Page 4 of 6 FirstFirst ... 23456 LastLast
Results 31 to 40 of 58

Thread: spywad

  1. #31
    kurt wismer Guest

    Re: spywad

    pcbutts1 wrote:
    > Do you have these reg keys? Are the even listed?
    > [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\System]
    > "NoDispAppearancePage"
    > "NoDispBackgroundPage"
    > "NoDispCPL"


    that will also be user specific you know... though at least this time
    it's a user that all machines should have...

    --
    "it's not the right time to be sober
    now the idiots have taken over
    spreading like a social cancer,
    is there an answer?"

  2. #32
    Dustin Cook Guest

    Re: spywad

    CindyLouWhooo <faux@notreal_gone.com> wrote in
    news:mn.94e27d78c0eb66e7.70218@notrealgone.com:

    > thanks for being here. I am beaten down and near brainless.
    >
    > About four months ago, my desktop tab disappeared.
    > I have been going from forum to forum trying to find the answer in
    > registry settings.
    >
    > Weekly in safe mode I run:
    > my antivirus Avira
    > have added AVG
    >
    > Spybot
    > Bughunter
    > Smitfraud fix
    > Arovax
    > Lavasoft Adaware
    >
    > and two online trojan-antivir-keylogger,etc.scans.
    >
    > Arovax tells me spywad each week and points to user and machine:
    > Software-Microsoft-Windows-Curr.Version-Policies........I have done a
    > complete restore of said machine, without change. I have been to
    > KellysKorner, and a multitude of honorable forums trying to find the
    > answer.
    >
    > My house burned down and my church gave me this machine. I feel the
    > hurdles I have jumped in fine tuning have been great, except for this.
    >
    > Can you point me in the direction of what settings I need to change in
    > user and machine policies to make my desktop tab come back? This has
    > been my life's quest the past few months, and boy am I really
    > tired.....
    >
    >
    >


    Hi There. I'm late in this. You said your desktop tab was missing right?
    Lets see what could be doing that... It's likely a policy key

    http://www.kellys-korner-xp.com/regs...isplaytabs.reg

    If you have trouble with the url, please copy/paste the lines between
    **** below

    *****
    Windows Registry Editor Version 5.00

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Exp
    lorer] "NoActiveDesktopChanges"=hex:00,00,00,00
    "NoActiveDesktop"=dword:00000000
    "NoSaveSettings"=dword:00000000
    "ClassicShell"=dword:00000000
    "NoThemesTab"=dword:00000000

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Sys
    tem] "NoDispAppearancePage"=dword:00000000
    "NoColorChoice"=dword:00000000
    "NoSizeChoice"=dword:00000000
    "NoDispBackgroundPage"=dword:00000000
    "NoDispScrSavPage"=dword:00000000
    "NoDispCPL"=dword:00000000
    "NoVisualStyleChoice"=dword:00000000
    "NoDispSettingsPage"=dword:00000000
    "NoDispScrSavPage"=dword:00000000
    "NoVisualStyleChoice"=dword:00000000
    "NoSizeChoice"=dword:00000000
    "SetVisualStyle"=-

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Act
    iveDesktop] "NoChangingWallPaper"=dword:00000000

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\ThemeManager
    ] "ThemeActive"="1"
    "DllName"=hex(2):25,00,53,00,79,00,73,00,74,00,65, 00,6d,00,52,00,6f,00,6f
    ,00,\
    74,00,25,00,5c,00,72,00,65,00,73,00,6f,00,75,00,72 ,00,63,00,65,00,73,00
    ,5c,\
    00,54,00,68,00,65,00,6d,00,65,00,73,00,5c,00,6c,00 ,75,00,6e,00,61,00,5c
    ,00,\
    6c,00,75,00,6e,00,61,00,2e,00,6d,00,73,00,73,00,74 ,00,79,00,6c,00,65,00
    ,73,\ 00,00,00

    ****


    This *should* fix your issue for you. copy/paste the contents to notepad
    and save it as "fixme.reg" then double click, regedit will ask if its
    okay to import, say yes. and post back your results.


