[psweeney44]

I am helping a friend... her destop has this overlaying page (Black screen -
Warning... you may be in danger... you may have spyware. Click here for
removal instructions) on it that I can't remove (or identify). I can't get
to or change desktop properties except through control panel, but doesn't
have an affect on this. I installed spybot (could only install through safe
mode because of this "thing") and it found lots of spyware, but having
cleaned it all, this desktop item is still performing. I have downloaded MS
anti-spyware beta program, but it won't install in safe mode, and this
desktop thing won't let the installation occur. Any ideas?

[R. McCarty]

Boot to Safe Mode - Create a New user (Temporarily). Then
reboot to Normal mode and use that new account. Hopefully,
the "Baddies" won't run there. Then install/run MS-AntiSpyware.
Sometimes, these Bars, & other junk are profile specific.

Creating a new user "might" allow you access to start the clean
up removal process.

"psweeney44" <psweeney44@discussions.microsoft.com> wrote in message
news:87FA5302-D046-4276-B815-67C5112444A0@microsoft.com...
>I am helping a friend... her destop has this overlaying page (Black
>screen -
> Warning... you may be in danger... you may have spyware. Click here for
> removal instructions) on it that I can't remove (or identify). I can't
> get
> to or change desktop properties except through control panel, but doesn't
> have an affect on this. I installed spybot (could only install through
> safe
> mode because of this "thing") and it found lots of spyware, but having
> cleaned it all, this desktop item is still performing. I have downloaded
> MS
> anti-spyware beta program, but it won't install in safe mode, and this
> desktop thing won't let the installation occur. Any ideas?

[Alias]

Sounds like it's chock full of nasties. I would reformat because it's surer
and may take less time than tracking down and removing the nasties.

Alias

"psweeney44" wrote

>I am helping a friend... her destop has this overlaying page (Black
>screen -
> Warning... you may be in danger... you may have spyware. Click here for
> removal instructions) on it that I can't remove (or identify). I can't
> get
> to or change desktop properties except through control panel, but doesn't
> have an affect on this. I installed spybot (could only install through
> safe
> mode because of this "thing") and it found lots of spyware, but having
> cleaned it all, this desktop item is still performing. I have downloaded
> MS
> anti-spyware beta program, but it won't install in safe mode, and this
> desktop thing won't let the installation occur. Any ideas?

[Rock]

psweeney44 wrote:
> I am helping a friend... her destop has this overlaying page (Black screen -
> Warning... you may be in danger... you may have spyware. Click here for
> removal instructions) on it that I can't remove (or identify). I can't get
> to or change desktop properties except through control panel, but doesn't
> have an affect on this. I installed spybot (could only install through safe
> mode because of this "thing") and it found lots of spyware, but having
> cleaned it all, this desktop item is still performing. I have downloaded MS
> anti-spyware beta program, but it won't install in safe mode, and this
> desktop thing won't let the installation occur. Any ideas?

Run these programs to check for spyware/malware. After installing
update them, then boot into safe mode and run them. You should update
and run them weekly.

Cwshredder
http://www.intermute.com/spysubtract/cwshredder_download.html

Ad-aware SE
http://www.lavasoftusa.com

Spybot Search and Destroy
http://www.safer-networking.org

Bazooka Adware and Spyware Scanner
http://download.com.com/3000-2144-10247783.html

Pest Patrol Free Pest Scanner
http://store.ca.com/dr/v2/ec_main.entry25?page=FindOutWhosWatchingYou&client=ComputerAssociates&sid=35715

If you’re still having problems after running these then run HijackThis
and post the log to one of the specialty forums, _NOT_ this one.

HijackThis
http://www.majorgeeks.com/download.php?det=3155

Forums to Interpret HijackThis Logs:

http://www.spywareinfo.com/forums/
http://forum.aumha.org/viewforum.php?f=30
http://forums.tomcoyote.org/
http://www.wilderssecurity.com/

After your system is clean use these programs to help keep it clean:

Spywareblaster
www.javacoolsoftware.com/sbdownload.html

Spywareguard
http://www.javacoolsoftware.com/sgdownload.html

IE-SPYAD
http://www.staff.uiuc.edu/~ehowes/resource.htm

--
Rock
MS MVP Windows - Shell/User

[Doug Knox MS-MVP]

http://www.short-media.com/forum/showthread.php?p=172774#post172774

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"psweeney44" <psweeney44@discussions.microsoft.com> wrote in message news:87FA5302-D046-4276-B815-67C5112444A0@microsoft.com...
>I am helping a friend... her destop has this overlaying page (Black screen -
> Warning... you may be in danger... you may have spyware. Click here for
> removal instructions) on it that I can't remove (or identify). I can't get
> to or change desktop properties except through control panel, but doesn't
> have an affect on this. I installed spybot (could only install through safe
> mode because of this "thing") and it found lots of spyware, but having
> cleaned it all, this desktop item is still performing. I have downloaded MS
> anti-spyware beta program, but it won't install in safe mode, and this
> desktop thing won't let the installation occur. Any ideas?