HKEY_CURRENT_USER\Control Panel\Desktop\SCRNSAVE.EXE: "%Windir%\system32\blackster.scr"
HKEY_CURRENT_USER\Control Panel\Desktop\OriginalWallpaper: "%Windir%\system32\ctfmonb.bmp"
HKEY_CURRENT_USER\Control Panel\Desktop\Wallpaper: "%Windir%\system32\ctfmonb.bmp"
but it still acted up. The fake virus desktop background was gone, but it still said it had a virus. The person who owns the computer installed an intivirus program the the malware suggested. I forgot the name but it ended in "control center", or something. The main problem is when I start the computer normaly it shuts down after it gets started and into the desktop, it shuts down windows explorer and locks up. I cant run HJT or run AVG which I installed while in safe mode. The computer shuts down before I get a chance. I also searced for the file ctfmona.exe in safe mode and got two hits, a .exe and some other one and I deleted them both but it still isnt working.
If someone could tell what to do, since this is sort of a unique situation where I cant run an antivirus program.
Edited by S1L3N7_SWAT, 25 May 2008 - 07:06 PM.