Desktop background changed. Unable to use task manager

By rasheed_haroon
Jun 7, 2008
  1. I'm unable to use my task manager. Desktop background has changed automatically to spyware warning message, and I get pop ups every 5 seconds. I've been trying to fix this problem but could not.. plz hlp
  2. rasheed_haroon

    rasheed_haroon TS Rookie Topic Starter

    By the way.... i've posted AVG log
  3. rasheed_haroon

    rasheed_haroon TS Rookie Topic Starter

    and HJT log
  4. Blind Dragon

    Blind Dragon TS Evangelist Posts: 3,908

    Step 1
    Let's download the programs we need first

    Update MBAM
    • Double-click mbam-setup.exe and follow the prompts to install the program.
    • At the end, be sure a checkmark is placed next to
      • Update Malwarebytes' Anti-Malware
    • then click Finish.
    • Close MBAM for now

    *****Print this section or save it to a notepad file to have in safe mode*****

    Step 2
    Run Smitfraudfix
    • Reboot your computer in Safe Mode (before the Windows icon appears, tap the F8 key continually)
    • Double-click SmitfraudFix.exe
    • Select 2 and hit Enter to delete infected files.
    • You will be prompted: Do you want to clean the registry ? answer Y (yes) and hit Enter in order to remove the Desktop background and clean registry keys associated with the infection.
    • The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found): Replace infected file ? answer Y (yes) and hit Enter to restore a clean file.
    • A reboot may be needed to finish the cleaning process. The report can be found at the root of the system drive, usually at C:\rapport.txt

    If you reboot, make sure to go back into safemode

    Run CWShredder
    Now run CWShredder. Click I Agree, then Fix and then Next, let it fix everything it asks about.


    Run MBAM
    • Launch MBAM
    • Once the program has loaded, select Perform full scan, then click Scan.
    • When the scan is complete, click OK, then Show Results to view the results.
    • Be sure that everything is checked, and click Remove Selected.
    • When completed, a log will open in Notepad. please attach this log with your reply
      • If you accidently close it, the log file is saved here and will be named like this:
      • C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt


    Reboot normally and run a fresh scan and save a log with hijackthis


    1) C:\rapport.txt
    2) MBAM log
    3) A new Hijackthis ran after you reboot
Topic Status:
Not open for further replies.

Similar Topics

Add your comment to this article

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...