User Name Password Register
DaniWeb IT Discussion Community
All
What is DaniWeb IT Discussion Community?
You're currently browsing the Web Browsers section within the Tech Talk category of DaniWeb, a massive community of 363,554 software developers, web developers, Internet marketers, and tech gurus who are all enthusiastic about making contacts, networking, and learning from each other. In fact, there are 3,886 IT professionals currently interacting right now! Registration is free, only takes a minute and lets you enjoy all of the interactive features of the site.
Please support our Web Browsers advertiser:
Views: 42593 | Replies: 25 | Solved
Closed Thread
Join Date: Oct 2004
Posts: 8
Reputation: pleasehelpme-7 is an unknown quantity at this point 
Rep Power: 0
Solved Threads: 0
pleasehelpme-7 pleasehelpme-7 is offline Offline
Newbie Poster

Help Desktop background hijacked-NEW Problem

  #1  
Oct 31st, 2004
I believe that this may be a relatively NEW bug/problem after checking several tech support forums and finding nothing related.

After surfing I picked up some sort of problem. This first started out by replacing my desktop screen with a warning that I may have been infected with spyware. After clicking on the link provided it brought me to a webpage that advertised "Smart Security Privacy Protection Tool" and provided additional info to attempt to frighten someone into purchasing the software to remove spyware. The web address was 213.159.117.130/?affid=NAT-5.

Desktop icons, browser and other software all function normally.

New desktop icon/shortcut was "! Smart Security"-I have since deleted

After deleting this and a couple associated files my desktop background changed from the warning to an alternating gray and white.

I have used Ad-aware, spybot, and norton (latest versions) with no additional success. However, abnormal files in c:\program files\internet explorer were dchxuqbd.exe, gcdmkhfu.exe, and gkwfryiw.exe which I could not delete or uninstall but are no longer found (after ad aware).

Hijack log does not appear abnormal.

Right clicking on my desktop background and selecting view source provides the following notepad document:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<!----
***** This file is automatically generated by Microsoft Windows *****
--------><HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1252"></HEAD>
<BODY
style="BORDER-RIGHT: medium none; BORDER-TOP: medium none; BORDER-LEFT: medium none; BORDER-BOTTOM: medium none"
bottomMargin=0 bgColor=#000000 leftMargin=0 background="" topMargin=0
rightMargin=0>
<DIV
style="LEFT: 0px; WIDTH: 1280px; POSITION: absolute; TOP: 0px; HEIGHT: 1024px"><IMG
style="LEFT: 0px; WIDTH: 100%; POSITION: absolute; TOP: 0px; HEIGHT: 100%" cache
src="file:///C:/WINDOWS/9600_1024.bmp"> </DIV><IFRAME id=0
style="BACKGROUND: none transparent scroll repeat 0% 0%; LEFT: 0px; WIDTH: 1280px; POSITION: absolute; TOP: 1px; HEIGHT: 993px"
name=DeskMovrW marginWidth=0 marginHeight=0
src="file:///C:/WINDOWS/desktop.html" frameBorder=0 scrolling=no
subscribed_url="C:\WINDOWS\desktop.html" resizeable=""> </IFRAME>
<OBJECT id=ActiveDesktopMover
style="LEFT: 0px; VISIBILITY: hidden; WIDTH: 0px; POSITION: absolute; TOP: 0px; HEIGHT: 0px; container: positioned; zIndex: 5"
classid=clsid:72267F6A-A6F9-11D0-BC94-00C04FB67863></OBJECT>
<OBJECT id=ActiveDesktopMoverW
style="Z-INDEX: -1; LEFT: -1px; VISIBILITY: hidden; WIDTH: 1282px; POSITION: absolute; TOP: 0px; HEIGHT: 995px; container: positioned"
classid=clsid:72267F6A-A6F9-11D0-BC94-00C04FB67863></OBJECT>&nbsp;
</BODY></HTML>

Right clicking on the desktop background and clicking properties provides
Type: HTML Document
Connection: Not Encrypted
Address: file://C:\Windows\desktop.html



Still the background of my desktop is alternating gray and white and may send me into a seizure before long.

I would appreciate any help.
Thanks in advance.
AddThis Social Bookmark Button
 
Join Date: Nov 2004
Location: Australia
Posts: 19
Reputation: JC7 is an unknown quantity at this point 
Rep Power: 4
Solved Threads: 2
JC7 JC7 is offline Offline
Newbie Poster

Re: Desktop background hijacked-NEW Problem

  #2  
Nov 1st, 2004
Hi,

If you are running windows XP try going into 'display properties' -> 'desktop' tab -> 'customize desktop' button -> 'web' tab. See if you can unselect the check box for the html file that is currently displayed.
 
Join Date: Oct 2004
Posts: 8
Reputation: pleasehelpme-7 is an unknown quantity at this point 
Rep Power: 0
Solved Threads: 0
pleasehelpme-7 pleasehelpme-7 is offline Offline
Newbie Poster

Re: Desktop background hijacked-NEW Problem

  #3  
Nov 1st, 2004
JC7

I appreciate your interest in my problem. I am running XP but do not know what you mean by 'display properties'. Could you please clarify.

