  2. #2
    New Lounger
    Join Date
    Feb 2003
    Location
    Benfleet, Essex, England
    Posts
    20
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Hijacked Desktop

    We have a client who's desktop has been hijacked. Can anyone assist?

    The desktop wallpaper has been replaced with the desktop shown in the attachment (see attachment). The desktop flickers every so often assuming that it is live and work a process somewhere.
    I have found the following:

    A file in C:windowsdefault.htm

    You can delete this default.htm file and it does then allow you to change the desktop wallpaper. Then when you reboot, its back again.

    There is also a message which displays at the taskbar near the time which says: "you computer is infected with spyware, click here to remove". When you do click, it shows a web page with the url address:

    http://About:security


    PC Details:
    Windows XP Pro sp2.
    Dell Dimension E520
    Antivirus - AVG Fre addition (I know.... time to buy a proper spy protector)

    Any assistance would be welcome.
    Kind regards
    Ray

    Edited by bigaldoc to shrink the graphic just a tiny bit to prevent possible scrolling.
    Attached Images Attached Images

  3. #3
    Plutonium Lounger
    Join Date
    Oct 2001
    Location
    Lexington, Kentucky, USA
    Posts
    12,107
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: Hijacked Desktop

    <hr>...(I know.... time to buy a proper spy protector)... <hr>
    It shouldn't take any $$$ if that's to your liking. Search around in The Lounge and you'll find MANY recommendations for:

    SpywareBlaster
    AdAware
    Spybot Search & Destroy

    And quite a few others as well. SpywareBlaster works silently in the background, possibly preventing what happened to you. Most of us run other selected programs like once a week (more or less) to scan for (usually) simple stuff like tracking cookies and so on. Good luck.

  4. #4
    New Lounger
    Join Date
    Feb 2003
    Location
    Benfleet, Essex, England
    Posts
    20
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Hijacked Desktop

    Many Thanks
    Will try and then report back.....

  5. #5
    Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    23,592
    Thanks
    5
    Thanked 1,059 Times in 928 Posts

    Re: Hijacked Desktop

    You'll also want to look at a tool like the <img src=/S/free.gif border=0 alt=free width=30 height=15> AutoRuns for Windows. It gives you a very detailed look at what is started when you boot the PC. Another good <img src=/S/free.gif border=0 alt=free width=30 height=15> tool is Startuplist - Merijn.org. It is quick and easy to use. Note: with Autoruns you can disable startup entries. However, with Startuplist you can't change anything.

    Joe
    Joe

  6. #6
    New Lounger
    Join Date
    Feb 2003
    Location
    Benfleet, Essex, England
    Posts
    20
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Hijacked Desktop

    Many thanks for your help everyone. We purchased AVG Antivirus v8.0. It has antispy, malware, rootkit and antivirus protection. It found it and removed it.
    All sorted.

    Ray

  7. #7
    Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    23,592
    Thanks
    5
    Thanked 1,059 Times in 928 Posts

    Re: Hijacked Desktop

    Glad you got it worked out. Thanks for posting back your solution. It may help some other Lounger.

    Joe
    Joe

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •