I have some program or some spyware that is covereing my wallpaper. I have
the icons on my screen but the wallpaper can not been seen until you shut the
computer down and then it will appear for a second before shut-down. Behind
my Icons is just a plain white screen.

From: "Larpin" <Larpin@discussions.microsoft.com>

| I have some program or some spyware that is covereing my wallpaper. I have
| the icons on my screen but the wallpaper can not been seen until you shut the
| computer down and then it will appear for a second before shut-down. Behind
| my Icons is just a plain white screen.

Download SmitFraud.exe from the URL --
http://www.ik-cs.com/programs/virtools/SmitFraud.exe

Execute; SmitFraud.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\ScanReport.HTML will be generated. At the
end of the scan, it will be displayed in your browser (Opera, FireFox or Internet Explorer).
It is suggested that you move the report out of c:\mcafee before performing another scan.


Please Copy and Paste the contents of the HTML Log file; C:\mcafee\ScanReport.HTML in your
reply.

* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Thanks for the help. I ran the scan and it did delete some files, quite a
few actually thus I did not post it here. However my wallpaper is still
covered.
Thanks for the help


"David H. Lipman" wrote:

> From: "Larpin" <Larpin@discussions.microsoft.com>
>
> | I have some program or some spyware that is covereing my wallpaper. I have
> | the icons on my screen but the wallpaper can not been seen until you shut the
> | computer down and then it will appear for a second before shut-down. Behind
> | my Icons is just a plain white screen.
>
> Download SmitFraud.exe from the URL --
> http://www.ik-cs.com/programs/virtools/SmitFraud.exe
>
> Execute; SmitFraud.exe { Note: You must accept the default of C:\McAfee }
> Choose; Unzip
> Choose; Close
>
> NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
> FireWall to enable WGET.EXE to download the needed McAfee related files.
>
> Execute; c:\mcafee\clean.bat
> { or Double-click on 'Clean Link' in c:\mcafee }
>
> A final report in HTML format called C:\mcafee\ScanReport.HTML will be generated. At the
> end of the scan, it will be displayed in your browser (Opera, FireFox or Internet Explorer).
> It is suggested that you move the report out of c:\mcafee before performing another scan.
>
>
> Please Copy and Paste the contents of the HTML Log file; C:\mcafee\ScanReport.HTML in your
> reply.
>
> * * * Please report back your results * * *
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>

Thanks for your Help
It is still hijacked....

"Leythos" wrote:

> Use this tool
>
> AntiPuper v1.1 by secured2k
> http://secured2k.home.comcast.net/tools/AntiPuper.exe
>
> This tool unlocks the ability to change or disable the desktop background
> image or active web desktop background. You will need to manually change
> your desktop background.
>
> Go to Control Panel > Display > Desktop Tab > Customize Desktop > Web Tab.
> If you see any entries that are checked, uncheck them. Click OK.
>
> --
>
>
> spam999free@rrohio.com
> remove 999 in order to email me
>
>
>
> "Larpin" <Larpin@discussions.microsoft.com> wrote in message
> news:C9DEB781-2090-4056-B5F0-8EF4620469E8@microsoft.com...
> > Thanks for the help. I ran the scan and it did delete some files, quite a
> > few actually thus I did not post it here. However my wallpaper is still
> > covered.
> > Thanks for the help
> >
> >
> > "David H. Lipman" wrote:
> >
> >> From: "Larpin" <Larpin@discussions.microsoft.com>
> >>
> >> | I have some program or some spyware that is covereing my wallpaper. I
> >> have
> >> | the icons on my screen but the wallpaper can not been seen until you
> >> shut the
> >> | computer down and then it will appear for a second before shut-down.
> >> Behind
> >> | my Icons is just a plain white screen.
> >>
> >> Download SmitFraud.exe from the URL --
> >> http://www.ik-cs.com/programs/virtools/SmitFraud.exe
> >>
> >> Execute; SmitFraud.exe { Note: You must accept the default of
> >> C:\McAfee }
> >> Choose; Unzip
> >> Choose; Close
> >>
> >> NOTE: You may have to disable your software FireWall or allow WGET.EXE to
> >> go through your
> >> FireWall to enable WGET.EXE to download the needed McAfee related files.
> >>
> >> Execute; c:\mcafee\clean.bat
> >> { or Double-click on 'Clean Link' in c:\mcafee }
> >>
> >> A final report in HTML format called C:\mcafee\ScanReport.HTML will be
> >> generated. At the
> >> end of the scan, it will be displayed in your browser (Opera, FireFox or
> >> Internet Explorer).
> >> It is suggested that you move the report out of c:\mcafee before
> >> performing another scan.
> >>
> >>
> >> Please Copy and Paste the contents of the HTML Log file;
> >> C:\mcafee\ScanReport.HTML in your
> >> reply.
> >>
> >> * * * Please report back your results * * *
> >>
> >>
> >> --
> >> Dave
> >> http://www.claymania.com/removal-trojan-adware.html
> >> http://www.ik-cs.com/got-a-virus.htm
> >>
> >>
> >>
>
>
>

In article <O4IufC2DGHA.3468@TK2MSFTNGP15.phx.gbl>, ilovepcbutts1
@withapassion.com says...
> Subject: Re: Why is my Wallpaper is covered?
> From: Leythos <ilovepcbutts1@withapassion.com>
> Newsgroups: microsoft.public.windowsxp.help_and_support
>
> Use this tool


NNTP-Posting-Host: ppp-69-237-53-123.dsl.bkfd14.pacbell.net
69.237.53.123

Please note that PCBUTTS1 is the poster of the above message using my
NickName "Leythos". He posts from the above host, which you can validate
in the Usenet headers, since Microsoft deletes his posts from their
servers due to his lack of ethics, his theft of others code, and his
violations of their Usenet standards.

--

spam999free@rrohio.com
remove 999 in order to email me

In article <DF5A094C-0238-4816-B8CD-9F459E44BA7D@microsoft.com>,
Larpin@discussions.microsoft.com says...
> Subject: Re: Why is my Wallpaper is covered?
> From: Larpin <Larpin@discussions.microsoft.com>
> Newsgroups: microsoft.public.windowsxp.help_and_support
>
> Thanks for your Help
> It is still hijacked....

If you check the headers from the post that PCBUTTS1 made using my name,
you will find that you've been conned by PCBUTTS1.

NNTP-Posting-Host: ppp-69-237-53-123.dsl.bkfd14.pacbell.net
69.237.53.123

Please note that PCBUTTS1 is the poster of the above message you read,
using my NickName "Leythos". He posts from the above host, which
you can validate in the Usenet headers, since Microsoft deletes his
posts from their servers due to his lack of ethics, his theft of others
code, and his violations of their Usenet standards.

--

spam999free@rrohio.com
remove 999 in order to email me

In article <#WiL5z7DGHA.3984@TK2MSFTNGP14.phx.gbl>, ilovepcbutts1
@withapassion.com says...
> From: "Leythos" <ilovepcbutts1@withapassion.com>
> References: <105857E0-A6F3-4847-950A-BF45E3F54B2C@microsoft.com> <uFhW$20DGHA.1472@TK2MSFTNGP10.phx.gbl> <C9DEB781-2090-4056-B5F0-8EF4620469E8@microsoft.com> <O4IufC2DGHA.3468@TK2MSFTNGP15.phx.gbl> <DF5A094C-0238-4816-B8CD-9F459E44BA7D@microsoft.com>
> Subject: Re: Why is my Wallpaper is covered?
> Date: Mon, 2 Jan 2006 08:52:46 -0800
> Lines: 111
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
> X-RFC2646: Format=Flowed; Original
> Message-ID: <#WiL5z7DGHA.3984@TK2MSFTNGP14.phx.gbl>
> Newsgroups: microsoft.public.windowsxp.help_and_support
> NNTP-Posting-Host: ppp-69-237-53-123.dsl.bkfd14.pacbell.net 69.237.53.123

NNTP-Posting-Host: ppp-69-237-53-123.dsl.bkfd14.pacbell.net
69.237.53.123

Please note that PCBUTTS1 is the poster of the above message using my
NickName "Leythos". He posts from the above host, which you can validate
in the Usenet headers, since Microsoft deletes his posts from their
servers due to his lack of ethics, his theft of others code, and his
violations of their Usenet standards.

As a "formal" request, for documentation reason, I request that you stop
using my name to forge posts. You have been warned now.

--

spam999free@rrohio.com
remove 999 in order to email me

In article <enW9iJ9DGHA.2704@TK2MSFTNGP15.phx.gbl>, ilovepcbutts1
@withapassion.com says...
> Subject: Re: Why is my Wallpaper is covered? PCBUTTS Impersonating users again
> From: Leythos <ilovepcbutts1@withapassion.com>
> Newsgroups: microsoft.public.windowsxp.help_and_support
>
> NO! prove to me that you own the name "Leythos" and I will stop using it.
> Stop Stalking me and I will stop using it. Hehe forging your name you must
> be crazy, That's the funniest thing I've heard all year. Got lost stalker.

NNTP-Posting-Host: ppp-69-237-53-123.dsl.bkfd14.pacbell.net
69.237.53.123

Please note that PCBUTTS1 is the poster of the above message using my
NickName "Leythos". He posts from the above host, which you can validate
in the Usenet headers, since Microsoft deletes his posts from their
servers due to his lack of ethics, his theft of others code, and his
violations of their Usenet standards.

As a "formal" request, for documentation reason, I request that you stop
using my name to forge posts. You have been warned now.
--

spam999free@rrohio.com
remove 999 in order to email me

Hey why don't yall find somewhere nice and quiet to Fight......I am trying to
get my PC working here.

Thanks for the help anyway whomever yall are.

"Leythos" wrote:

> In article <O4IufC2DGHA.3468@TK2MSFTNGP15.phx.gbl>, ilovepcbutts1
> @withapassion.com says...
> > Subject: Re: Why is my Wallpaper is covered?
> > From: Leythos <ilovepcbutts1@withapassion.com>
> > Newsgroups: microsoft.public.windowsxp.help_and_support
> >
> > Use this tool
>
>
> NNTP-Posting-Host: ppp-69-237-53-123.dsl.bkfd14.pacbell.net
> 69.237.53.123
>
> Please note that PCBUTTS1 is the poster of the above message using my
> NickName "Leythos". He posts from the above host, which you can validate
> in the Usenet headers, since Microsoft deletes his posts from their
> servers due to his lack of ethics, his theft of others code, and his
> violations of their Usenet standards.
>
> --
>
> spam999free@rrohio.com
> remove 999 in order to email me
>

In article <13E3065E-0AF0-4A35-B092-FF3B3A555FF4@microsoft.com>,
Larpin@discussions.microsoft.com says...
> Thanks for the help anyway whomever yall are.

Then thank the real author of the product that helped you, he's
available to thank here:


Secured2K's AntiPauper (download link/info at)
http://forums.mcafeehelp.com/viewtopic.php?t=65072

You thanked the person that never created the tool, takes credit for
others hard work, and has not posted anything that's helped anyone that
he didn't copy from some place else.

--

spam999free@rrohio.com
remove 999 in order to email me