Member Avatar for summon

Hi i have that antivirus-gold spyware it'is always in my desktop as a wall paper i can't change it or i can't erase it pls help me :(

Also Hijackthis couldn't find it :(

These are the programs that used

AdAware
Hijackthis
Spysweeper

And this is log of Hijackthis


Logfile of HijackThis v1.99.1
Scan saved at 15:13:52, on 07/20/2005
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\SETUP\HIJACKTHIS.EXE

O4 - Startup: YAZICI1.BAT
O4 - Startup: YAZICI1.PIF = ?

PLZ HELP ME !!!!! :'(

  • 2 Contributors
  • 3 Replies
  • 244 Views
  • 2 Days Discussion Span
  • Latest Post Latest Post by dlh6213

Dani AI

Generated

Short, practical addendum for anyone who lands on this old thread: this is a typical rogue anti‑spyware that forces itself as the desktop background and resists ordinary scans. ’s problem was solved after the community suggestion from , but the steps below cover safe manual checks and fixes that help when an initial scan doesn’t fully remove the infection or when the wallpaper change option is blocked.

Quick removal checklist (do these in order):

  1. Boot into Safe Mode (press F8 at startup) and disconnect from the network.
  2. Run a full scan with a reputable, up‑to‑date anti‑malware tool (if you cannot update on the infected PC, download on a clean machine and transfer it).
  3. Disable suspicious startup items using the System Configuration tool (msconfig) or by inspecting the Start Menu -> Programs -> Startup folder; remove unknown shortcuts.
  4. If the wallpaper is still forced, remove the rogue file (from Safe Mode or from clean rescue media) and then restore desktop settings.
  5. Reboot, run another full scan, and keep the system patched. If removal fails, back up personal data and consider a clean reinstall.

Registry and desktop-unlock notes (backup registry first): check and edit these keys as necessary:

  • HKEY_CURRENT_USER\Control Panel\Desktop — clear or set the Wallpaper value to a valid image path.
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System and
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop — look for values that block changing the background (for example policy entries that disable the Desktop tab) and set them to 0 or remove them. After changes, log off/on or reboot and then use Display Properties (right‑click Desktop -> Properties -> Desktop) to select a normal wallpaper.

If HijackThis or other diagnostics miss the component, re-run them in Safe Mode and post an updated log with OS version and exact symptoms. If uncomfortable editing the registry or deleting system files, back up data and seek hands‑on help or reinstall the OS.

Recommended Answers

All 3 Replies

Member Avatar for dlh6213

Please follow the instructions found here:

Get CounterSpy from here and allow it to do a full system scan:

Go to Windows Update and get the Critical Updates for your system.

Member Avatar for summon

You'r my man :D thank you man thank you :D

Member Avatar for dlh6213

Am I to assume this means your problem has been resolved? :)

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.