Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Hey Pep'z
Maybe you could help me with my problem
- My Background Tab, Appearance Tab & Web Tab were all missing from the Display Properties.I Had tried several helps online, even this forum gave some guidelines on how to restore them... but they weren't that helpfull..
(e.g. changing of NoDispAppearancePage & NoDispBackgroundPage from 1 to 0 on HKEY_CURRENT_USER/software/microsoft/windows/currentversion/policies/system, but the value cannot be modified to 0, it just goes back to 1, I even tried to delete them.. but can't delete them either.. for they comes back once I check them again.
This problem arises when my computer detected a virus called expl_iframebo.a, and my scanner linked me to my temp. internet file and shows the virus: \VX_test2(1).htm, afterwards a an anti virus website pop-up on my screen linked to psguard.com
I already deleted the virus manually, and some spywares along with it through yahoo anti spyware, that hopefully killed the virus already... but the web link of guard.com stays... so I deleted again every link that this website has in my computer.. which leaves me a fake wallpaper linking me to this "http://www.psguard.com/?aff=9&sub=0"
How could i remove that fake background and restore my missing tabs @ Display Properties? please help me
Thanks in advance

Amazing what happens when you search the Internet!!!
Result 1 of about 57,100 for psguard
http://labs.paretologic.com/spyware.aspx?remove=PSGuard
Rule #1: Good Computers don't go down.
Rule #2: There is no such thing as a good computer.

Thanks Rick.. due to the website you've given... I've been linked to a forum & picked this very good solution on my problem.. this is the original unedited message:
"You may want to print out or make a copy of these instructions before starting, because you will not be able to connect to the internet during most of this fix.
Please download Intermute's CWShredder from here:
http://cwshredder.net/bin/CWShredder.exe.
Save it to the desktop.
Double-click on it to run it, and click "Fix".Please download smitRem.zip and save it to your desktop.
Right click on the file and extract it to its own folder on the desktop.Please download, install, and update the free version of Ewido Security Suite:
1. When installing, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
2. When you run Ewido for the first time, you will get a warning "Database could not be found!". Click OK. We will fix this in a moment.
3. From the main Ewido screen, click on update in the left menu, then click the Start update button.
4. After the update finishes, the status bar at the bottom will display "Update successful"
5. Exit Ewido. DO NOT run a scan yet.If you do not already have Ad-Aware SE 1.06 installed, follow these download and setup instructions. Also check for updates:
Ad-Aware SE Setup
Again, do NOT run a scan yet.
Next, please reboot your computer in Safe Mode by doing the following:
1. Restart your computer
2. After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3. Instead of Windows loading as normal, a menu should appear
4. Select the first option, to run Windows in Safe Mode.After that, now you need to run HijackThis and click "Scan." Place a check next to the following entries (if found):
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
F2 - REG:system.ini: Shell=Explorer.exe, msmsgs.exe
O16 - DPF: {FF3F0F03-0F01-131A-A3F9-08F02B23E0CC} - http://66.117.37.13/gba1865.exeNow close all browser and other windows except for HijackThis, and click "Fix Checked" to have HijackThis fix the entries you checked.
Open the smitRem folder, then double click the RunThis.bat file to start the tool. Follow the prompts on screen. Your desktop and icons will disappear and then reappear again --- this is normal.
Wait for the tool to complete and Disk Cleanup to finish --- this may take a while; please be patient.Next, run Ad-aware and perform a full scan. Remove everything found.
Now open Ewido Security Suite
· Click on Scanner
· Click on Complete System Scan and the scan will begin.
· NOTE: During some scans with ewido it is finding cases of false positives. You will need to step through the process of cleaning files one-by-one. If ewido detects a file you KNOW to be legitimate, select none as the action.
· DO NOT select "Perform action on all infections"
· When the scan is finished, click the Save report button at the bottom of the screen.
· Save the report to your desktop
· Close EwidoNext go to Start -> Control Panel, click Display -> Desktop -> Customize Desktop -> Web -> Uncheck "Security Info" if present.
Restart your computer in normal mode.Run Panda's online virus scan and perform a full system scan. Make sure the Autoclean box is checked!
Finally, restart your computer once more, and please post a new HijackThis log as well as the log from the Ewido scan and the log from the smitRem tool, which will be located at C:\smitfiles.txt.
Let us know if any problems persist."--------------------
Free Tools for Fighting Malware
Anti-Virus: AVG 7 Free OnLine Anti-Virus: Trend Micro / Panda Software
Anti-Trojan: a² Free / Personal / TrojanHunter (30-day trial) / OnLine Trojan Scan: TrojanScan
Spyware/Adware Tools: Spybot S & D / Ad-aware SE / IE-SPYAD / MVPS HOSTS File / SpywareBlaster / HijackThis
Firewall: Kerio firewall / ZoneAlarm firewall
Tutorials: How did I get Infected? / Internet Explorer Privacy & Security Settings

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |