[Brewin]

Hello.

This web site is truly a god send. Its helped me with a number of problems in the past. This one seems to be the stickiest so far. This is my dilemma; I cannot remove the "flashing desktop". I've attempted to delete any traces of "desktop.html", but it hasn't helped. I reboot the computer, and my desktop doesn't restore to its original status. Any help and advice would greatly be appreciated.

Thank You.

This is my HJT log:

Logfile of HijackThis v1.97.7
Scan saved at 1:55:35 PM, on 8/22/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\sistray.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\documents and settings\pepe\local settings\temp\lMZf5p.exe
C:\documents and settings\pepe\local settings\temp\lMZf5p.exe
C:\documents and settings\pepe\local settings\temp\3BIHp.exe
C:\Program Files\Messenger\MSMSGS.EXE
C:\Documents and Settings\PEPE\Application Data\lans.exe
C:\WINDOWS\System32\pty.exe
C:\Program Files\Ulead Systems\Ulead PhotoImpact 4.2\ABMTSR.EXE
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\Program Files\KODAK\Kodak EasyShare software\bin\EasyShare.exe
C:\WINDOWS\System32\ScsiAccess.EXE
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\pavProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\PEPE\Desktop\Boo's Etc\HijackThis.exe

O2 - BHO: Search Help - {E8EAEB34-F7B5-4C55-87FF-720FAF53D841} - C:\Documents and Settings\PEPE\Local Settings\Temp\4cFLkl0.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\System32\sistray.EXE
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Software\Panda Antivirus Platinum\Inicio.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [USSShReg] C:\PROGRA~1\ULEADS~1\ULEADP~1.2\SSaver\Ussshreg.exe /r
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [lMZf5p.exe] C:\documents and settings\pepe\local settings\temp\lMZf5p.exe
O4 - HKLM\..\Run: [lMZf5p] C:\documents and settings\pepe\local settings\temp\lMZf5p.exe
O4 - HKLM\..\Run: [winzi32.exe] C:\WINDOWS\winzi32.exe
O4 - HKLM\..\Run: [3BIHp.exe] C:\documents and settings\pepe\local settings\temp\3BIHp.exe
O4 - HKLM\..\Run: [UWF.exe] C:\documents and settings\pepe\local settings\temp\UWF.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\MSMSGS.EXE" /background
O4 - HKCU\..\Run: [window.exe] C:\WINDOWS\System32\window.exe
O4 - HKCU\..\Run: [Lous] C:\Documents and Settings\PEPE\Application Data\lans.exe
O4 - HKCU\..\Run: [Pby] C:\WINDOWS\System32\pty.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Album Fast Start.lnk = C:\Program Files\Ulead Systems\Ulead PhotoImpact 4.2\ABMTSR.EXE
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\KODAK\Kodak EasyShare software\bin\EasyShare.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com...ex/qtplugin.cab
O16 - DPF: {4B9F2C37-C0CF-42BC-BB2D-DCFA8B25CABF} (PopCapLoaderCtrl Class) - http://zone.msn.com/...pcaploader1.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterf...ds/Uploader.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupd...7979.8298958333
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macr...ash/swflash.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://zone.msn.com/...aploader_v5.cab

[Advertisements]

Welcome to GTG Brewin

You may wish to print out a copy of these instructions to follow while you complete this procedure. Please move Hijack This to a permanent folder (i.e. C:\HJT). This ensures backups are saved and accessible.

Reboot in safe mode (by tapping F8 at startup and select safe mode from the menu). Be sure you're able to view hidden files, and remove the following files in bold:

C:\documents and settings\pepe\local settings\temp\all contents <- Delete everthing in the "temp" folder, not the folder itself
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\winzi32.exe
C:\WINDOWS\System32\window.exe
C:\Documents and Settings\PEPE\Application Data\lans.exe
C:\WINDOWS\System32\pty.exe
C:\WINDOWS\Web\desktop.html

Next, please go offline, close all browsers and any open Windows, making sure that only HijackThis is open. Scan and when it finishes, put an X in the boxes, only next to these following items, then click fix checked.

