Please help me identify and remove this virus!!

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Nienow - 29 Jul 2005 18:41 GMT

The problem is....when I start my computer and it gets to the desktop page,
my set wallpaper flickers between black, White, and a page stating that I
have spyware on my computer. Attempts to open any programs fail....and a
bureau window opens to say something like:

Internet Explorer can not find HTML which is nessasary to run active
desktop.
If you want to cancel active desktop click OK!!

When I click "OK" Nothing happens.....and all the while the computer is
running feverishly!!!!!

I'm completly lost......any info would help a great deal!

Thanks,
Nienow

Reply to this Message

Carey Frisch [MVP] - 29 Jul 2005 19:30 GMT

Please consult the experts in the virus removal newsgroup:
news://msnews.microsoft.com/microsoft.public.security.virus

Symantec Security Check
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym&plfid=23&pkj=
YVXRORVWHFHMFNZMBBX

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/?id=827315

Download Ad-aware SE and scan your PC for the presence of spyware:
http://www.download.com/3000-2144-10045910.html?part=69274&subj=dlpage&tag=button

Antivirus software: Frequently asked questions
http://www.microsoft.com/athome/security/protect/antivirus.mspx

3 Simple Steps to Help Ensure the Protection of Your PC
http://www.microsoft.com/athome/security/protect/default.mspx

Signature

Carey Frisch
Microsoft MVP
Windows XP - Shell/User
Microsoft Newsgroups

Get Windows XP Service Pack 2 with Advanced Security Technologies:
http://www.microsoft.com/athome/security/protect/windowsxp/choose.mspx

-------------------------------------------------------------------------------------------

| The problem is....when I start my computer and it gets to the desktop page,
| my set wallpaper flickers between black, White, and a page stating that I
[quoted text clipped - 12 lines]
| Thanks,
| Nienow

Reply to this Message

Nienow - 31 Jul 2005 23:05 GMT

Hey Carey........How about an easier route. I don't use outlook exspress and
I don't want to subscribe to anything!

Is there any other way to get help or to contact them?

Thanks

> Please consult the experts in the virus removal newsgroup:
> news://msnews.microsoft.com/microsoft.public.security.virus
[quoted text clipped - 30 lines]
> | Thanks,
> | Nienow

Reply to this Message

Malke - 31 Jul 2005 23:21 GMT

> Hey Carey........How about an easier route. I don't use outlook
> exspress and I don't want to subscribe to anything!
[quoted text clipped - 7 lines]
>>
>> Symantec Security Check

http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym&plfid=23&pkj=
YVXRORVWHFHMFNZMBBX

>> Unexplained computer behavior may be caused by deceptive software
>> http://support.microsoft.com/?id=827315
>>
>> Download Ad-aware SE and scan your PC for the presence of spyware:

http://www.download.com/3000-2144-10045910.html?part=69274&subj=dlpage&tag=button

>> Antivirus software: Frequently asked questions
>> http://www.microsoft.com/athome/security/protect/antivirus.mspx
[quoted text clipped - 14 lines]
>> | When I click "OK" Nothing happens.....and all the while the
>> | computer is running feverishly!!!!!

You can use a different newsreader; you don't have to use OE. Go through
the following malware removal steps, doing everything with updated
tools in Safe Mode. Get the tools/updates from a different, known-clean
computer with an Internet connection and a cd burner (or have a usb
thumbdrive with enough capacity to transfer the files).

http://www.elephantboycomputers.com/page2.html#Removing_Malware

Malke

Signature

MS-MVP Windows User/Shell
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic"

Reply to this Message

Torgeir Bakken (MVP) - 31 Jul 2005 23:21 GMT

> Hey Carey........How about an easier route. I don't use outlook exspress and
> I don't want to subscribe to anything!
>
> Is there any other way to get help or to contact them?
>
> Thanks

Hi,

Almost all microsoft.public.* groups can be access by using WebNews
(the Web interface what you are using to access this newsgroup).

The link for microsoft.public.security.virus at WebNews:

http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.
public.security.virus

Signature

torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx

Reply to this Message