Computing.Net > Forums > Windows XP > desktop bachground changed

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

desktop bachground changed

Reply to Message Icon

Original Message
Name: ewsteele
Date: July 4, 2005 at 10:26:48 Pacific
Subject: desktop bachground changed
OS: XP Home
CPU/Ram: P-4/512
Comment:

My initial opening desktop has been changed. I have managed to trace the problem to a file: C:\WINDOWS\screen.html
I can alter the attributes in notepad, and for the duration of the session, you can see some changes in the display but can't get to the original desktop display. Also in the Icon tray there are 2 icons that are red circles, 1 with the! and the 2nd has an X on it. When you hoover over each 1 the message "Your computer is infected!" displays. Seems like the original code for the desktop has been altered. Here is the modified code from screen.html. I changed the onclick to onchange to try to close the page. This didn't work. I also changed the size of the tables to see what effect this would have. It changed the tables but I still could not reach the default desktop. I also changed the background-color to transparent to try and see what was under neith but all that showed was a white background. Here is the code:

</html><style>td {font: 14px Arial; color: white}</style><body

bgcolor=transparent><table width=10% height=10%><td

align="center"><table

onchange="window.close('http://www.antivirus-gold.com/?wm=&swm=

');" style="cursor:hand" width=10 height=10 cellpadding=0

cellspacing=0 style="border:none dashed gray"><tr><td

bgcolor=black valign="top"><table width=10><tr><td width=10

rowspan=2><td><span style="font: bold 4px Arial; color:

yellow;">WARNING!</span></td></tr><tr><td><span style="font:

bold 4px Arial; color: white;">YOU'RE IN

DANGER!</span></td></tr></table>

<div

style="padding:0"><strong>ALL YOU DO WITH COMPUTER IS STORED

FOREVER IN YOUR HARD DISK. WHEN YOU VISIT SITES, SEND EMAILS...

ALL YOUR ACTIONS ARE LOGGED. AND IT IS IMPOSSIBLE TO REMOVE

THEM WITH STANDARD TOOLS. YOUR DATA IS STILL AVAILABLE FOR

FORENSICS. AND IN SOME CASES FOR YOUR BOSS, YOUR FRIENDS, YOUR

WIFE, YOUR CHILDREN.</strong>

Every site you or somebody

or even something, like spyware, opened in your browser, with

all images, and all downloaded and maybe later removed movies

or mp3 songs - ARE STILL THERE and

could broke your life!

<p style="font: bold 4px Arial;

color: yellow; margin-left:5">SECURE YOURSELF RIGHT

NOW!
REMOVE ALL SPYWARE FROM YOUR

PC!</p></div></td></tr><tr><td><table width="10%"

bgcolor="gray" cellpadding="0"><td align=center>onclick="return false" style="color:black">Removal

instructions</td></table></td></table></td></table></body><

/html>

Does anyone have any idea of what I need to do? I'm a student and I'm afraid of sending information across the web for classes.

EWSteele


Report Offensive Message For Removal


Response Number 1
Name: MordredHaidar
Date: July 4, 2005 at 10:34:39 Pacific
Reply: (edit)

Google Ad-Aware SE and Spybot. Get both. That might work. Try AVG Anti-Virus, too...all three are free for personal use.

AMD Sempron 2800+....Last of the Socket A's


Report Offensive Follow Up For Removal

Response Number 2
Name: normajean
Date: July 4, 2005 at 10:43:45 Pacific
Reply: (edit)

Your real desktop is below that fake screen that is coming up.

By changing your screen resolution, you may be able to shrink this fake screen so you can close the window.

To get rid of it, go to Display properties, Desktop, Customize desktop, there is a tab called WEB, whatever is listed under WEB PAGES - uncheck it or delete it. Then you can find the file it lists - screen.html and delete that too.

Then run the above suggested spyware removal tools to clean up anything else that is on your computer.



Report Offensive Follow Up For Removal

Response Number 3
Name: ranch
Date: July 4, 2005 at 10:46:36 Pacific
Reply: (edit)

Try this and remove Trojan or spyware:
http://www.short-media.com/forum/showthread.php?t=32218

Want Answers? Go Here
http://www.protalks.com/
or
http://www.spydb.com/


Report Offensive Follow Up For Removal

Response Number 4
Name: Tufenuf
Date: July 4, 2005 at 11:10:21 Pacific
Reply: (edit)

EWSteele, The removal instructions at the link below should be of help in getting rid of that garbage.

Trojan-Spy.HTML.Smitfraud.c Removal Guide

Tufenuf


Report Offensive Follow Up For Removal

Response Number 5
Name: dgcoder
Date: July 4, 2005 at 12:43:32 Pacific
Reply: (edit)

I have got the same problem months ago.Don't worry,if it is a virus that it will never says you that there is a virus.Scan your hard drive`especially Windows folder,even if you delete screen.html(in my case it was wallpaper.html)it will made by himself in the same directory.So try to kill it with ANTIVIRUS(Norton,Panda,McCafee,PC-CILIN).


Report Offensive Follow Up For Removal







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows XP Forum Home








Do you own an iPhone?

Yes
No, but soon
No


View Results

Poll Finishes In 7 Days.
Discuss in The Lounge
Poll History




Data Recovery Software