User Name Password Register
DaniWeb IT Discussion Community
All
What is DaniWeb IT Discussion Community?
You're currently browsing the Web Browsers section within the Tech Talk category of DaniWeb, a massive community of 391,742 software developers, web developers, Internet marketers, and tech gurus who are all enthusiastic about making contacts, networking, and learning from each other. In fact, there are 3,201 IT professionals currently interacting right now! Registration is free, only takes a minute and lets you enjoy all of the interactive features of the site.
Please support our Web Browsers advertiser:

Desktop background hijacked-NEW Problem

Join Date: Oct 2004
Posts: 8
Reputation: pleasehelpme-7 is an unknown quantity at this point 
Rep Power: 0
Solved Threads: 0
pleasehelpme-7 pleasehelpme-7 is offline Offline
Newbie Poster

Help Desktop background hijacked-NEW Problem

  #1  
Oct 31st, 2004
I believe that this may be a relatively NEW bug/problem after checking several tech support forums and finding nothing related.

After surfing I picked up some sort of problem. This first started out by replacing my desktop screen with a warning that I may have been infected with spyware. After clicking on the link provided it brought me to a webpage that advertised "Smart Security Privacy Protection Tool" and provided additional info to attempt to frighten someone into purchasing the software to remove spyware. The web address was 213.159.117.130/?affid=NAT-5.

Desktop icons, browser and other software all function normally.

New desktop icon/shortcut was "! Smart Security"-I have since deleted

After deleting this and a couple associated files my desktop background changed from the warning to an alternating gray and white.

I have used Ad-aware, spybot, and norton (latest versions) with no additional success. However, abnormal files in c:\program files\internet explorer were dchxuqbd.exe, gcdmkhfu.exe, and gkwfryiw.exe which I could not delete or uninstall but are no longer found (after ad aware).

Hijack log does not appear abnormal.

Right clicking on my desktop background and selecting view source provides the following notepad document:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<!----
***** This file is automatically generated by Microsoft Windows *****
--------><HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1252"></HEAD>
<BODY
style="BORDER-RIGHT: medium none; BORDER-TOP: medium none; BORDER-LEFT: medium none; BORDER-BOTTOM: medium none"
bottomMargin=0 bgColor=#000000 leftMargin=0 background="" topMargin=0
rightMargin=0>
<DIV
style="LEFT: 0px; WIDTH: 1280px; POSITION: absolute; TOP: 0px; HEIGHT: 1024px"><IMG
style="LEFT: 0px; WIDTH: 100%; POSITION: absolute; TOP: 0px; HEIGHT: 100%" cache
src="file:///C:/WINDOWS/9600_1024.bmp"> </DIV><IFRAME id=0
style="BACKGROUND: none transparent scroll repeat 0% 0%; LEFT: 0px; WIDTH: 1280px; POSITION: absolute; TOP: 1px; HEIGHT: 993px"
name=DeskMovrW marginWidth=0 marginHeight=0
src="file:///C:/WINDOWS/desktop.html" frameBorder=0 scrolling=no
subscribed_url="C:\WINDOWS\desktop.html" resizeable=""> </IFRAME>
<OBJECT id=ActiveDesktopMover
style="LEFT: 0px; VISIBILITY: hidden; WIDTH: 0px; POSITION: absolute; TOP: 0px; HEIGHT: 0px; container: positioned; zIndex: 5"
classid=clsid:72267F6A-A6F9-11D0-BC94-00C04FB67863></OBJECT>
<OBJECT id=ActiveDesktopMoverW
style="Z-INDEX: -1; LEFT: -1px; VISIBILITY: hidden; WIDTH: 1282px; POSITION: absolute; TOP: 0px; HEIGHT: 995px; container: positioned"
classid=clsid:72267F6A-A6F9-11D0-BC94-00C04FB67863></OBJECT>&nbsp;
</BODY></HTML>

Right clicking on the desktop background and clicking properties provides
Type: HTML Document
Connection: Not Encrypted
Address: file://C:\Windows\desktop.html



Still the background of my desktop is alternating gray and white and may send me into a seizure before long.

I would appreciate any help.
Thanks in advance.
AddThis Social Bookmark Button
 
All times are GMT -4. The time now is 4:02 am.
Forum system based on vBulletin Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
©2003 - 2008 DaniWeb® LLC