How to Remove an Undesired Background Script from Your Windows 10 Computer

Have you ever encountered a quirky situation on your computer that left you scratching your head? Recently, a friend of mine decided to have a bit of fun by writing a script on my Windows 10 laptop. This script periodically changes my desktop background to a rather amusing image of two monkeys. While it was all in good humor, I eventually wanted to reclaim control of my laptop.

If you find yourself in a similar situation, here’s how I went about identifying and removing this troublesome script.

Understanding the Script

The script my friend created wasn’t sophisticated, suggesting it could be easily found and removed. It altered my background every 10,000 seconds or each time I rebooted my laptop, showing an image located at a specific path on my hard drive.

Initially, I attempted to locate a batch file (.bat) modified recently. When that led to no results, I decided to search for images. To my surprise, I discovered the monkey image stored in a location on my computer, which provided me with a significant clue.

Steps Taken to Remove the Script

Image Deletion: Upon finding the image that kept reappearing as my background, I deleted it immediately from my computer.
Task Manager Review: I delved into the Task Manager and disabled any startup entries related to the script. This step is crucial as it prevents the script from running automatically upon reboot.
Script Analysis: I moved a copy of the script to my desktop for further investigation. Here’s a glimpse of what the script looked like:

“`vbscript
Dim shell : Set shell = CreateObject(“WScript.Shell”)
Dim wallpaper : wallpaper = “C:\Intel\download.jpg”
Set oSHApp = CreateObject(“Shell.Application”)

Do While True
shell.RegWrite “HKCU\Control Panel\Desktop\Wallpaper”, wallpaper
```
wscript.sleep 3000

shell.Run "%SYSTEMROOT%\System32\rundll32.exe user32.dll,UpdatePerUserSystemParameters", 1, True

wscript.sleep 10000
```
Loop
“`
Further Investigation: Despite my efforts, I would restart my laptop only to find the mischievous monkeys reappearing once more. This prompted me to dig deeper, and I found another version of the script saved under a different