We help IT Professionals succeed at work.

Wallpaper changed to virus warning, no wallpaper or screensaver tab in display properties. System Restore Points Missing

Last Modified: 2013-12-06
Serious problem encountered on MD's PC.
AV software (AVG AntiMalware SBS Edition) has removed Pakes and KilAV trojans/viruses.

KilAV continues to be found and healed.

Main problems are that the desktop wallpaper has been changed to a blue screen containing virus warning and in display properties both the wallpaper and screen saver tabs are missing.

The other problem is that the system restore points are missing. System Restore is enabled.

Full systems scans (in safe mode) with both av and spyware apps fail to find any further infection.

I have attached a HiJackThis log if someone would be good enouigh to take a look.
I also attached a more detailed startuplist if needed.

Watch Question

Top Expert 2007
This one is on us!
(Get your first solution completely free - no credit card required)


Thanks for your reply.

I had actually started a scan using Avast! which during it's pre boot scan found cftmon.exe - win32:rootkit.gen about 10 times. It also found spools.exe.

However the machine will now not reboot, it gets stuck while applying computer settings. I can boot to safe mode but cannot run any .exe's such as msconfig.

As a result I am now re-installing the OS as it seems to be the easier option. All data is on the network anyway.

I can't accept you as the solution, though your input may well have solved the problem. However owing to the prompness of you reply I am giving you the points.

Thanks Again.
This one is on us!
(Get your first solution completely free - no credit card required)
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.