Thanks
 
Join Date: Nov 2004
Location: Australia
Posts: 19
Reputation: JC7 is an unknown quantity at this point 
Rep Power: 4
Solved Threads: 2
JC7 JC7 is offline Offline
Newbie Poster

Re: Desktop background hijacked-NEW Problem

  #4  
Nov 3rd, 2004
'Display properties' is the place where you set things like screen resolution, desktop background image etc.
There are several ways to get to the Display properties dialog box, here is one of them:

Go to the Start Menu at the lower left corner of your desktop. Click 'Settings', which will bring up an extended list of further options. Click 'Control Panel', which will open a window with a long list of shortcuts to various sytem settings. Double-click on 'Display' from this list, which will bring up a smaller dialog box (the 'Display Properties' dialog box).
This dialog box has several tabs at the top to choose different types of settings according to what you would like to change.
Click on the 'Desktop' tab, which will show the basic options for changing your desktop.
Click on the 'Customize Desktop...' button that you see here. This brings up yet another dialog box called 'Desktop Items'. Here you should select the 'Web' tab at the top. Now with a bit of luck you will see that there is an entry here for the grey and white html page you have on your desktop. It could be called 'Desktop.html' but may not be. Just make sure you un-tick anything that is ticked here. (If nothing is ticked here when you go in then this method will not help you)
When you have finished click 'OK' on the open dialog boxes to accept your changes, and close the 'Control Panel' window.

From what you have said it is possible that you have already removed the intruding software that caused this problem, but you have just been left with this anoying HTML page selected as your desktop. If this is the case then this method should help you. However, it may not work either.
Let me know how you go.
 
Join Date: Oct 2004
Posts: 8
Reputation: pleasehelpme-7 is an unknown quantity at this point 
Rep Power: 0
Solved Threads: 0
pleasehelpme-7 pleasehelpme-7 is offline Offline
Newbie Poster

Solution Re: Desktop background hijacked-NEW Problem

  #5  
Nov 5th, 2004
JC7
You are the man. This took care of the problem immediately. I am very grateful for your help.
Thank you so much
:cheesy:
 
Join Date: Feb 2004
Location: Oztralya
Posts: 7,425
Reputation: crunchie has a spectacular aura about crunchie has a spectacular aura about crunchie has a spectacular aura about 
Rep Power: 21
Solved Threads: 370
Moderator
Featured Poster
crunchie's Avatar
crunchie crunchie is offline Offline
Spyware Killer

Re: Desktop background hijacked-NEW Problem

  #6  
Nov 5th, 2004
JC7, I agree .
Proud member of ASAP (Alliance of Security analysis Professionals).
Opera How you got infected AVAST anti-virus Comodo Firewall Spywareblaster

Please do not PM me for help. Instead, post in the public forum where others may benefit.
 
Join Date: Nov 2004
Posts: 2
Reputation: marksniper is an unknown quantity at this point 
Rep Power: 0
Solved Threads: 1
marksniper marksniper is offline Offline
Newbie Poster

Solution Desktop problem : file://C:\WINDOWS\desktop.html

  #7  
Nov 13th, 2004
:cheesy: ::::OLUTION:::::: :cheesy:

Follow these steps :

1. Click on Start -> Setting -> Control Panel -> In this new window -> open "Display icon"

2. Open "Desktop" the sheet (tab) which is the second one.

3. Click on "'Customize desktop" the button at the bottom of this window.

3. Click on "Web" tab in this new window.

4. Uncheck all the squares that you will see and delete it right after. Mine was mark as "Security".

5. Press ok and everything is suppose to be fine!


That's a clearly simple plan may be easier to follow.
Thanks again guys for help to find this problem!

:cheesy:
 
Join Date: Apr 2005
Posts: 3
Reputation: java115 is an unknown quantity at this point 
Rep Power: 0
Solved Threads: 1
java115 java115 is offline Offline
Newbie Poster

Re: Desktop background hijacked-NEW Problem

  #8  
Apr 3rd, 2005
I have similar problem. My desktop is red and in the middle of it is big advertisement of SmartSecurity. I'v tried your solution but it doesn't work in my case. After opening "web" tab i have "my current home page" unchecked only. Delete tab is inactive. Any idea?
java115
 
Join Date: Nov 2004
Posts: 2
Reputation: marksniper is an unknown quantity at this point 
Rep Power: 0
Solved Threads: 1
marksniper marksniper is offline Offline
Newbie Poster

Re: Desktop background hijacked-NEW Problem

  #9  
Apr 3rd, 2005
Hummm...
You might not have the same problem than me!
But You can try to explain your problem a little more than the other message you just write to know what's really happening with your computer !

 
Join Date: Apr 2005
Posts: 3
Reputation: java115 is an unknown quantity at this point 
Rep Power: 0
Solved Threads: 1
java115 java115 is offline Offline
Newbie Poster

Re: Desktop background hijacked-NEW Problem

  #10  
Apr 4th, 2005
There isn't much more to say. Some time ago all icons except "me computer" and "recycle bin" disappeared, few days later my desktop turned red. I can't changed it in properties (background is inactive), nothing is checked under "web" tab in "desktop items. I did run anti-virus, spyware, adware, nothing works. heeeeeeeeeeeeeeelp!!!!!!!!!!!!!!!!!!!!!!!!!
java115
 
Closed Thread

Only community members can participate in forum threads. You must register or log in to contribute.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

 

DaniWeb Web Browsers Marketplace
Thread Tools Display Modes

Similar Threads
Other Threads in the Web Browsers Forum

All times are GMT -4. The time now is 5:13 am.
Forum system based on vBulletin Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
©2003 - 2008 DaniWeb® LLC