    --
    Dustin Cook
    Author of BugHunter - MalWare Removal Tool - v2.2c
    email: bughunter.dustin@gmail.com.removethis
    web..: http://bughunter.it-mate.co.uk
    Pad..: http://bughunter.it-mate.co.uk/pad.xml


  3. #33
    Dustin Cook Guest

    Re: spywad

    CindyLouWhooo <faux@notreal_gone.com> wrote in
    news:mn.94e27d78c0eb66e7.70218@notrealgone.com:

    > thanks for being here. I am beaten down and near brainless.
    >
    > About four months ago, my desktop tab disappeared.
    > I have been going from forum to forum trying to find the answer in
    > registry settings.
    >
    > Weekly in safe mode I run:
    > my antivirus Avira
    > have added AVG
    >
    > Spybot
    > Bughunter
    > Smitfraud fix
    > Arovax
    > Lavasoft Adaware
    >
    > and two online trojan-antivir-keylogger,etc.scans.
    >
    > Arovax tells me spywad each week and points to user and machine:
    > Software-Microsoft-Windows-Curr.Version-Policies........I have done a
    > complete restore of said machine, without change. I have been to
    > KellysKorner, and a multitude of honorable forums trying to find the
    > answer.
    >
    > My house burned down and my church gave me this machine. I feel the
    > hurdles I have jumped in fine tuning have been great, except for this.
    >
    > Can you point me in the direction of what settings I need to change in
    > user and machine policies to make my desktop tab come back? This has
    > been my life's quest the past few months, and boy am I really
    > tired.....
    >
    >


    Do you mean the show desktop shortcut beside your start button?


    --
    Dustin Cook
    Author of BugHunter - MalWare Removal Tool - v2.2c
    email: bughunter.dustin@gmail.com.removethis
    web..: http://bughunter.it-mate.co.uk
    Pad..: http://bughunter.it-mate.co.uk/pad.xml


  4. #34
    Dustin Cook Guest

    Re: spywad

    Andy Walker <awalker@nspank.invalid> wrote in news:46cb978a.455165906
    @news.webtv.com:

    > pcbutts1 wrote:
    >
    >>S-1-5-21-3048867430-4259222975-3608218347-1006

    >
    > That just shows you haven't any clue what you're doing.


    Good chance he'll set a bad key on that user account specifically too. lol


    --
    Dustin Cook
    Author of BugHunter - MalWare Removal Tool - v2.2c
    email: bughunter.dustin@gmail.com.removethis
    web..: http://bughunter.it-mate.co.uk
    Pad..: http://bughunter.it-mate.co.uk/pad.xml


  5. #35
    CindyLouWhooo Guest

    Re: spywad

    > CindyLouWhooo <faux@notreal_gone.com> wrote in
    > news:mn.94e27d78c0eb66e7.70218@notrealgone.com:
    >
    >> thanks for being here. I am beaten down and near brainless.
    >>
    >> About four months ago, my desktop tab disappeared.
    >> I have been going from forum to forum trying to find the answer in
    >> registry settings.
    >>
    >> Weekly in safe mode I run:
    >> my antivirus Avira
    >> have added AVG
    >>
    >> Spybot
    >> Bughunter
    >> Smitfraud fix
    >> Arovax
    >> Lavasoft Adaware
    >>
    >> and two online trojan-antivir-keylogger,etc.scans.
    >>
    >> Arovax tells me spywad each week and points to user and machine:
    >> Software-Microsoft-Windows-Curr.Version-Policies........I have done a
    >> complete restore of said machine, without change. I have been to
    >> KellysKorner, and a multitude of honorable forums trying to find the
    >> answer.
    >>
    >> My house burned down and my church gave me this machine. I feel the
    >> hurdles I have jumped in fine tuning have been great, except for this.
    >>
    >> Can you point me in the direction of what settings I need to change in
    >> user and machine policies to make my desktop tab come back? This has
    >> been my life's quest the past few months, and boy am I really
    >> tired.....
    >>
    >>
    >>

    >
    > Hi There. I'm late in this. You said your desktop tab was missing right?
    > Lets see what could be doing that... It's likely a policy key
    >
    > http://www.kellys-korner-xp.com/regs...isplaytabs.reg
    >
    > If you have trouble with the url, please copy/paste the lines between
    > **** below
    >
    > *****
    > Windows Registry Editor Version 5.00
    >
    > [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Exp
    > lorer] "NoActiveDesktopChanges"=hex:00,00,00,00
    > "NoActiveDesktop"=dword:00000000
    > "NoSaveSettings"=dword:00000000
    > "ClassicShell"=dword:00000000
    > "NoThemesTab"=dword:00000000
    >
    > [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Sys
    > tem] "NoDispAppearancePage"=dword:00000000
    > "NoColorChoice"=dword:00000000
    > "NoSizeChoice"=dword:00000000
    > "NoDispBackgroundPage"=dword:00000000
    > "NoDispScrSavPage"=dword:00000000
    > "NoDispCPL"=dword:00000000
    > "NoVisualStyleChoice"=dword:00000000
    > "NoDispSettingsPage"=dword:00000000
    > "NoDispScrSavPage"=dword:00000000
    > "NoVisualStyleChoice"=dword:00000000
    > "NoSizeChoice"=dword:00000000
    > "SetVisualStyle"=-
    >
    > [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Act
    > iveDesktop] "NoChangingWallPaper"=dword:00000000
    >
    > [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\ThemeManager
    > ] "ThemeActive"="1"
    > "DllName"=hex(2):25,00,53,00,79,00,73,00,74,00,65, 00,6d,00,52,00,6f,00,6f
    > ,00,\
    > 74,00,25,00,5c,00,72,00,65,00,73,00,6f,00,75,00,72 ,00,63,00,65,00,73,00
    > ,5c,\
    > 00,54,00,68,00,65,00,6d,00,65,00,73,00,5c,00,6c,00 ,75,00,6e,00,61,00,5c
    > ,00,\
    > 6c,00,75,00,6e,00,61,00,2e,00,6d,00,73,00,73,00,74 ,00,79,00,6c,00,65,00
    > ,73,\ 00,00,00
    >
    > ****
    >
    >
    > This *should* fix your issue for you. copy/paste the contents to notepad
    > and save it as "fixme.reg" then double click, regedit will ask if its
    > okay to import, say yes. and post back your results.



    nothing changed, thank you for trying.



  6. #36
    jen Guest

    Re: spywad

    "CindyLouWhooo" <faux@notreal_gone.com> wrote in message
    news:mn.ab447d7861a6be2f.70218@notrealgone.com...
    >> "Default User" <default@user1.invalid> wrote in message
    >> news:7g6mc3dl2h6hc4so8gbq6v0pgbspfmmjud@4ax.com...
    >>> On Tue, 21 Aug 2007 16:02:45 GMT, CindyLouWhooo <faux@none_gone.com>
    >>> wrote:
    >>>>Can you point me in the direction of what settings I need to change
    >>>>in
    >>>>user and machine policies to make my desktop tab come back? This has
    >>>>been my life's quest the past few months, and boy am I really
    >>>>tired.....
    >>> See if this helps: http://www.jsifaq.com/SF/Tips/Tip.aspx?id=10716

    >> OP has XP Home. *No* Group Policy settings are available in XP
    >> Home...

    > yes they are.....
    > just hop on over to
    > http://www.j79zlr.com/gphome.php
    > works great on everything, except this one persistent problem.


    Assuming you have cleaned your "Spywad"(if you ever had it) infestation
    thoroughly(which I doubt), see here:
    Desktop Fixes, For iGuard & Spywad pests, After the infection is
    cleaned:
    http://forums.maddoktor2.com/index.php?showtopic=3924
    You *need* to submit a "HijackThis" log to a competent forum(NOT here -
    Usenet is NOT the place for it). You have probably tried so much
    off-the-wall crap, your system is *thoroughly* screwed... If you don't
    want to do this, then you need to flatten your system. Did you receive
    this box in this condition, or was "Spywad" supposedly contracted by
    you?

    -jen



  7. #37
    CindyLouWhooo Guest

    Re: spywad

    > "CindyLouWhooo" <faux@notreal_gone.com> wrote in message
    > news:mn.ab447d7861a6be2f.70218@notrealgone.com...
    >>> "Default User" <default@user1.invalid> wrote in message
    >>> news:7g6mc3dl2h6hc4so8gbq6v0pgbspfmmjud@4ax.com...
    >>>> On Tue, 21 Aug 2007 16:02:45 GMT, CindyLouWhooo <faux@none_gone.com>
    >>>> wrote:
    >>>>>Can you point me in the direction of what settings I need to change in
    >>>>>user and machine policies to make my desktop tab come back? This has
    >>>>>been my life's quest the past few months, and boy am I really
    >>>>>tired.....
    >>>> See if this helps: http://www.jsifaq.com/SF/Tips/Tip.aspx?id=10716
    >>> OP has XP Home. *No* Group Policy settings are available in XP Home...

    >> yes they are.....
    >> just hop on over to
    >> http://www.j79zlr.com/gphome.php
    >> works great on everything, except this one persistent problem.

    >
    > Assuming you have cleaned your "Spywad"(if you ever had it) infestation
    > thoroughly(which I doubt), see here:
    > Desktop Fixes, For iGuard & Spywad pests, After the infection is cleaned:
    > http://forums.maddoktor2.com/index.php?showtopic=3924
    > You *need* to submit a "HijackThis" log to a competent forum(NOT here -
    > Usenet is NOT the place for it). You have probably tried so much
    > off-the-wall crap, your system is *thoroughly* screwed... If you don't want
    > to do this, then you need to flatten your system. Did you receive this box
    > in this condition, or was "Spywad" supposedly contracted by you?
    >
    > -jen


    thanks jen

    original post clip:
    </clip>
    Arovax tells me spywad each week and points to user and machine:
    Software-Microsoft-Windows-Curr.Version-Policies........I have done a
    complete restore of said machine, without change. I have been to
    KellysKorner, and a multitude of honorable forums trying to find the
    answer.

