TechSpot

How to remove virus that infected by porn without reformatting?

By LeapingThongs
Dec 23, 2007
  1. how to remove virus that infected by porn without reformatting? it replace wallpaper with fake anti virys advertisement.

    tried avg but no work.
     
  2. Daveskater

    Daveskater Banned Posts: 2,031

    Please read this thread If your system is infected, read this before deciding whether to Clean or Format.

    If you decide to clean your system, follow these instructions Virus/Spyware/Malware, preliminary removal instructions and post fresh HJT, Combofix, and AVG Antispyware logs as attachments to a new reply in this thread as well as the result of the Panda Antirootkit scan.

    The best protection is common sense. Pr0n and p2p are the best ever ways to get infected.


    This thread is for the use of LeapingThongs only. Please don't post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  3. LeapingThongs

    LeapingThongs TS Rookie Topic Starter Posts: 51

    heres my hijackthis log

    unsafe tgps..... pop ups.... ask yes or cancel.... clicked cancel.... infected..... wallpaper replaced by fake anti virus advertisement..... 3 fake anti virus icon apear on desktop.... delete but resurrect itself....

    have scanned with:
    - TCspy
    - spybot
    - ad-aware
    - antivir
    - nod32
    - AVG anti virus
    - many more dont remember
    - each scanner takes whole day! 5,6,7 hours!
    - scanned all in safemode

    next
    - smitrem
    - smitfraudfix
    smitfraudfix got rid of the 3 fake icon on desktop and fake advertisement wallpaper... all happy.... but few hours comes back... sad.....

    next
    - atf cleaner
    - rogueremover
    -

    and now
    - AVG anti spyware
    it caught umm.. if i remmeber correctly... backdoor something and adwaretoolbar something and ummm grrr forgot.... umm cant think anyway it caught 3 malwares.
    edit: oh yeah the othe rone is legmir something something.

    next
    - ccleaner reg cleaner
    - ccleaner cleaner

    so far so good.... dont know if it really clean.

    next use HiJackThis and here sthe log


    <right now in the progress of trying to do attachment for hijackthis and renaming the exe.... will post log when i successfully complete>
     
  4. Daveskater

    Daveskater Banned Posts: 2,031

    Please edit your post to remove your HJT log and attach it instead. I have linked you to instructions on how to do this in my last reply.

    If you followed the instructions that I gave you, you should have 3 logs for me and wouldn't need to list the programs that you used. If you're not going to follow the instructions that I give you, then I cannot help you.

    Also, you did not rename the HJT executable as the instructions tell you. Please read the thread in the first link that I gave you in my last reply, and if you decide to clean your system, follow the instructions exactly in the second link that I provided, and post back with your logs as requested.


    This thread is for the use of LeapingThongs only. Please don't post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  5. LeapingThongs

    LeapingThongs TS Rookie Topic Starter Posts: 51

    ummmm uhh..... oh ok.

    well.... im a bit of a hard headed.... and hard to follow instruction but... ill try and read your post through. will let know if understand and will do as said.





    quick question = is it matter if scan hijackthis in safemode or normal mode?






    hmmm.... this might take a while.... seems difficult and complicated.... but will manage. will let know.
     
  6. Daveskater

    Daveskater Banned Posts: 2,031

    I think the instructions tell you to run it in safe mode, as it can find extra things there that you can't always see in Normal Mode.

    Just read the instructions through one by one and take your time, there's no deadline ;)
     
  7. LeapingThongs

    LeapingThongs TS Rookie Topic Starter Posts: 51

    nevemrind.............

    how do i get this attach out? it is old one
     

    Attached Files:

  8. Tedster

    Tedster Techspot old timer..... Posts: 10,074   +13

Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.