"David H. Lipman" wrote:

> From: "Sarah" <Sarah@discussions.microsoft.com>
>
> Replies are inline...
>
> | REGEDIT4
>
> <-- should be an empty line here -->
>
> | [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Explorer\Advanced]
> | "Start_EnableDragDrop"=dword:00000001
>
> <-- should be an empty line here -->
>
> | [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\ActiveDesktop]
> | "NoChangingWallPaper"=-
> |
> | [-HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Group Policy
> | Objects]
> |
>
> <-- The above need to be on ONE line and not be wrapped -->
>
>
> | [-HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\TaskManager]
> |
> | [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\General]
> | "WallpaperFileTime"=-
> | "WallpaperLocalFileTime"=-
> | "Wallpaper"=-
> |
> | [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Desktop\General]
> | "WallpaperFileTime"=-
> | "WallpaperLocalFileTime"=-
> | "Wallpaper"=-
>
> <-- should be an empty line here -->
>
>
> | [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer]
> | "NoActiveDesktopChanges"=-
> | "ForceActiveDesktopOn"=-
> | "NoSaveSettings"=-
> | "NoChangeStartMenu"=-
> | "NoSetTaskbar"=-
> | "NoStartMenuSubFolders"=-
> | "NoStartMenuMFUprogramsList"=-
> | "NoStartMenuMorePrograms"=-
> | "NoToolbarsOnTaskbar"=-
> | "NoViewContextMenu"=-
> | "NoFind"=-
> | "NoRun"=-
> | "NoSetFolders"=-
> | "NoDesktop"=-
> | "NoControlPanel"=-
> | "NoSMHelp"=-
> | "NoWinKeys"=-
> | "NoThemesTab"=-
>
> <-- should be an empty line here -->
>
>
> | [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\policies\Explorer]
> | "NoActiveDesktopChanges"=-
> | "ForceActiveDesktopOn"=-
> | "NoSaveSettings"=-
> | "NoChangeStartMenu"=-
> | "NoSetTaskbar"=-
> | "NoStartMenuSubFolders"=-
> | "NoStartMenuMFUprogramsList"=-
> | "NoStartMenuMorePrograms"=-
> | "NoToolbarsOnTaskbar"=-
> | "NoViewContextMenu"=-
> | "NoFind"=-
> | "NoRun"=-
> | "NoSetFolders"=-
> | "NoDesktop"=-
> | "NoControlPanel"=-
> | "NoSMHelp"=-
> | "NoWinKeys"=-
> | "NoThemesTab"=-
> |
> | [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\System]
> | "NoDispAppearancePage"=-
> | "Wallpaper"=-
> | "WallpaperStyle"=-
> | "NoDispBackgroundPage"=-
> | "DisableRegistryTools"=-
> | "DisableRegedit"=-
> | "DisableTaskMgr"=-
> | "NoDispSettingsPage"=-
> | "NoDispScrSavPage"=-
> | "NoDispCPL"=-
> | "SetVisualStyle"=-
> |
> | [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Policies\System]
> | "NoDispAppearancePage"=-
> | "Wallpaper"=-
> | "WallpaperStyle"=-
> | "NoDispBackgroundPage"=-
> | "DisableRegistryTools"=-
> | "DisableRegedit"=-
> | "DisableTaskMgr"=-
> | "NoDispSettingsPage"=-
> | "NoDispScrSavPage"=-
> | "NoDispCPL"=-
> |
> | [HKEY_CURRENT_USER\Control Panel\Desktop]
> | "Wallpaper"=-
> | "WallpaperStyle"=-
> |
> | [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\ThemeManager]
> | "ThemeActive"="1"
> | "DllName"=hex(2):25,00,53,00,79,00,73,00,74,00,65, 00,6d,00,52,00,6f,00,6f,00,\
> | 74,00,25,00,5c,00,72,00,65,00,73,00,6f,00,75,00,72 ,00,63,00,65,00,73,00,5c,\
> | 00,54,00,68,00,65,00,6d,00,65,00,73,00,5c,00,6c,00 ,75,00,6e,00,61,00,5c,00,\
> | 6c,00,75,00,6e,00,61,00,2e,00,6d,00,73,00,73,00,74 ,00,79,00,6c,00,65,00,73,\
> | 00,00,00
>
>
>
> Make sure the account that nees to be fixed has administrative rights.
> If it doesn't, give it administrative rights, login with the account, merge the repaired REG
> file.
> Then logout and restore the orginal rights to that user.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>

I have it saved in the file EXACTLY how you have it and it still will not
work. Is there anything else I can do to repair this problem?

From: "Sarah" <Sarah@discussions.microsoft.com>


| I have it saved in the file EXACTLY how you have it and it still will not
| work. Is there anything else I can do to repair this problem?


Download SmitFraud.exe from the URL --
http://www.ik-cs.com/programs/virtools/SmitFraud.exe

Execute; SmitFraud.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\ScanReport.HTML will be generated. At the
end of the scan, it will be displayed in your browser (Opera, FireFox or Internet Explorer).
It is suggested that you move the report out of c:\mcafee before performing another scan.


Please Copy and Paste the contents of the HTML Log file; C:\mcafee\ScanReport.HTML in your
reply.

* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm