not work

[Former Member]

done above it not restored my tabs ref Jokebluescreen have cleared most of the problems just can,t stop background reapearing
thanks

[Former Member]

I finally had to reformat my drive. Once you think you are done, getting rid of this, try to reach Microsofts auto update site. If the page comes back blank, or you can not get updates to loaf correctly then you still have part of the virus.

[Former Member]

This may have helped, altough its too late for you chris it may help others with similar problems.

http://www.majorgeeks.com/download4899.html

Dial-a-fix tackles issues with SSL/Cryptography, Windows Update, Microsoft Installer, and many miscellaneous shell problems. Example: If you get a blank screen when trying to visit Windows Update, simply checkmark the main Windows Update checkmark (in box #3) and click GO.

[Former Member]

It sounds like we had a similar problem. Maybe viewing my tread can help your situation.

http://forums.mcafeehelp.com/showthread.php?t=222269

(paying it forward)

[Former Member]

This seems to have worked
Thanks

[exbrit]

Then do as in post # 12 - post a Hijackthis log on one of those forums and have them give you advice.

[Former Member]

I got the same one which I was able to fix manually by deleting D:\\Program Files\rhc181j0elde folder. Beware, downloading non McAfee may make it worse by getting another parasite in your computer that will be dormant until trojan will pop up after few days.

I couldn't remove the phony alert trojan desktop wallpaper because the "Display" tab in the "Display Properties" was hidden. I found a VB script that fixed it. You can copy and paste it as text file, save it as showalldisplaytabs.vbs


'Filename: showalldisplaytabs.vbs
'Restores missing tabs in the Display properties
'For use with Windows® XP only.
'Created on May 09, 2006
'~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
' Homepage: http://windowsxp.mvps.org
' Copyright © 2006, Ramesh Srinivasan
'~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Option Explicit
Dim WshShell, basekey,basekey2, rtn
Set WshShell = CreateObject("WScript.Shell")

basekey="HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\"
Task1
basekey="HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\"
Task1
basekey2="HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"
Task2
basekey2="HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"
Task2

Sub Task1()
On Error Resume Next
rtn = WshShell.Regdelete (basekey & "NoDispCPL")
rtn = WshShell.Regdelete (basekey & "NoDispAppearancePage")
rtn = WshShell.Regdelete (basekey & "NoDispBackgroundPage")
rtn = WshShell.Regdelete (basekey & "NoDispScrSavPage")
rtn = WshShell.Regdelete (basekey & "NoDispSettingsPage")
On Error Goto 0
End Sub

Sub Task2()
On Error Resume Next
rtn = WshShell.Regdelete (basekey2 & "NoThemesTab")
rtn = WshShell.Regdelete (basekey2 & "ClassicShell")
rtn = WshShell.Regdelete (basekey2 & "NoChangingWallPaper")
rtn = WshShell.Regdelete (basekey2 & "ForceActiveDesktopOn")
rtn = WshShell.Regdelete (basekey2 & "NoActiveDesktop")
rtn = WshShell.Regdelete (basekey2 & "NoWebView")
On Error Goto 0
End Sub

Wshshell.RUN ("regsvr32.exe shell32.dll -i -s")
Wshshell.RUN ("regsvr32.exe themeui.dll -s")
Msgbox "Done"
Set WshShell = Nothing

[Former Member]

If this refers to MBAM or SAS i can assure you, downloaded from a trusted source, these programs are 100% safe.

[Former Member]

This was my next thought, I am going to try this. I also thought about uninstalling IE and installing a fresh copy. I'm thinking that some IE file might be corrupted.

[Former Member]

I was able to find and remove those files as well, and I also was able to set my display back to normal and recover my missing tabs, however... I still have this re-direct browser issue.

I got the same one which I was able to fix manually by deleting D:\\Program Files\rhc181j0elde folder. Beware, downloading non McAfee may make it worse by getting another parasite in your computer that will be dormant until trojan will pop up after few days.

I couldn't remove the phony alert trojan desktop wallpaper because the "Display" tab in the "Display Properties" was hidden. I found a VB script that fixed it. You can copy and paste it as text file, save it as showalldisplaytabs.vbs