O2 - BHO: Search Help - {E8EAEB34-F7B5-4C55-87FF-720FAF53D841} - C:\Documents and Settings\PEPE\Local Settings\Temp\4cFLkl0.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [lMZf5p.exe] C:\documents and settings\pepe\local settings\temp\lMZf5p.exe
O4 - HKLM\..\Run: [lMZf5p] C:\documents and settings\pepe\local settings\temp\lMZf5p.exe
O4 - HKLM\..\Run: [winzi32.exe] C:\WINDOWS\winzi32.exe
O4 - HKLM\..\Run: [3BIHp.exe] C:\documents and settings\pepe\local settings\temp\3BIHp.exe
O4 - HKLM\..\Run: [UWF.exe] C:\documents and settings\pepe\local settings\temp\UWF.exe
O4 - HKCU\..\Run: [window.exe] C:\WINDOWS\System32\window.exe
O4 - HKCU\..\Run: [Lous] C:\Documents and Settings\PEPE\Application Data\lans.exe
O4 - HKCU\..\Run: [Pby] C:\WINDOWS\System32\pty.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE

If you do not want the quicktime tray icon, fix this one too:
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

If you do not use MSN Messenger, fix these one as well:
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\MSMSGS.EXE" /background
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)

Reboot your PC.

If you would please, rescan with HijackThis and post a fresh log, and let us know how your system's working.

[Smokey]

Welcome to GTG Brewin

You may wish to print out a copy of these instructions to follow while you complete this procedure. Please move Hijack This to a permanent folder (i.e. C:\HJT). This ensures backups are saved and accessible.

Reboot in safe mode (by tapping F8 at startup and select safe mode from the menu). Be sure you're able to view hidden files, and remove the following files in bold:

C:\documents and settings\pepe\local settings\temp\all contents <- Delete everthing in the "temp" folder, not the folder itself
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\winzi32.exe
C:\WINDOWS\System32\window.exe
C:\Documents and Settings\PEPE\Application Data\lans.exe
C:\WINDOWS\System32\pty.exe
C:\WINDOWS\Web\desktop.html

Next, please go offline, close all browsers and any open Windows, making sure that only HijackThis is open. Scan and when it finishes, put an X in the boxes, only next to these following items, then click fix checked.

O2 - BHO: Search Help - {E8EAEB34-F7B5-4C55-87FF-720FAF53D841} - C:\Documents and Settings\PEPE\Local Settings\Temp\4cFLkl0.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [lMZf5p.exe] C:\documents and settings\pepe\local settings\temp\lMZf5p.exe
O4 - HKLM\..\Run: [lMZf5p] C:\documents and settings\pepe\local settings\temp\lMZf5p.exe
O4 - HKLM\..\Run: [winzi32.exe] C:\WINDOWS\winzi32.exe
O4 - HKLM\..\Run: [3BIHp.exe] C:\documents and settings\pepe\local settings\temp\3BIHp.exe
O4 - HKLM\..\Run: [UWF.exe] C:\documents and settings\pepe\local settings\temp\UWF.exe
O4 - HKCU\..\Run: [window.exe] C:\WINDOWS\System32\window.exe
O4 - HKCU\..\Run: [Lous] C:\Documents and Settings\PEPE\Application Data\lans.exe
O4 - HKCU\..\Run: [Pby] C:\WINDOWS\System32\pty.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE

If you do not want the quicktime tray icon, fix this one too:
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

If you do not use MSN Messenger, fix these one as well:
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\MSMSGS.EXE" /background
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)

Reboot your PC.

If you would please, rescan with HijackThis and post a fresh log, and let us know how your system's working.

[Brewin]

Hello again.

I've followed your instructions, but I'm wondering if I missed something. The desktop has not restored itself.

Have I missed something?

Your help is greatly appreciated.


