Win 7 Security 2012

[Ron]

I'm using Windows 7 Home and got hit with Win 7 Security 2012
yesterday.

I was able to remove it in safe mode with malewarebytes and SAS, but
something is still screwed up and I can't figure out what it is.

When I open FF with Google as my home page it looks like this
http://i56.tinypic.com/2i93vxs.jpg Internet Explorer looks the same.
For some reason Google Chrome seems to be normal. The browser itself
and viewing web pages.

Every web page that I go to with FF or IE doesn't view correctly. It
would also appear that all Windows programs are also compromised. For
example, Windows Photo Viewer when opened is in black and white...not
the picture, but the program itself. Windows Paint that I used to
create the screen shots with is outta whack as is Windows Live Mail,
Windows Media Player, etc. Here is a screen shot of WMP
http://i53.tinypic.com/wrde2w.jpg

If you refer to the first screen shot the taskbar is supposed to be
black, and the little button in the lower r/h corner for accessing the
desktop is not only blue, but it is also the wrong shape.

When Windows 7 starts up and shuts down the background is supposed to
stay blue. Now it is blue and then white while booting, and white and
then blue while shutting down.

I've run CCleaner, sfc /scannow and also tried doing a repair.
Nothing.

Anyone know what is wrong with this damn thing?

[siljaline]

Ron wrote:
> I'm using Windows 7 Home and got hit with Win 7 Security 2012
> yesterday.
<snip>

The Rogue goes under several guises > removal here >
<http://www.bleepingcomputer.com/virus-removal/remove-win-7-antispyware-2012>

Read all disclaimers before proceeding.

Silj


--
"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_

[Ron]

On Jun 16, 4:14*pm, "siljaline" <s...@uce.gov> wrote:
> Ron wrote:
> > I'm using Windows 7 Home and got hit with Win 7 Security 2012
> > yesterday.
>
> <snip>
>
> The Rogue goes under several guises > removal here >
> <http://www.bleepingcomputer.com/virus-removal/remove-win-7-antispywar...>
>
> Read all disclaimers before proceeding.
>
> Silj
>

Been there, down that. It has been removed, but my computer is still
jacked.

[siljaline]

Ron wrote:
<snip>
Been there, down that. It has been removed, but my computer is still
jacked.

Find a board that does HJT or OTL and go from there.
The supposed ASAP listed boards - I've lost track of this and care not
to comment -
<http://asap.maddoktor2.com/>

Bleeping Computer | MBAM Forums come to mind.

You won't find definitive support here since you cannot post and HJT or
OTL Logs on a non Binary NG.

Silj


--
"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_

[~BD~]

siljaline wrote:
> Ron wrote:
> <snip>
> Been there, down that. It has been removed, but my computer is still
> jacked.
>
> Find a board that does HJT or OTL and go from there.
> The supposed ASAP listed boards - I've lost track of this and care not
> to comment -
> <http://asap.maddoktor2.com/>
>
> Bleeping Computer | MBAM Forums come to mind.
>
> You won't find definitive support here since you cannot post and HJT or
> OTL Logs on a non Binary NG.
>
> Silj


@ Silj

I'm surprised that you didn't recommend a non-ASAP member too.

You were a VSOP, weren't you?

http://web.archive.org/web/200902010...a.org/vsop.htm

Perhaps you feel the site fails to meet requirements nowadays?

Some other reason you'd like to mention?

*

@Ron

You may download the HJT facility from Trend Micro, run the facility and
paste the log file here http://www.hijackthis.de/

The result might prove interesting for you! Any particular entry may be
copied and pasted into Google and may give you many leads! I see no
reason why you cannot ask for further advice here (APS) - there are some
clever folk who read here.

Good luck!

Dave

[Peter Foldes]

"~BD~" <~BD~@nomail.afraid.com> wrote in message news:iteu28$8d1$1@dont-email.me

> I'm surprised that you didn't recommend a non-ASAP member too.
>
> You were a VSOP, weren't you?
>
> http://web.archive.org/web/200902010...a.org/vsop.htm
>
> Perhaps you feel the site fails to meet requirements nowadays?
>
> Some other reason you'd like to mention?

David the Troll

You lying discriminating piece of crap Troll. It is none your friggin business what
people do and on top of that you accuse by innuendos good people
Instead of making accusations and innuendos involve yourself with learning how to
jump into the middle of the Ocean and holding your breath for 10 minutes underwater
and all that time watching the sharks that are circling you.


^%$(*&()

[Bullwinkle.]

http://www.devon-cornwall.police.uk/Pages/Default.aspx



"~BD~" <~BD~@nomail.afraid.com> wrote in message
news:iteu28$8d1$1@dont-email.me...

