How to remove virus that infected by porn without reformatting?

[LeapingThongs]

how to remove virus that infected by porn without reformatting? it replace wallpaper with fake anti virys advertisement.

tried avg but no work.

 

[Daveskater]

Please read this thread If your system is infected, read this before deciding whether to Clean or Format.

If you decide to clean your system, follow these instructions Virus/Spyware/Malware, preliminary removal instructions and post fresh HJT, Combofix, and AVG Antispyware logs as attachments to a new reply in this thread as well as the result of the Panda Antirootkit scan.

The best protection is common sense. Pr0n and p2p are the best ever ways to get infected.


This thread is for the use of LeapingThongs only. Please don't post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[LeapingThongs]

heres my hijackthis log

unsafe tgps..... pop ups.... ask yes or cancel.... clicked cancel.... infected..... wallpaper replaced by fake anti virus advertisement..... 3 fake anti virus icon apear on desktop.... delete but resurrect itself....

have scanned with:
- TCspy
- spybot
- ad-aware
- antivir
- nod32
- AVG anti virus
- many more dont remember
- each scanner takes whole day! 5,6,7 hours!
- scanned all in safemode

next
- smitrem
- smitfraudfix
smitfraudfix got rid of the 3 fake icon on desktop and fake advertisement wallpaper... all happy.... but few hours comes back... sad.....

next
- atf cleaner
- rogueremover
-

and now
- AVG anti spyware
it caught umm.. if i remmeber correctly... backdoor something and adwaretoolbar something and ummm grrr forgot.... umm cant think anyway it caught 3 malwares.
edit: oh yeah the othe rone is legmir something something.

next
- ccleaner reg cleaner
- ccleaner cleaner

so far so good.... dont know if it really clean.

next use HiJackThis and here sthe log


<right now in the progress of trying to do attachment for hijackthis and renaming the exe.... will post log when i successfully complete>

 

[Daveskater]

Please edit your post to remove your HJT log and attach it instead. I have linked you to instructions on how to do this in my last reply.

If you followed the instructions that I gave you, you should have 3 logs for me and wouldn't need to list the programs that you used. If you're not going to follow the instructions that I give you, then I cannot help you.

Also, you did not rename the HJT executable as the instructions tell you. Please read the thread in the first link that I gave you in my last reply, and if you decide to clean your system, follow the instructions exactly in the second link that I provided, and post back with your logs as requested.


This thread is for the use of LeapingThongs only. Please don't post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[LeapingThongs]

ummmm uhh..... oh ok.

well.... im a bit of a hard headed.... and hard to follow instruction but... ill try and read your post through. will let know if understand and will do as said.





quick question = is it matter if scan hijackthis in safemode or normal mode?






hmmm.... this might take a while.... seems difficult and complicated.... but will manage. will let know.

 

[Daveskater]

quick question = is it matter if scan hijackthis in safemode or normal mode?

I think the instructions tell you to run it in safe mode, as it can find extra things there that you can't always see in Normal Mode.

Just read the instructions through one by one and take your time, there's no deadline

 

[LeapingThongs]

Nevemrind.............

how do I get this attach out? it is old one

 

[Tedster]

https://www.techspot.com/community/...lware-removal-preliminary-instructions.58138/