Here is the new HJT log:

Logfile of HijackThis v1.97.7
Scan saved at 6:28:01 PM, on 8/22/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\WINDOWS\System32\ScsiAccess.EXE
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\sistray.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Messenger\MSMSGS.EXE
C:\Program Files\Ulead Systems\Ulead PhotoImpact 4.2\ABMTSR.EXE
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\KODAK\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\msiexec.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\pavProxy.exe
C:\Documents and Settings\PEPE\Desktop\Boo's Etc\Hi-Jack This\HijackThis.exe

O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\System32\sistray.EXE
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Software\Panda Antivirus Platinum\Inicio.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [USSShReg] C:\PROGRA~1\ULEADS~1\ULEADP~1.2\SSaver\Ussshreg.exe /r
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\MSMSGS.EXE" /background
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Album Fast Start.lnk = C:\Program Files\Ulead Systems\Ulead PhotoImpact 4.2\ABMTSR.EXE
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\KODAK\Kodak EasyShare software\bin\EasyShare.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com...ex/qtplugin.cab
O16 - DPF: {4B9F2C37-C0CF-42BC-BB2D-DCFA8B25CABF} (PopCapLoaderCtrl Class) - http://zone.msn.com/...pcaploader1.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterf...ds/Uploader.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupd...7979.8298958333
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macr...ash/swflash.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://zone.msn.com/...aploader_v5.cab

[Smokey]

Your log is clean.

The desktop has not restored itself.

What exactly do you mean?

[Brewin]

Sorry if I wasn't clear.

I'll try to explain as best as I can. The computer got infected with something that caused the desktop background to change. To be exact, when it was first infected the desktop had a message that read "WARNING YOU'RE IN DANGER", and when I logged onto the internet, my homepage was redirected. I ran Ad-Aware 6.0 and Hi-Jack This, and deleted what I knew for sure didn't belong. I then located and deleted "desktop.html" from the C: drive. I rebooted the computer and the message was gone, and I my homepage returned back to normal. I thought with the deletion of "desktop.html" the background would go back to normal, but it didn't return to the background that was originally set in the desktop properties. Instead it became a light gray that flashed to an off-white/light yellow. I tried to run the programs again, scanned the computer for virus and did find and disinfected the computer, but the desktop background continued to be the same flashing gray/off-white screen. This is when I seeked the help of GeeksToGo.com.

I've right clicked on the screen to see its properties and it reads next to Address: file://C:\WINDOWS\Web\desktop.html.

Can you suggest a possible remedy?

Thanks

[Reyman]

hello

just saying that im having the same problem and i don't know why but my auto-update says that is off(the ballon icon) but when i got to control panel is on...but the ballon says is off it blocks norton and microsoft anti-spyware beta but in can run them in safe mode.I run all the scans posible no spyware no virus ermm but the flashy thing keeps bloking the background and everything.Brewin if you resolved the problem share how u did it plz.

[Reyman]

hello
i finally removed the flashy thing.......go here.......... http://forum.gladiat...showtopic=25278

try it and i hope u resolve the problem.

[Nomen Nescio]

Hallo Smokey,

I've got the same problem. It seems that the desktop is taken over by a hostyl automaticly generated HTML. When I right click It behaves like a web page! on disply source I get :

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<!----
***** This file is automatically generated by Microsoft Windows *****
--------><HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1252"></HEAD>
<BODY
style="BORDER-RIGHT: medium none; BORDER-TOP: medium none; BORDER-LEFT: medium none; BORDER-BOTTOM: medium none"
bottomMargin=0 bgColor=#585768 leftMargin=0 background="" topMargin=0
rightMargin=0>
<DIV
style="LEFT: 0px; WIDTH: 1024px; POSITION: absolute; TOP: 0px; HEIGHT: 768px"><IMG
style="LEFT: 0px; WIDTH: 100%; POSITION: absolute; TOP: 0px; HEIGHT: 100%" cache
src="file:///C:/Documents%20and%20Settings/Armand/Local%20Settings/Application%20Data/Microsoft/Wallpaper1.bmp">
</DIV>
<DIV
style="LEFT: 1024px; WIDTH: 1024px; POSITION: absolute; TOP: 0px; HEIGHT: 768px"><IMG
style="LEFT: 0px; WIDTH: 100%; POSITION: absolute; TOP: 0px; HEIGHT: 100%" cache
src="file:///C:/Documents%20and%20Settings/Armand/Local%20Settings/Application%20Data/Microsoft/Wallpaper1.bmp">
</DIV><IFRAME id=0
style="BACKGROUND: none transparent scroll repeat 0% 0%; LEFT: 0px; WIDTH: 1024px; POSITION: absolute; TOP: 1px; HEIGHT: 767px"
name=DeskMovrW marginWidth=0 marginHeight=0
src="file:///C:/WINDOWS/Web/desktop.html" frameBorder=0 scrolling=no
subscribed_url="C:\WINDOWS\Web\desktop.html" resizeable=""> </IFRAME>
<OBJECT id=ActiveDesktopMover
style="LEFT: 0px; VISIBILITY: hidden; WIDTH: 0px; POSITION: absolute; TOP: 0px; HEIGHT: 0px; container: positioned; zIndex: 5"
classid=clsid:72267F6A-A6F9-11D0-BC94-00C04FB67863></OBJECT>
<OBJECT id=ActiveDesktopMoverW
style="Z-INDEX: -1; LEFT: -1px; VISIBILITY: hidden; WIDTH: 1026px; POSITION: absolute; TOP: 0px; HEIGHT: 769px; container: positioned"
classid=clsid:72267F6A-A6F9-11D0-BC94-00C04FB67863></OBJECT>&nbsp;
</BODY></HTML>