[gaz]

Ron wrote:
> I'm using Windows 7 Home and got hit with Win 7 Security 2012
> yesterday.
>
> I was able to remove it in safe mode with malewarebytes and SAS, but
> something is still screwed up and I can't figure out what it is.
>
> When I open FF with Google as my home page it looks like this
> http://i56.tinypic.com/2i93vxs.jpg Internet Explorer looks the same.
> For some reason Google Chrome seems to be normal. The browser itself
> and viewing web pages.
>
> Every web page that I go to with FF or IE doesn't view correctly. It
> would also appear that all Windows programs are also compromised. For
> example, Windows Photo Viewer when opened is in black and white...not
> the picture, but the program itself. Windows Paint that I used to
> create the screen shots with is outta whack as is Windows Live Mail,
> Windows Media Player, etc. Here is a screen shot of WMP
> http://i53.tinypic.com/wrde2w.jpg
>
> If you refer to the first screen shot the taskbar is supposed to be
> black, and the little button in the lower r/h corner for accessing the
> desktop is not only blue, but it is also the wrong shape.
>
> When Windows 7 starts up and shuts down the background is supposed to
> stay blue. Now it is blue and then white while booting, and white and
> then blue while shutting down.
>
> I've run CCleaner, sfc /scannow and also tried doing a repair.
> Nothing.
>
> Anyone know what is wrong with this damn thing?

Try right clicking on desktop, choose personalise and select a default
windows theme... If that doesnt work, create a new user account and log in,
and see if that is fine.

[David H. Lipman]

From: "gaz" <bkuh@blugh.com>

> Ron wrote:
>> I'm using Windows 7 Home and got hit with Win 7 Security 2012
>> yesterday.
>>
>> I was able to remove it in safe mode with malewarebytes and SAS, but
>> something is still screwed up and I can't figure out what it is.
>>
>> When I open FF with Google as my home page it looks like this
>> http://i56.tinypic.com/2i93vxs.jpg Internet Explorer looks the same.
>> For some reason Google Chrome seems to be normal. The browser itself
>> and viewing web pages.
>>
>> Every web page that I go to with FF or IE doesn't view correctly. It
>> would also appear that all Windows programs are also compromised. For
>> example, Windows Photo Viewer when opened is in black and white...not
>> the picture, but the program itself. Windows Paint that I used to
>> create the screen shots with is outta whack as is Windows Live Mail,
>> Windows Media Player, etc. Here is a screen shot of WMP
>> http://i53.tinypic.com/wrde2w.jpg
>>
>> If you refer to the first screen shot the taskbar is supposed to be
>> black, and the little button in the lower r/h corner for accessing the
>> desktop is not only blue, but it is also the wrong shape.
>>
>> When Windows 7 starts up and shuts down the background is supposed to
>> stay blue. Now it is blue and then white while booting, and white and
>> then blue while shutting down.
>>
>> I've run CCleaner, sfc /scannow and also tried doing a repair.
>> Nothing.
>>
>> Anyone know what is wrong with this damn thing?
>
> Try right clicking on desktop, choose personalise and select a default windows theme...
> If that doesnt work, create a new user account and log in, and see if that is fine.

Excellent suggestions.


--
Dave
Multi-AV Scanning Tool - http://www.pctipp.ch/downloads/dl/35905.asp

[Ron]

On Jun 16, 5:31*pm, "gaz" <b...@blugh.com> wrote:
> Ron wrote:
> > I'm using Windows 7 Home and got hit with Win 7 Security 2012
> > yesterday.
>
> > I was able to remove it in safe mode with malewarebytes and SAS, but
> > something is still screwed up and I can't figure out what it is.
>
> > When I open FF with Google as my home page it looks like this
> >http://i56.tinypic.com/2i93vxs.jpgInternet Explorer looks the same.
> > For some reason Google Chrome seems to be normal. The browser itself
> > and viewing web pages.
>
> > Every web page that I go to with FF or IE doesn't view correctly. It
> > would also appear that all Windows programs are also compromised. For
> > example, Windows Photo Viewer when opened is in black and white...not
> > the picture, but the program itself. Windows Paint that I used to
> > create the screen shots with is outta whack as is Windows Live Mail,
> > Windows Media Player, etc. Here is a screen shot of WMP
> >http://i53.tinypic.com/wrde2w.jpg
>
> > If you refer to the first screen shot the taskbar is supposed to be
> > black, and the little button in the lower r/h corner for accessing the
> > desktop is not only blue, but it is also the wrong shape.
>
> > When Windows 7 starts up and shuts down the background is supposed to
> > stay blue. Now it is blue and then white while booting, and white and
> > then blue while shutting down.
>
> > I've run CCleaner, sfc /scannow and also tried doing a repair.
> > Nothing.
>
> > Anyone know what is wrong with this damn thing?
>
> Try right clicking on desktop, choose personalise and select a default
> windows theme... If that doesnt work, create a new user account and log in,
> and see if that is fine.

Thank you! Using a basic Windows theme worked. Any idea what in the
hell happened?