Forum Home
Press F1
 
Thread ID: 92879 2008-08-26 20:55:00 desktop hijacked, help! punisher129 (14126) Press F1
Post ID Timestamp Content User
700756 2008-08-26 22:18:00 After you tick the entries I posted and reboot delete baky.exe

sorry to be so ignorant again but how do i delete it?:waughh:
punisher129 (14126)
700757 2008-08-26 22:25:00 Have you ticked the entries and rebooted ??

And installed malwarebytes?
Speedy Gonzales (78)
700758 2008-08-26 22:26:00 not yet punisher129 (14126)
700759 2008-08-26 22:30:00 Well once you tick the entries I posted then tick fix checked, reboot, then install malwarebytes, and do a scan.

We'll get around to deleting baky.exe
Speedy Gonzales (78)
700760 2008-08-26 22:31:00 ok ill start now thanks punisher129 (14126)
700761 2008-08-26 22:49:00 ok i tick and fixed those entries, rebooted, and im curently scanning with malwarebytes, but the spyware desktop is still there and i still cant change it. punisher129 (14126)
700762 2008-08-26 23:29:00 but the spyware desktop is still there and i still cant change it.

If this does not work we will need to go into the registry to fix it.


Go to start -> control panel -> Display properties -> Desktop -> Customize Desktop... -> Web tab, then uncheck and delete everything you find in there (except for "My current home page"),

Also remove the checkmark from the the Lock Desktop Items box if it is checked.
Apply.
Apply and Exit Display properties.
Pancake (6359)
700763 2008-08-27 00:20:00 ok i tick and fixed those entries, rebooted, and im curently scanning with malwarebytes, but the spyware desktop is still there and i still cant change it. You may also find you need to run several cleaners to remove this - malwarebytes is good, but you sometimes need more than 1 cleaner. After running Malwarebytes, run Spybot S&D.

Just took a PC back that had the Winantivirus - took 4 cleaners to remove as well as the had to manually remove several entries in the Reg.
wainuitech (129)
700764 2008-08-27 00:31:00 Go into C:\windows\system32 and arrange the items by date, last changed at the top, you'll see the desktop background, and probably a screen saver aswell.

You can double check the names against the ones in the desktop background settings, and then delete the file(s).

Don't delete anything you're not sure about.
wratterus (105)
700765 2008-08-27 00:56:00 Exactly the same virus hit me last night. I'm trying to fix now. An AVG Scan found trojan horse and has "fixed" it but it is still blocking updates for AVG and is blocking internet access to most of the suggested antivirus websites. I'm trying to follow the advice posted here. Thanks. stinker (14127)
1 2 3 4