I hope you can help. I'm desperate!!

Thx in advance

[Greazy]

It appears that this thread is still open and I found an easy way to rid the flashing background if anyone is still having problems after removing desktop.htm.
> Go to your control panel
> Click the display icon
> On the Desktop tab, click "Customize Desktop"
> Then click on the Web tab
> Uncheck and Remove the "Security v2" (or whatever) and apply it.

This should get rid of the cream and white flashing background that gets to be so annoying. I'm not sure if this completely "cleans" anything, but with the other posts in this thread, the log appeared to be clean and they still had the flashing background.

HOPE THIS HELPS!!

Greazy Mcgeezy
Network Admin

[EagerToLearn]

Thank you very much for your tip on how to get rid of the flashing background that covered my desktop. I was alarmed when it kept flashing after all the AntiSpywares that I ran on my PC and when I checked the file address "C:\WINDOWS\Web\desktop.html" and I saw there was no such file on " C:\WINDOWS\Web\". When I checked your website, I was surprised to see how many people had had that same problem.

Your steps for doing it since the control panel were easy to follow. I immediately joined you when I saw your tip worked.
I'm not exactly versed in computer stuff, my level is just above that of an average user; but there's a lot of people out there who are not so good, so I think it's necessary that they have a good soured of easy ways to solve their computer problems.
My disadvantage is that I'm not a native speaker of English (my mother tongue is Spanish), so some technical terms may sometimes be jargon for me.

Some more questions:
I have ran the MicrosoftAntiSpyware and an antivirus that is very popular in my country (Perú) it's called the Per antivirus… I no longer have the constant popups and the warnings…
How can I be sure that all the spyware I had is finally gone?
How can I protect my machine from viruses in the future?
Is it enough to keep my antiviruses and antyspywares updated??

Well… Thank you for your help, I'll try to contribute as much as I can, and we'll be in touch.

[drchink]

It appears that this thread is still open and I found an easy way to rid the flashing background if anyone is still having problems after removing desktop.htm.
> Go to your control panel
> Click the display icon
> On the Desktop tab, click "Customize Desktop"
> Then click on the Web tab
> Uncheck and Remove the "Security v2" (or whatever) and apply it.

This should get rid of the cream and white flashing background that gets to be so annoying.  I'm not sure if this completely "cleans" anything, but with the other posts in this thread, the log appeared to be clean and they still had the flashing background. 

HOPE THIS HELPS!!

Greazy Mcgeezy
Network Admin

i dont see a web tab, is this the right thing to be in?

[EagerToLearn]

i dont see a web tab, is this the right thing to be in?

I know The directions might not be clear... I hope this illustrates the thing better

[EagerToLearn]

here's my help. forget the previous messsage

Attached Thumbnails

• 

[EagerToLearn]

WHY DOES MY PICTURE COME OUT SO SMALL????

[EagerToLearn]

this is my last try...
if the pics don't come out big, just click on them to enlarge..

Attached Thumbnails

• 
•