A few days back, I noticed that my wallpaper had changed. I had a Star Trek picture as my background and then - BOOM - it's now solid blue. All of my icons are still there, but not my picture. When I go into Display Properties and click on Desktop, all of the options seem to be somewhat shaded a tan colour and I can't access any of them. The Browse button and the Position button aren't available either. About the only think I CAN do is change the colour of the background. Any ideas? I .

Thanks,
John
Peterborough, Ontario, C -eh- n -eh- d -eh

Hello John.

The most likely cause of this is a piece of malware stopping you (or lack of administrative privlidges).

Please follow the prework link in my signiture and post the resulting logs back here. One of the security team will be able to help you out further.

When I ran AVG, it ran for a bit and then said there was an error and it had to be shut down. I did do a quick scan that worked. Is that enough? If it is, what do I post? The Report Scan?

Thanks,
John

If you are having problems running avg then a hijackthis log on its own will be fine.

Here's my HijackThis Log:

Logfile of HijackThis v1.99.1
Scan saved at 5:04:49 PM, on 20/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Owner\Desktop\HijackThis1991.exe
N3 - Netscape 7: user_pref("browser.startup.homepage", "Home Page » Netscape.com"); (C:\Documents and Settings\Owner\Application Data\Mozilla\Profiles\default\vkmzalvs.slt\prefs.j s)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "Google"); (C:\Documents and Settings\Owner\Application Data\Mozilla\Profiles\default\vkmzalvs.slt\prefs.j s)
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O4 - Global Startup: VTAgentReboot.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{6CE10AD9-634A-4C16-A552-1929777E17F2}: NameServer = 85.255.115.54 85.255.112.105
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - c:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe


Sure hope you can help!

Thanks!

John