I need to re-enable display control panel on my xp.... Help...?
-
Recenty cleaned up a virus now I need to change my settings to how they were?
-
Answer:
TECHNICAL DESCRIPTION: I think your PC infected by Trojan.FakeAlert.ABZ. As the name says the malware displays fake alerts and pushes a rogue antivirus software (XP Antivirus) onto the affected computer. It creates the following files (I'll give a hint how the files are usually named and an example) : * %Program Files%rhc* * %Program Files%rhc*\MFC71.dll * %Program Files%rhc*\MFC71ENU.DLL * %Program Files%rhc*\Uninstall.exe * %Program Files%rhc*\database.dat * %Program Files%rhc*\license.txt * %Program Files%rhc*\msvcp71.dll * %Program Files%rhc*\msvcr71.dll * %Program Files%rhc*\rhc*.exe * %Program Files%rhc*\rhc*.exe.local * %system%\blp*.scr * %system%\lphc*.exe detected as Trojan.FakeAlert.ADA * %system%\phc*.bmp * %system%\pph*.exe detected as Trojan.FakeRemoval.A * %system%\ttkyii.dll detected as Trojan.FakeAlert.ABZ ** Examples : for "rhc*" -> "rhcv2gj0e321" , for "lph*" -> "lphcr2gj0e321" , for "pph*" -> "pphcr2gj0e321" , for "blp*" -> "blphcr2gj0e321" , for "phc*" -> "phcr2gj0e321" etc. The malware uses deceitful practices in order to trick the user into buying a rogue antivirus (XP Antivirus), by giving false detection on the so called "scan". It also changes the wallpaper with an alarm of infection and sets a screensaver (from SysInternals - bluescreen.scr) which can seem frightening to the user. Ironically the costumer is infected, but not with the fake detection given by the scaner. It uses these registry values to run itself on startup : In this key "HKLM\SOFTWARE\Microsoft\Windows\Current… it creates the value "lph*" ("lphcpuhj0e535") that points to "%system%\lph*.exe" ("%system%\lphcpuhj0e535.exe") "HKLM\SOFTWARE\Microsoft\Windows\Curre… with the value "SMr*"("SMrhctuhj0e535") which points to "%programfiles%\rhc*" ("%programfiles%\rhctuhj0e535\rhctuhj0e5… It changes these registry settings, not allowing the user to change the wallpaper or screensaver : In the "HKEY_CURRENT_USER\Software\Microsoft\Wi… key, changing the value "NoDispBackgroundPage" to "1". In the same key, this value - "NoDispScrSavPage" to "1". SOLUTION: You can let BitDefender disinfect your files.
LP at Yahoo! Answers Visit the source
Related Q & A:
- I need help on what I need to buy or do.Best solution by Yahoo! Answers
- I need help with some horse questions, can you help me.Best solution by Yahoo! Answers
- I did something really bad and now i need help please help me.Best solution by Yahoo! Answers
- I need help with a song I heard.Best solution by Yahoo! Answers
- I need a new control/remote.Best solution by Yahoo! Answers
Just Added Q & A:
- How many active mobile subscribers are there in China?Best solution by Quora
- How to find the right vacation?Best solution by bookit.com
- How To Make Your Own Primer?Best solution by thekrazycouponlady.com
- How do you get the domain & range?Best solution by ChaCha
- How do you open pop up blockers?Best solution by Yahoo! Answers
For every problem there is a solution! Proved by Solucija.
-
Got an issue and looking for advice?
-
Ask Solucija to search every corner of the Web for help.
-
Get workable solutions and helpful tips in a moment.
Just ask Solucija about an issue you face and immediately get a list of ready solutions, answers and tips from other Internet users. We always provide the most suitable and complete answer to your question at the top, along with a few good alternatives below.