cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted

not work



done above it not restored my tabs ref Jokebluescreen have cleared most of the problems just can,t stop background reapearing
thanks
Highlighted

RE: not work

I finally had to reformat my drive. Once you think you are done, getting rid of this, try to reach Microsofts auto update site. If the page comes back blank, or you can not get updates to loaf correctly then you still have part of the virus.
Highlighted
Level 7
Report Inappropriate Content
Message 13 of 22

RE: not work



This may have helped, altough its too late for you chris it may help others with similar problems.

http://www.majorgeeks.com/download4899.html

Dial-a-fix tackles issues with SSL/Cryptography, Windows Update, Microsoft Installer, and many miscellaneous shell problems. Example: If you get a blank screen when trying to visit Windows Update, simply checkmark the main Windows Update checkmark (in box #3) and click GO.
Highlighted

problem

It sounds like we had a similar problem. Maybe viewing my tread can help your situation.

http://forums.mcafeehelp.com/showthread.php?t=222269

(paying it forward)
Highlighted

RE: problem



This seems to have worked
Thanks

RE: not work




Then do as in post # 12 - post a Hijackthis log on one of those forums and have them give you advice.
Highlighted

It's Generic.Fake.Alerter trojan!

I got the same one which I was able to fix manually by deleting D:\\Program Files\rhc181j0elde folder. Beware, downloading non McAfee may make it worse by getting another parasite in your computer that will be dormant until trojan will pop up after few days.

I couldn't remove the phony alert trojan desktop wallpaper because the "Display" tab in the "Display Properties" was hidden. I found a VB script that fixed it. You can copy and paste it as text file, save it as showalldisplaytabs.vbs


'Filename: showalldisplaytabs.vbs
'Restores missing tabs in the Display properties
'For use with Windows® XP only.
'Created on May 09, 2006
'~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
' Homepage: http://windowsxp.mvps.org
' Copyright © 2006, Ramesh Srinivasan
'~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Option Explicit
Dim WshShell, basekey,basekey2, rtn
Set WshShell = CreateObject("WScript.Shell")

basekey="HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\"
Task1
basekey="HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\"
Task1
basekey2="HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"
Task2
basekey2="HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"
Task2

Sub Task1()
On Error Resume Next
rtn = WshShell.Regdelete (basekey & "NoDispCPL")
rtn = WshShell.Regdelete (basekey & "NoDispAppearancePage")
rtn = WshShell.Regdelete (basekey & "NoDispBackgroundPage")
rtn = WshShell.Regdelete (basekey & "NoDispScrSavPage")
rtn = WshShell.Regdelete (basekey & "NoDispSettingsPage")
On Error Goto 0
End Sub

Sub Task2()
On Error Resume Next
rtn = WshShell.Regdelete (basekey2 & "NoThemesTab")
rtn = WshShell.Regdelete (basekey2 & "ClassicShell")
rtn = WshShell.Regdelete (basekey2 & "NoChangingWallPaper")
rtn = WshShell.Regdelete (basekey2 & "ForceActiveDesktopOn")
rtn = WshShell.Regdelete (basekey2 & "NoActiveDesktop")
rtn = WshShell.Regdelete (basekey2 & "NoWebView")
On Error Goto 0
End Sub

Wshshell.RUN ("regsvr32.exe shell32.dll -i -s")
Wshshell.RUN ("regsvr32.exe themeui.dll -s")
Msgbox "Done"
Set WshShell = Nothing
Highlighted
Level 7
Report Inappropriate Content
Message 18 of 22

RE: It's Generic.Fake.Alerter trojan!



If this refers to MBAM or SAS i can assure you, downloaded from a trusted source, these programs are 100% safe.
Highlighted

RE: It's Generic.Fake.Alerter trojan!

This was my next thought, I am going to try this. I also thought about uninstalling IE and installing a fresh copy. I'm thinking that some IE file might be corrupted.


Highlighted

RE: It's Generic.Fake.Alerter trojan!

I was able to find and remove those files as well, and I also was able to set my display back to normal and recover my missing tabs, however... I still have this re-direct browser issue.

I got the same one which I was able to fix manually by deleting D:\\Program Files\rhc181j0elde folder. Beware, downloading non McAfee may make it worse by getting another parasite in your computer that will be dormant until trojan will pop up after few days.

I couldn't remove the phony alert trojan desktop wallpaper because the "Display" tab in the "Display Properties" was hidden. I found a VB script that fixed it. You can copy and paste it as text file, save it as showalldisplaytabs.vbs

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community