I'm unable to use my task manager. Desktop background has changed automatically to spyware warning message, and I get pop ups every 5 seconds. I've been trying to fix this problem but could not.. plz hlp
Desktop background changed. Unable to use task manager
- Thread starter rasheed_haroon
- Start date
By the way.... i've posted AVG log
and HJT log
Blind Dragon
Posts: 3,774 +4
Step 1
Let's download the programs we need first
Update MBAM
--------------------------------------------------------
*****Print this section or save it to a notepad file to have in safe mode*****
Step 2
Run Smitfraudfix
-------------------------------------------------------------
If you reboot, make sure to go back into safemode
Run CWShredder
Now run CWShredder. Click I Agree, then Fix and then Next, let it fix everything it asks about.
---------------------------------------------------------------
Run MBAM
--------------------------------------------------------------------------
Reboot normally and run a fresh scan and save a log with hijackthis
--------------------------------------------------------------------------
ATTACH HERE:
1) C:\rapport.txt
2) MBAM log
3) A new Hijackthis ran after you reboot
Let's download the programs we need first
- Download Smitfraudfix by S!ri from HERE
- Download CWShredder HERE to its own folder.
- Please download Malwarebytes' Anti-Malware to your desktop.
Update MBAM
- Double-click mbam-setup.exe and follow the prompts to install the program.
- At the end, be sure a checkmark is placed next to
- Update Malwarebytes' Anti-Malware
- then click Finish.
- Close MBAM for now
--------------------------------------------------------
*****Print this section or save it to a notepad file to have in safe mode*****
Step 2
Run Smitfraudfix
- Reboot your computer in Safe Mode (before the Windows icon appears, tap the F8 key continually)
- Double-click SmitfraudFix.exe
- Select 2 and hit Enter to delete infected files.
- You will be prompted: Do you want to clean the registry ? answer Y (yes) and hit Enter in order to remove the Desktop background and clean registry keys associated with the infection.
- The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found): Replace infected file ? answer Y (yes) and hit Enter to restore a clean file.
- A reboot may be needed to finish the cleaning process. The report can be found at the root of the system drive, usually at C:\rapport.txt
-------------------------------------------------------------
If you reboot, make sure to go back into safemode
Run CWShredder
Now run CWShredder. Click I Agree, then Fix and then Next, let it fix everything it asks about.
---------------------------------------------------------------
Run MBAM
- Launch MBAM
- Once the program has loaded, select Perform full scan, then click Scan.
- When the scan is complete, click OK, then Show Results to view the results.
- Be sure that everything is checked, and click Remove Selected.
- When completed, a log will open in Notepad. please attach this log with your reply
- If you accidently close it, the log file is saved here and will be named like this:
- C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt
--------------------------------------------------------------------------
Reboot normally and run a fresh scan and save a log with hijackthis
--------------------------------------------------------------------------
ATTACH HERE:
1) C:\rapport.txt
2) MBAM log
3) A new Hijackthis ran after you reboot
Similar threads
