Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Destop White After Removing Malware


  • Please log in to reply
33 replies to this topic

#1 zitnok

zitnok

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:03:14 AM

Posted 30 September 2008 - 07:26 AM

Hi,
Thanks in advance to anyone who might be able to help with this problem.
I had an infestation of 'smart antivirus 2009'. As well as all the popup warnings of infections my screen went white. By googling I found your instructions on how to remove it using Malwarebytes Anti malware. I ran the program and removed all the objects connected with the offending program. When I rebooted the desktop screen was white. I checked the display settings and it was set to full colour. I ran a scan again, rebooted and the white screen was there.
After several reboots I ran scan with Spyware doctor and it found this TT_Trojan. This has been removed. Is this connected to the display problem.
What can be causing the problem and how can it be rectified?
zitnok


XP Home SP3, Intel Core2 Duo, 2GB RAM, 500GB, MS-7387 motherboard, GeForce 8400GS

BC AdBot (Login to Remove)

 


m

#2 mward52

mward52

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:09:14 PM

Posted 30 September 2008 - 07:38 AM

Had kind of the same problem last week. You might want to try Trojan Remover (http://www.simplysup.com/tremover/). It is a 30 day evaluation copy, but it worked for me. Good Luck!

#3 zitnok

zitnok
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:03:14 AM

Posted 30 September 2008 - 09:20 AM

Thanks for the suggestion. Ran Trojan Remover and it found no malicious files. Just after posting I had rebooted and AVG had found Dropper.Bravox.A and BackDoor.Agent.VCA trojans. Which it removed. I will reboot again in a minute and see what happens.

#4 hamluis

hamluis

    Moderator


  • Moderator
  • 54,839 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:08:14 PM

Posted 30 September 2008 - 09:50 AM

Are you running Live Desktop?

Louis

#5 zitnok

zitnok
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:03:14 AM

Posted 30 September 2008 - 10:19 AM

Sorry I don't what live desktop is.

I am also getting new notifications of Trojans in System Volume Information. Sometimes AVG can clean them, sometimes it can't.

#6 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:02:14 AM

Posted 30 September 2008 - 10:23 AM

Sorry I don't what live desktop is.

I am also getting new notifications of Trojans in System Volume Information. Sometimes AVG can clean them, sometimes it can't.


Live Desktop is where you can have HTML Content on your background. Its called Active Desktop.

#7 zitnok

zitnok
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:03:14 AM

Posted 30 September 2008 - 10:25 AM

Right I understand. Do I want to have it?

#8 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:02:14 AM

Posted 30 September 2008 - 10:28 AM

It all depends on your preference.

#9 zitnok

zitnok
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:03:14 AM

Posted 30 September 2008 - 10:31 AM

What I meant is, does it have anything to do with rectifying the missing colour on my desktop?

#10 nigglesnush85

nigglesnush85

  • Members
  • 4,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:02:14 AM

Posted 30 September 2008 - 10:32 AM

If your AV product is picking up some infections I would run some free online virus scanners just to get some idea as to how clean the system is.

1.Eset
2.Kaspersky
3.Bitdefender
4.Panda
5.McAfee
Regards,

Alan.

#11 hamluis

hamluis

    Moderator


  • Moderator
  • 54,839 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:08:14 PM

Posted 30 September 2008 - 10:32 AM

FWIW: When trying to rid the system of unwanted malware...it's best to (temporarily) disable System Restore before doing the scan.

Otherwise, you may include malware in your SR files.

When Active Desktop malfunctions...it turns the desktop white, IME.

Louis

Edited by hamluis, 30 September 2008 - 10:36 AM.


#12 zitnok

zitnok
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:03:14 AM

Posted 30 September 2008 - 10:49 AM

First turn off System Restore , then disable my anti virus and then do a scan with one of the Programs mentioned by nigglesnush. Is that the way I should go about it?

#13 zitnok

zitnok
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:03:14 AM

Posted 30 September 2008 - 10:56 AM

If I disable System Restore it says it 'all existing restore points will be deleted. Can I afford to do that?

#14 nigglesnush85

nigglesnush85

  • Members
  • 4,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:02:14 AM

Posted 30 September 2008 - 10:56 AM

I would leave system restore active for now, just in case you need to restore the system. Also some scans may require that the AV tool is disabled, if the tool requires it to be disabled it will let you know.
Regards,

Alan.

#15 hamluis

hamluis

    Moderator


  • Moderator
  • 54,839 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:08:14 PM

Posted 30 September 2008 - 12:14 PM

Alan is correct in approach, see http://msmvps.com/blogs/spywaresucks/archi...9/17/66724.aspx

I don't use SR, preferring to rely on my periodic disk images...so I don't have the perspective emphasized in the link.

Louis

Edited by hamluis, 30 September 2008 - 12:16 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users