Trojan-spy.html.smithfraud.c

[john ranger]

How do I get my Display propereties back. My tabs are gone!!



Logfile of HijackThis v1.99.1
Scan saved at 11:33:34 AM, on 4/18/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\tlntsvr.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\Program Files\Grisoft\AVG Free\avgcc.exe
C:\Program Files\Grisoft\AVG Free\avgemc.exe
C:\Documents and Settings\John Ranger\Application Data\Microsoft\Internet Explorer\Quick Launch\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
O4 - HKCU\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &ieSpell Options - res://C:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM
O8 - Extra context menu item: Check &Spelling - res://C:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM
O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1113827651596
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe

[thefultonhow]

You are clean. This is not a malware issue.

[john ranger]

Display properties My tabs are gone!! How do I get them back?

Thanks

[thefultonhow]

Originally Posted by john ranger Display properties My tabs are gone!! How do I get them back? Thanks

Looks like something might have been there previously and edited your group policy. Try going to Run, typing gpedit.msc, and then going to User Configuration > Administrative Templates > Control Panel > Display and setting each of the GPOs to "Not Configured."

[john ranger]

Did not work

[glc]

Did you know you have a Telnet server running? Have you tried reinstalling your video drivers? You may have to do a Windows repair reinstall.

[john ranger]

Did you know you have a Telnet server running?

No......... what does that mean?

[glc]

C:\WINDOWS\System32\tlntsvr.exe

If you didn't know you had it running, there's an excellent chance you have been hacked.

[john ranger]

Ok now how do I get rid of that!!??

[glc]

Kill the process and see if it comes back.

[john ranger]

Well i did a repair and I'm back to nor mal. Thanks anyway guys!!

[presidentevil]

warning before taking my advice i`m not really educated on computers or software or any of that i just learn as i go along but hopefully this will help

i had trouble with this as well, my tabs had disappeared but i fixed the problem just by following the directions below, and running ad aware and spy bot continualy

Try going to Run, typing gpedit.msc, and then going to User Configuration > Administrative Templates > Control Panel > Display

from there change your settings to enabled or disabled depending on what you want to be able to do this should allow you to find your tabs agian in display properties

i hope this worked for you

[glc]

thefultonhow posted the same thing a week ago - please read the entire thread before replying. Thank you.

- Moderator -