OFF-TOPIC: Help Needed for a Computer Problem...

[bpc]

Are there any tech's out there that can help me, cause I can't help myself right now! I have this stupid screen sitting on top of my desktop. It has a property code of "file:///C:/WINDOWS/desktop.html#". Its just basically sitting there on top of my background image and its not going anywhere. I've tried several different methods to remove it but I can't seem to get rid of it. I'm not very computer SAVY per say, so I could use some help. Anybody have any experience with removing these things? It really isn't even doing anything to my computer that I know besides being a eye-sore.

Any help would be appreciated. :)

[Spider]

Spiders advice , unplug your Machine , take the Power cord down to a computer store , find a Macnine that will fit your power cord ;D
other then that I cant help

[Hotrod]

Pez paging doctor Pez

[bpc]

This is so annoying! I hate when I don't know how to do something like this! And it would seem so easy to just remove it but I can't! Stupid Anti-Virus Gold got me. It has a direct link right in the middle of the desktop image right to their site. I just had the fan replaced in my laptop that I bought from best buy and they basically reset my whole system. So I wandering around surfing the web and I didn't even know my Norton Anti-Virus software wasn't functioning until it was too late and this damn thing is sitting on my desktop.

[Needa Pass Rush]

did you try Control-Alt-Delete and see what was running on your machine for programs?

[Pezman]

Pez paging doctor Pez

Ewww... this sounds more like the work of Steve Jobs ROFL!

Ok BPC, click ctrl-alt-del and it should open up your windows task manager. From there, look in the "Processes" tab (second one in) and glance at the image names. Do you see anything out of the ordinary there? Better yet, check and see if a javascript is running. It would look something like Jvascrpt.exe (or something like that)

It sounds like you have an executable that needs to be closed... Can you get a screen grab for us by chance?

[Rock Chalk]

Its spyware bpc. Run spybot/ad aware and see if that gets rid of it.

[i4jelway7]

ok first things first.. go to microsoft.com and download the antispyware beta download, install it but don't run it yet, now check for the updates for the program, then run a full system scan and remove any spyware found, then reboot the computer, now try to delete the file, if that doesn't work come back here for more instructions

[Pezman]

Ok, I agree with Alec, its gotta be spyware/malware. What you need to do is get the progger "Hijackthis" and see if it can spot your problem. Here is the linkies...

http://www.greyknight17.com/spy/HijackThis.exe

By the way, when you do download it, be sure to go to My Computer -> Tools / View -> Folder Options -> View tab
and make sure that "show hidden files & folders" is enabled. Also make sure that "Display the contents of System Folders" is checked as well. Make sure that search system folders, search hidden files & folders, and search subfolders are checked just to be sure.

[bpc]

Is there an easy way to do a screen grab? I'm searching the internet for anything that resembles it.

Ok, I opened the task managing window and I have like 30 different processes running... is that normal? I swear I've never seen that many. As for the jvascript.exe, I didn't see that one. Here are a few ones that look and sound weird...

navapsvc.exe ---- system
ccevtmgr.exe ---- system
svchost.exe ---- local service/network service

There are seriously like 30 different things going on with the .exe code on it. Should I end them all?

[Tredici]

I think the brilliant ones practicing spyware tactics should be fed slowly through a meat slicer set on thin cut....

[Pezman]

Is there an easy way to do a screen grab? I'm searching the internet for anything that resembles it.

Ok, I opened the task managing window and I have like 30 different processes running... is that normal? I swear I've never seen that many. As for the jvascript.exe, I didn't see that one. Here are a few ones that look and sound weird...

navapsvc.exe ---- system
ccevtmgr.exe ---- system
svchost.exe ---- local service/network service

There are seriously like 30 different things going on with the .exe code on it. Should I end them all?

No... last thing you want to do is crash your system. For now, just d/l the "highjack this" progger and see if it can find what is corrupting your desktop.

[bpc]

ok, i'm following your lead, i'll be back in one moment.

Deb, I like your idea! :)

[Rock Chalk]

Is there an easy way to do a screen grab? I'm searching the internet for anything that resembles it.

Ok, I opened the task managing window and I have like 30 different processes running... is that normal? I swear I've never seen that many. As for the jvascript.exe, I didn't see that one. Here are a few ones that look and sound weird...

navapsvc.exe ---- system
ccevtmgr.exe ---- system
svchost.exe ---- local service/network service

There are seriously like 30 different things going on with the .exe code on it. Should I end them all?

svchost is good, anything with NAV in it is Norton, smss, csrss, winlogon, alg, and spoolsv are all system exe files that should be running

Go to your Task Manager (when you ALT CTRL DELETE) and go to processes and sort by User Name. Most of the stuff in System is supposed to be there, but look through it for anyting unfamiliar. Anything under your user name you will either recognize as a running program (if you have any running, including in your systray) or you will not recognize it at all and its probably not good.

[bpc]

OK OK OK, i'm back. I ran that program (thank you for all the help everybody!) and here is what I got back, maybe this will help you, help me!

Logfile of HijackThis v1.99.1
Scan saved at 10:21:43 AM, on 5/26/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\System32\carpserv.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\winnook.exe
C:\Program Files\BigFix\BigFix.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\Chris Hogge\My Documents\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.emachines.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.emachines.com/
F2 - REG:system.ini: Shell=Explorer.exe, msmsgs.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Atray] atray.exe
O4 - HKLM\..\Run: [Removecpl] removecpl.exe
O4 - HKLM\..\Run: [bcmwltry] bcmwltry.exe
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [MSN Messenger] C:\WINDOWS\System32\msmsgs.exe
O4 - HKLM\..\Run: [Security iGuard] C:\Program Files\Security iGuard\Security iGuard.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Intel system tool] C:\WINDOWS\System32\winnook.exe
O4 - HKCU\..\Run: [WindowsFY] c:\bsw.exe
O4 - Global Startup: BigFix.lnk = C:\Program Files\BigFix\BigFix.exe
O9 - Extra button: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Program Files\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Program Files\ICQ\ICQ.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra button: Microsoft AntiSpyware helper - {FCDCE250-C8CF-48A0-8FBE-A468E3B0B64F} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {FCDCE250-C8CF-48A0-8FBE-A468E3B0B64F} - (no file) (HKCU)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.emachines.com
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

[i4jelway7]

you need to run the microsoft antispyware, it gets rid of almost all the spyware/adware crap that is floating around your computer and it prevents the spyware/adware from installing

[Hotrod]

Thats quite the list I would get ride of the "hotoldfatdudesinthongs.exe" if I were you ;D

[DrFate]

I like the MS product too

http://www.microsoft.com/athome/security/spyware/software/default.mspx

[bloodsunday]

I recommend installing Linux immediately. Never had a spyware problem.

[bpc]

I heard that about Linux.

As for the Microsoft spyware, I downloaded it and it even detected and diagnosed the problems I've been having to a "T". It says it has treated them and removed them from my computer but they are still on my computer. How long does it take for the scan and delete to go into effect? My desktop still has the black screen on it and I also have the pop up that says my computer is affected with a virus every ten minutes.

[Rock Chalk]

I recommend installing Linux immediately. Never had a spyware problem.
Thats because only dorks use Linux.

If he installs it, then everyone installs it, then you will have spyware, adware and virus' galore.

[Spider]

Thats because only dorks use Linux.

If he installs it, then everyone installs it, then you will have spyware, adware and virus' galore.
YaHOOOOOOOOOOO I am not a dork ;D

[Pezman]

I heard that about Linux.

As for the Microsoft spyware, I downloaded it and it even detected and diagnosed the problems I've been having to a "T". It says it has treated them and removed them from my computer but they are still on my computer. How long does it take for the scan and delete to go into effect? My desktop still has the black screen on it and I also have the pop up that says my computer is affected with a virus every ten minutes.

Yikes! Ok, looking through the logs, so far you look clean. But I am concerned that some of the bloatware you have on there could be affecting performance as well. Clean your webcache in addition to using a good spyware cleaner.
There may be a lot of junk entries left behind in the registry by spyware and other programs as well btw. Be sure to download a registry cleaner (Regseeker is a good one)

Lastly, if you get the chance, run Windows via Safemode when booting up (Hit the F8 button before windows starts) and see if the anomoly is appearing even in safe mode...

[PatsWin2002]

bpc, it doesn't sound like it's removing it completely.

Meaning, it recognizes it and deletes what it recognizes, but there's probably some code in the registry or hidden somewhere that respawns the damn thing.

Like a hydra.....cut the head off and it grows back.

I had a similar problem once and it took several spyware removal programs to finally get rid of it completely. I even followed manual removal instructions at times. It's such a pain in the butt.

I had luck with a free program called Spysweeper by Webroot.
http://www.download.com/1200-2018-5146245.html

You could go to CNET (download.com) and look for other free spyware removal programs and try those.
http://www.download.com/System-Utilities/3150-8022_4-0.html?tag=stbc.gp

[PatsWin2002]

YaHOOOOOOOOOOO I am not a dork ;D

I feel a poll coming. ;)

[i4jelway7]

I heard that about Linux.

As for the Microsoft spyware, I downloaded it and it even detected and diagnosed the problems I've been having to a "T". It says it has treated them and removed them from my computer but they are still on my computer. How long does it take for the scan and delete to go into effect? My desktop still has the black screen on it and I also have the pop up that says my computer is affected with a virus every ten minutes.


run the microsoft program again.. make sure you change the scan options to do a thorough scan..

what virus does it say the computer has?

What anti-virus program are you running?

how up to date is your operating system? do the windows update and make sure you have all the high priority updates and get the microsoft malicious software removal tool

[bpc]

PHEW! OKAY! Here we are. I had to do some backflips but I finally got rid of the evil black screen and the annoying pop up box. I had to delete my PRIMARY Windows XP account and start a new one where I guess the code isn't latched on to. So I basically began using this computer again for the first time yesterday so I haven't even put that much stuff on it.

The problem I have with "Best Buy" is that I bought this laptop with the warranty and the fan went out on it... now I send it in, it comes back and all of my files, photos, games, and everything have been wiped from it. I'm upset at losing pictures because I had my Elway Canton pictures from last year on here, as well as many other trips i've taken. To completely wipe off your Anti Virus protection? Just caused me 12 hours of hassle for nothing.

Ah well. I'm going to take into account the places you guys have recommended and download that stuff just to help my computer run better. I appreciate everybodies help and I definitely know where to turn if I have any future problems.

Thank you all again, and this only solidifies the fact that not only is this a excellent Broncos site, its a great people site. Everybody is eager to help!

[i4jelway7]

The problem I have with "Best Buy" is that I bought this laptop with the warranty and the fan went out on it... now I send it in, it comes back and all of my files, photos, games, and everything have been wiped from it. I'm upset at losing pictures because I had my Elway Canton pictures from last year on here, as well as many other trips i've taken. To completely wipe off your Anti Virus protection? Just caused me 12 hours of hassle for nothing.



You can't really blame best buy, it's pretty much standard procedure to wipe & reload computers that come into service, depending on the technician most won't wipe out your hard drive unless absolutely necessary