Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Infected with Trojan-Spy.Html.Smitfraud.c


  • Please log in to reply

#16
Rzilla

Rzilla

    Member

  • Topic Starter
  • Member
  • PipPip
  • 14 posts
Also, I could Post where the words Active Destop came up in the deskpol.txt file:

[HKEY_USERS\S-1-5-21-1482476501-1078145449-854245398-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU]
"a"="regedit /e c:\\deskpol.txt \"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\­Policies\\ActiveDesktop\"\\1"
"MRUList"="ab"
"b"="regedit /e c:\\deskpol.txt\\1"

[HKEY_USERS\S-1-5-21-1482476501-1078145449-854245398-1004\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop]
"NoChangingWallPaper"=dword:00000000

[HKEY_USERS\S-1-5-21-1482476501-1078145449-854245398-1004\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoDriveTypeAutoRun"=dword:00000091
"NoActiveDesktopChanges"=hex:00,00,00,00
"NoActiveDesktop"=dword:00000000
"NoSaveSettings"=dword:00000000
"ClassicShell"=dword:00000000
"NoThemesTab"=dword:00000000

[HKEY_USERS\S-1-5-21-1482476501-1078145449-854245398-1004\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"NoDispBackgroundPage"=dword:00000000
"Wallpaper"="c:\\wp.bmp"
"NoDispAppearancePage"=dword:00000000
"NoColorChoice"=dword:00000000
"NoSizeChoice"=dword:00000000
"NoDispScrSavPage"=dword:00000000
"NoDispCPL"=dword:00000000
"NoVisualStyleChoice"=dword:00000000
"NoDispSettingsPage"=dword:00000000

I have'nt merged that file yet in case this would help.

Edited by Rzilla, 18 May 2005 - 01:23 AM.

  • 0

Advertisements


#17
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,673 posts
Oh goodie.

Let me make a new one.

Copy the part in bold below into notepad and save it as permit2.reg

REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop]
"NoChangingWallPaper"=-

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoViewContextMenu"=-

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoDispBackgroundPage"=-

[HKEY_USERS\S-1-5-21-1482476501-1078145449-854245398-1004\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop]
"NoChangingWallPaper"=-

[HKEY_USERS\S-1-5-21-1482476501-1078145449-854245398-1004\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoActiveDesktopChanges"=-
"NoActiveDesktop"=-

[HKEY_USERS\S-1-5-21-1482476501-1078145449-854245398-1004\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"Wallpaper"=-


Doubleclick the file and confirm you want to merge it with the registry.

Regards,
  • 0

#18
Rzilla

Rzilla

    Member

  • Topic Starter
  • Member
  • PipPip
  • 14 posts
Went ahead and did what you said the first time using permit.reg but the browse button didn't come back.

Hang on let me do a system restore and use the new one. I need to be more patient. :tazz:

Edited by Rzilla, 18 May 2005 - 02:03 AM.

  • 0

#19
Rzilla

Rzilla

    Member

  • Topic Starter
  • Member
  • PipPip
  • 14 posts
YES it worked!!!! :tazz:

I now have the browse button in use and can change backgrounds.

Here's a pic:

Desktop2.JPG


Only problem now is getting messenger to stop coming on at startup even though I set it not to do that.
  • 0

#20
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,673 posts
Oh my. ;)

I don't think I would ever have found that without your help.
On behalf of everyone I will be helping with this in the future, many thanks for messing up my command and therewith finding the cause. :tazz:

I'll leave this thread open for a bit in case you encounter any problems.

Please have a look at my site for some tips on how to remove and prevent spyware.

Regards,
  • 0

#21
Rzilla

Rzilla

    Member

  • Topic Starter
  • Member
  • PipPip
  • 14 posts
Let me start off by saying Thank You very much for helping me. ;)
I'm very glad to have unexpectedly help you as well. :tazz:

I'm going to try downloading the apps listed on your website that I don't have already and clean up some more.

One problem that still exist is messenger starting even after I changed it in the preferences of the program to not do that.
  • 0

#22
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,673 posts
A nice program I used to get rid of that:
http://xp-antispy.org/

It has some other options you might like.

Regards,
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP