My Funny Picture

How do I recover from the ttE.tmp virus?

While browsing around, I ended up on a site that automatically installed some software on me, with no button to exit out of it. It was called Malware Protector 2008. Ironically it is Malware itself, google wont even bring up any results on the so called product. I tried uninstalling it the way that was suggested by the program itself, probably a bad idea. I think it was an icon that I had to click to uninstall in the start menu, I don't remember exactly. I checked around for any more traces of the so called program. It was not found in C:\Programs, nor in the Add/Remove Programs icon under the control panel. When right-clicking, I noticed the Display properties were missing the option to change the screen saver and desktop. Now there was a weird new screensaver on the computer that it automatically went to, a screen full of moving bugs. Restarting the computer gave me a new desktop picture that said, Warning! Spyware detected on your computer! Install an antivirus or spyware remover to clean your computer I believe this screen was also included in the Malware that installed itself on here. I ran AVG quite a few times, and for some reason it would find new things constantly even after scanning it (but I think it would always do that). After disconnecting the external hard drives, I ran AVG more times to get results quicker (even though I could have just selected the main drive to scan). But the big problem came up as "ttE.tmp virus - win32/Heur", among many of the minor looking problems. I healed these items and restart the system. C:\Documents and Settings\Havoc\Local Settings\Temp\.ttE.tmp (2768);"Virus found Win32/Heur";"Reboot is required to finish the action" It still had the same problems, so I went into the scan settings and enabled all of the different kinds of objects to be scanned. After leaving the computer for a few hours to let it scan, I got a lot more of these "Potentially dangerous object" results in local settings\temp. I still had some form of this "ttE.tmp virus - win32/Heur" and many more issues on there from the results, so I let it heal them. When it asked if I was sure I wanted to heal some items (didn't even tell me which) that may harm the computer, I clicked "no". This window came up several times so I clicked the little box for the response to be the same each time. This is when I got the blue screen of death... I restarted the computer as normal, everything seemed fine until the interface wouldn't load. So I restarted it again, this time it did load, but... As for other problems... 1. All icons realigned to the left (pain in the ass) 2. Some programs no longer run at all. 3. Adobe Photoshop runs just fine, while Adobe Audition will load, but then stop at the end and not load at all. 4. Right clicking on any icon causes this window to pop up. Runtime Error! Program: C:\WINDOWS\system32\verclsid.exehis application has requested the Runtime to terminate it in an unusual way. Please Contact the application's support team for more information. 5. wmv video is now configured to another player, and runs at a choppy rate. 6. The display properties were available this time, but wont apply to any backgrounds 7. All background processes no longer run. 8. Can't switch to folder style "Classic View". Internet works just fine though. I'm assuming a lot of .exe files got deleted or altered... I noticed I didn't update to the newest Windows update, but after hearing someone questioning if it was worth it or caused problems, I put it off for awhile. So I just updated that. So at this point, what should I do at this point to fix things? Should I get rid of AVG/Spybot? Is there any way to get it back to the way it was? (I don't think I did any kind of registry backup...) How can I get myself to be able to right click again without a runtime error? And how do I get it so that my icons don't all get pushed to the left every time I restart? How do I get my background to display and apply my old desktop picture?

Public Comments

1. Your PC is infected with a smitfraud trojan which is causing those fake alerts. Go here to remove it free.Or, you can make a donation if you like. http://siri.geekstogo.com/SmitfraudFix.php Or, http://superantispyware.com