    My house burned down and my church gave me this machine. I feel the
    hurdles I have jumped in fine tuning have been great, except for this.
    </clip>

    they had looked at the HJL and said to restore it, which (above) I had
    followed thru with.

    I don't know where you think I had tried "so much off the wall krap",
    we'll just leave that to the previous owner, which I (above) had done
    an exc job cleaning all that out, with the exception of this.

    Maybe you try all the off the wall krap but I sure don't....
    thanks



  8. #38
    Leythos Guest

    Re: spywad

    In article <mn.b1b57d781b5dbf29.70004@nonegone.com>, faux@none_gone.com
    says...
    > Arovax tells me spywad each week and points to user and machine:
    > Software-Microsoft-Windows-Curr.Version-Policies........I have done a
    > complete restore of said machine, without change. I have been to
    > KellysKorner, and a multitude of honorable forums trying to find the
    > answer.


    That can't be correct - if you had done a complete restore from clean
    media you would not have these problems you describe.

    It's time to actually do a wipe/reinstall, where you actually format the
    drive and erase all data/files - this, provided you get a clean set of
    install CD's, will give you a working machine that doesn't contain
    malware.

    After that, before you connect to the internet, you need a working
    firewall to allow you to connect without being compromised while getting
    updates and patches....

    If you have the XP cd you could also try a repair/reinstall of XP, but
    you could easily re-compromise your system.

    http://www.michaelstevenstech.com/XPrepairinstall.htm


    --
    Leythos - spam999free@rrohio.com (remove 999 to email me)

    Fight exposing kids to porn, complain about sites like PCBUTTS1.COM that
    create filth and put it on the web for any kid to see: Just take a look
    at some of the FILTH he's created and put on his website:
    http://forums.speedguide.net/archive.../t-223485.html all exposed
    to children (the link I've include does not directly display his filth).
    You can find the same information by googling for 'PCBUTTS1' and
    'exposed to kids'.

  9. #39
    Default User Guest

    Re: spywad

    On Tue, 21 Aug 2007 22:12:18 -0400, Leythos <void@nowhere.lan> wrote:

    >In article <46cb978a.455165906@news.webtv.com>, awalker@nspank.invalid
    >says...
    >> pcbutts1 wrote:
    >>
    >> >S-1-5-21-3048867430-4259222975-3608218347-1006

    >>
    >> That just shows you haven't any clue what you're doing.

    >
    >LOL, he won't understand what you are talking about.


    <snickers> That much is obvious.

    Why anybody would ever take the advice of an ethically challenged
    troglodyte like pcbutts is beyond incomprehensible.

  10. #40
    Default User Guest

    Re: spywad

    On Wed, 22 Aug 2007 10:58:53 -0400, Leythos <void@nowhere.lan> wrote:

    >In article <mn.b1b57d781b5dbf29.70004@nonegone.com>, faux@none_gone.com
    >says...
    >> Arovax tells me spywad each week and points to user and machine:
    >> Software-Microsoft-Windows-Curr.Version-Policies........I have done a
    >> complete restore of said machine, without change. I have been to
    >> KellysKorner, and a multitude of honorable forums trying to find the
    >> answer.

    >
    >That can't be correct - if you had done a complete restore from clean
    >media you would not have these problems you describe.
    >
    >It's time to actually do a wipe/reinstall, where you actually format the
    >drive and erase all data/files - this, provided you get a clean set of
    >install CD's, will give you a working machine that doesn't contain
    >malware.
    >
    >After that, before you connect to the internet, you need a working
    >firewall to allow you to connect without being compromised while getting
    >updates and patches....
    >
    >If you have the XP cd you could also try a repair/reinstall of XP, but
    >you could easily re-compromise your system.
    >
    >http://www.michaelstevenstech.com/XPrepairinstall.htm


    I agree with Leythos - time to cut your losses by completely wiping and
    reloading your system. I always recommend that when reinstalling your
    system due to a malware installation, that you go take extra step of nuking
    the entire disk. The reason being that malware can remain on a disk after
    a "format" if the format does not actually write to the sectors where the
    malware resides. Use "Boot 'n Nuke" and run several passes to be sure the
    disk is clean http://dban.sourceforge.net/ .

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •