comorin
Topic Author
Posts: 3857
Joined: Sun May 29, 2005 5:52 am

PC Malware Goes To Porn Sites

Tue May 04, 2010 10:04 pm

A friend of mine had her PC infected yesterday with some malware. It pops up a a lot of dialog boxes, disables task manager, and installs short cuts to porn sites. An initial attempt to clean up her machine worked, but the virus reappeared on booting up.

Have any of you experienced this, and is there a removal tool anywhere for this particular pest?

Thanks all.
 
Newark777
Posts: 8284
Joined: Thu Dec 02, 2004 6:23 am

RE: PC Malware Goes To Porn Sites

Tue May 04, 2010 10:06 pm

Sounds like it's firmly entrenched. Reinstalling the OS is the probably best at that point, especially if she has a backup.
Why grab a Heine when you can grab a Busch?
 
futurepilot16
Posts: 1756
Joined: Sun Mar 11, 2007 7:20 am

RE: PC Malware Goes To Porn Sites

Tue May 04, 2010 10:15 pm

Quoting comorin (Thread starter):
Have any of you experienced this, and is there a removal tool anywhere for this particular pest?

Thanks all.

Yes. Try and download Spybot search and destroy on a separate computer, then transfer the file to the infected computer.
"The brave don't live forever, but the cautious don't live at all."
 
Fly2HMO
Posts: 7207
Joined: Sat Jan 24, 2004 12:14 pm

RE: PC Malware Goes To Porn Sites

Tue May 04, 2010 10:17 pm

The only place she could have gotten something like that was if she was visiting shady non-pg rated sites in the first place  but I digress...

First off, need much more details, what's the OS? What antivirus or other protections are installed?

Quoting newark777 (Reply 1):
Sounds like it's firmly entrenched. Reinstalling the OS is the probably best at that point, especially if she has a backup.

        

NEGATIVE. Do this as a last resort ONLY. The OS is not toast yet by any means. I'm talking from experience.

Quoting comorin (Thread starter):
Have any of you experienced this, and is there a removal tool anywhere for this particular pest?


Run the system in safe mode before doing any of the following installations and/or scans.

The best I've used )and I've used ALL the major ones) is Spybot http://download.cnet.com/Spybot-Sear...-Destroy/3000-8022_4-10122137.html

After that, have her get rid of whatever antivirus she has and tell her to get Avast (as above, best one I've ever used) http://www.avast.com/free-antivirus-download

And finally she should install this: http://www.javacoolsoftware.com/spywareblaster.html

[Edited 2010-05-04 15:18:50]
 
signol
Posts: 2652
Joined: Tue Oct 30, 2007 5:18 pm

RE: PC Malware Goes To Porn Sites

Tue May 04, 2010 10:18 pm

Trend Micro offer a free home-user virus scanner and cleanup tool:
http://housecall.trendmicro.com/uk/
(I should say that I work for a security distributor, and Trend is one of the Enterprise products we sell. Other products are available)

Give it a go, it can't hurt if you're going to reinstall Windows anyway.

I once had a virus that used to give a popup, which would reboot the PC whenever you clicked "ok" on it. I googled the exact text in the popup, and found a tutorial on removing the virus - which files to delete, and which registry entries to edit (note: be very careful with registry edits!) Since then, no problems.

signol

[Edited 2010-05-04 15:18:54]
Flights booked: NWI-AMS-JNB-DUR, JNB-AMS-NWI
 
Newark777
Posts: 8284
Joined: Thu Dec 02, 2004 6:23 am

RE: PC Malware Goes To Porn Sites

Tue May 04, 2010 10:27 pm

Quoting Fly2HMO (Reply 3):
NEGATIVE. Do this as a last resort ONLY. The OS is not toast yet by any means. I'm talking from experience.

I'm talking from experience as well, and since I always have everything completely backed up, if an issue arises it's easier to scrub everything and restore the system. It could take longer to research the programs and do all the scans, and it still might not fix it. Don't back up? Well, you get a wag of the finger, and hopefully a lesson is learned.  

Why grab a Heine when you can grab a Busch?
 
CPH-R
Posts: 6059
Joined: Thu May 03, 2001 5:19 pm

RE: PC Malware Goes To Porn Sites

Tue May 04, 2010 10:27 pm

If she has Windows installed, she could also give MSSE a shot. It's a free anti-malware/spyware programme from Microsoft: http://www.microsoft.com/security_essentials/
 
Fly2HMO
Posts: 7207
Joined: Sat Jan 24, 2004 12:14 pm

RE: PC Malware Goes To Porn Sites

Tue May 04, 2010 10:32 pm

Quoting newark777 (Reply 5):

I'm talking from experience as well, and since I always have everything completely backed up, if an issue arises it's easier to scrub everything and restore the system.

Sure that works too, yet doing what you do would take what, 1hr if you're lucky?

That's my last resort for many reasons. Although it could be good excuse for upgrading to a newer OS   

Quoting CPH-R (Reply 6):
If she has Windows installed, she could also give MSSE a shot.

It's worthless. Won't pick up a damn thing for me while all my other security programs will.
 
comorin
Topic Author
Posts: 3857
Joined: Sun May 29, 2005 5:52 am

RE: PC Malware Goes To Porn Sites

Tue May 04, 2010 10:35 pm

Guys, thank you for the many suggestions! She is running Windows Vista by the way. I may try and help out tomorrow and will let you know how it goes. I am still awaiting Klaus' suggestion...  

btw will a system restore to an earlier date help?
 
Newark777
Posts: 8284
Joined: Thu Dec 02, 2004 6:23 am

RE: PC Malware Goes To Porn Sites

Tue May 04, 2010 10:40 pm

Quoting comorin (Reply 8):
Guys, thank you for the many suggestions! She is running Windows Vista by the way. I may try and help out tomorrow and will let you know how it goes. I am still awaiting Klaus' suggestion...

I have a Mac as my primary computer as well (but have been using PCs for years also), but didn't want to be the douchey Apple fan everyone loves to hate.  
Why grab a Heine when you can grab a Busch?
 
Fly2HMO
Posts: 7207
Joined: Sat Jan 24, 2004 12:14 pm

RE: PC Malware Goes To Porn Sites

Tue May 04, 2010 10:40 pm

Quoting comorin (Reply 8):
I am still awaiting Klaus' suggestion...

His solution is of course selling your soul to satan, err... Steve Jobs 
Quoting comorin (Reply 8):
btw will a system restore to an earlier date help?

unlikely.
 
Klaus
Posts: 20622
Joined: Wed Jul 11, 2001 7:41 am

RE: PC Malware Goes To Porn Sites

Tue May 04, 2010 11:01 pm

Quoting Fly2HMO (Reply 10):
Quoting comorin (Reply 8):
I am still awaiting Klaus' suggestion...

His solution is of course selling your soul to satan, err... Steve Jobs

I see I'm already getting burned in effigy, as usual. Reminds me of certain rituals in mid-east countries...   

To the point: Stomping on it with various tools until you don't see anything happening any more may mean you've gotten rid of the obvious nuisance, but it does not mean that any keyloggers (password skimmers) and botnet services have really been removed. It is quite possible that there are multiple components to the malware, and some of it may not be obvious. Being thorough beyond the visible layer is probably a good idea.
 
User avatar
Ryan h
Posts: 1610
Joined: Thu Aug 23, 2001 7:11 pm

RE: PC Malware Goes To Porn Sites

Tue May 04, 2010 11:02 pm

Quoting newark777 (Reply 5):
Quoting Fly2HMO (Reply 3):
NEGATIVE. Do this as a last resort ONLY. The OS is not toast yet by any means. I'm talking from experience.

I'm talking from experience as well, and since I always have everything completely backed up, if an issue arises it's easier to scrub everything and restore the system. It could take longer to research the programs and do all the scans, and it still might not fix it. Don't back up? Well, you get a wag of the finger, and hopefully a lesson is learned.

Formatting the drive I have found is easuer (although can be a bit time consuming) than trying to get all the bits of the virus out, and once you have done that there is no gaurantee critical files have not been damaged.
South Australian Spotter www.ryanhothersall.net
 
JBirdAV8r
Posts: 3454
Joined: Sun Jun 24, 2001 4:44 am

RE: PC Malware Goes To Porn Sites

Tue May 04, 2010 11:06 pm

Quoting Fly2HMO (Reply 3):
The only place she could have gotten something like that was if she was visiting shady non-pg rated sites in the first place

Not always true. There are "sites for the naive" that contain those kinds of things. The abyss that is Myspace is full of that crap.

Quoting Fly2HMO (Reply 3):
NEGATIVE. Do this as a last resort ONLY. The OS is not toast yet by any means. I'm talking from experience

It may be drastic, but--all things considered--it's usally the best option.
I got my head checked--by a jumbo jet
 
Fly2HMO
Posts: 7207
Joined: Sat Jan 24, 2004 12:14 pm

RE: PC Malware Goes To Porn Sites

Tue May 04, 2010 11:09 pm

Quoting JBirdAV8r (Reply 13):
It may be drastic, but--all things considered--it's usally the best option.

For the not-so-tech-savvy, perhaps. But doing a thorough manual removal of malware on your own and checking system integrity is really not that hard. Google has all the answers.
 
racko
Posts: 4548
Joined: Tue Nov 06, 2001 12:06 am

RE: PC Malware Goes To Porn Sites

Tue May 04, 2010 11:22 pm

Quoting CPH-R (Reply 6):
If she has Windows installed, she could also give MSSE a shot. It's a free anti-malware/spyware programme from Microsoft: http://www.microsoft.com/security_essentials/

I second that. And tell her to actually read the User Account Control warnings so it doesn't happen again.
 
User avatar
Aaron747
Posts: 8558
Joined: Thu Aug 07, 2003 2:07 am

RE: PC Malware Goes To Porn Sites

Tue May 04, 2010 11:31 pm

Another nice utility to use if you have located the offending file is Killbox.

http://killbox.net/

I've used this thing several times for entrenched files that don't seem to want to stop running, even after various attempts within Windows to shut them down. This thing kills and deletes them for good every time.
If you need someone to blame / throw a rock in the air / you'll hit someone guilty
 
ajd1992
Posts: 2390
Joined: Mon Jul 24, 2006 7:11 am

RE: PC Malware Goes To Porn Sites

Tue May 04, 2010 11:34 pm

I'm part of the "backup & wipe" posse.

There's no other way it'll be properly gotten rid of, in my experience - and it's worth doing because you never know what else is lurking about in the PC.
 
User avatar
OA412
Crew
Posts: 3782
Joined: Thu Dec 28, 2000 6:22 am

RE: PC Malware Goes To Porn Sites

Tue May 04, 2010 11:46 pm

Quoting comorin (Thread starter):
A friend of mine had her PC infected yesterday with some malware. It pops up a a lot of dialog boxes, disables task manager, and installs short cuts to porn sites. An initial attempt to clean up her machine worked, but the virus reappeared on booting up.

Have any of you experienced this, and is there a removal tool anywhere for this particular pest?

Thanks all.

I had a similar thing happen to my computer years ago. IIRC, it all came from an email I opened (by the way, talk about a good lesson in not opening email from people you don't know). Anyway, I ended up having to take it to a computer repair place, and they pretty much had to reinstall the OS and remove the virus (I did not have a backup as the computer was secondhand).
Hughes Airwest - Top Banana In The West
 
Superfly
Posts: 37735
Joined: Thu May 11, 2000 8:01 am

RE: PC Malware Goes To Porn Sites

Tue May 04, 2010 11:51 pm

Quoting comorin (Thread starter):
A friend of mine had her PC infected.....

Sure, blame your friend.  
Bring back the Concorde
 
Newark777
Posts: 8284
Joined: Thu Dec 02, 2004 6:23 am

RE: PC Malware Goes To Porn Sites

Wed May 05, 2010 12:02 am

Quoting Superfly (Reply 19):
Sure, blame your friend.

It was just a pop-up, I swear...  
Why grab a Heine when you can grab a Busch?
 
LASoctoberB6
Posts: 1936
Joined: Thu Nov 09, 2006 4:23 pm

RE: PC Malware Goes To Porn Sites

Wed May 05, 2010 12:09 am

Quoting Fly2HMO (Reply 3):
The only place she could have gotten something like that was if she was visiting shady non-pg rated sites in the first place but I digress...
Quoting Fly2HMO (Reply 3):
I'm talking from experience.

  
[NOT IN SERVICE] {WEStJet}
 
Superfly
Posts: 37735
Joined: Thu May 11, 2000 8:01 am

RE: PC Malware Goes To Porn Sites

Wed May 05, 2010 12:10 am

Quoting newark777 (Reply 20):
It was just a pop-up, I swear...

Oh I am sure something popped up alright!  
Bring back the Concorde
 
comorin
Topic Author
Posts: 3857
Joined: Sun May 29, 2005 5:52 am

RE: PC Malware Goes To Porn Sites

Wed May 05, 2010 12:19 am

Quoting Superfly (Reply 19):
Quoting Superfly (Reply 19):
Sure, blame your friend.

It was just a pop-up, I swear...

I promise it wasn't me! Really!

Quoting Aaron747 (Reply 16):
Another nice utility to use if you have located the offending file is Killbox.

I will download. I know what you mean by files that keep reappearing.

Quoting CPH-R (Reply 6):

The IT guy did put in n her PC yesterday.

Quoting Klaus (Reply 11):
To the point: Stomping on it with various tools until you don't see anything happening any more may mean you've gotten rid of the obvious nuisance, but it does not mean that any keyloggers (password skimmers) and botnet services have really been removed. It is quite possible that there are multiple components to the malware, and some of it may not be obvious. Being thorough beyond the visible layer is probably a good idea.

Good points, will keep in in mind - appreciate your advice.
 
Superfly
Posts: 37735
Joined: Thu May 11, 2000 8:01 am

RE: PC Malware Goes To Porn Sites

Wed May 05, 2010 12:31 am

Quoting comorin (Reply 23):

I promise it wasn't me! Really!

That's OK.
We all surf porn.
Bring back the Concorde
 
User avatar
Aaron747
Posts: 8558
Joined: Thu Aug 07, 2003 2:07 am

RE: PC Malware Goes To Porn Sites

Wed May 05, 2010 2:49 am

Quoting Superfly (Reply 24):
That's OK.
We all surf porn.

The key is knowing where to get really great stuff without putting one's system in harm's way. Fortunately the sites with the crappiest material seem to be those where teenagers and other malcontents get stuck with attacks.
If you need someone to blame / throw a rock in the air / you'll hit someone guilty
 
flanker
Posts: 1407
Joined: Tue Aug 23, 2005 8:42 am

RE: PC Malware Goes To Porn Sites

Wed May 05, 2010 4:00 am

I am waiting for the apple crowd to show up here..
Calling an illegal alien an 'undocumented immigrant' is like calling a drug dealer an unlicensed pharmacist
 
TSS
Posts: 2485
Joined: Fri Dec 29, 2006 3:52 pm

RE: PC Malware Goes To Porn Sites

Wed May 05, 2010 4:42 am

Quoting flanker (Reply 26):
I am waiting for the apple crowd to show up here..

Well, here's one:

Quoting newark777 (Reply 9):
I have a Mac as my primary computer as well (but have been using PCs for years also), but didn't want to be the douchey Apple fan everyone loves to hate.   

And here's another:

Quoting Klaus (Reply 11):
I see I'm already getting burned in effigy, as usual. Reminds me of certain rituals in mid-east countries...    

And then there's me.  

My few bits of advice on this subject have already been offered by my esteemed colleague Mr. Fly2HMO:


Quoting Fly2HMO (Reply 3):
Run the system in safe mode before doing any of the following installations and/or scans.

The best I've used (and I've used ALL the major ones) is Spybot http://download.cnet.com/Spybot-Sear...-Destroy/3000-8022_4-10122137.html

After that, have her get rid of whatever antivirus she has and tell her to get Avast (as above, best one I've ever used) http://www.avast.com/free-antivirus-...nload
Able to kill active threads stone dead with a single post!
 
Fly2HMO
Posts: 7207
Joined: Sat Jan 24, 2004 12:14 pm

RE: PC Malware Goes To Porn Sites

Wed May 05, 2010 6:28 am

Quoting LASoctoberB6 (Reply 21):

  

good catch lol 
Quoting Klaus (Reply 11):
I see I'm already getting burned in effigy, as usual. Reminds me of certain rituals in mid-east countries...
 
LASoctoberB6
Posts: 1936
Joined: Thu Nov 09, 2006 4:23 pm

RE: PC Malware Goes To Porn Sites

Wed May 05, 2010 7:16 am

Quoting Fly2HMO (Reply 28):
good catch lol

Thanks. I try. 
[NOT IN SERVICE] {WEStJet}
 
jetstar
Posts: 1370
Joined: Mon May 19, 2003 2:16 am

RE: PC Malware Goes To Porn Sites

Fri May 07, 2010 3:39 pm

Have you tried running System Restore and back dating the computer to before the date she got the virus.

A friend of mine opened an e-mail from a known source and it had a Trojan horse embedded in it. It kept locking up his computer with the message that he needs to subscribe to their service to remove the “virus”

I told him to try restoring the computer back a few days when the last checkpoint was done, he did that and the Trojan horse was gone. He then deleted the e-mail and called the sender and told him about the Trojan horse he was sending out in his e-mails.

JetStar
 
Fly2HMO
Posts: 7207
Joined: Sat Jan 24, 2004 12:14 pm

RE: PC Malware Goes To Porn Sites

Fri May 07, 2010 4:15 pm

Quoting JETSTAR (Reply 30):
Have you tried running System Restore and back dating the computer to before the date she got the virus.

Your friend got lucky then. System Restore is not a reliable way of removing viruses or malware. The more aggressive types of these programs will not be affected by a restoration.
 
Longhornmaniac
Posts: 2967
Joined: Wed Jun 15, 2005 2:33 pm

RE: PC Malware Goes To Porn Sites

Fri May 07, 2010 4:43 pm

http://www.techsupportforum.com/secu...-center/virus-trojan-spyware-help/

You'll thank me later. I had a really vicious virus before I came to Oz, and they were able to work with me, using output files from some various high-tech scans they'll ask you to do, find the source of the problem, and get rid of it. It's nice because you're actually working with a real person. Just follow every instruction, and they'll help you get rid of it.

Cheers,
Cameron
Cheers,
Cameron
 
CPH-R
Posts: 6059
Joined: Thu May 03, 2001 5:19 pm

RE: PC Malware Goes To Porn Sites

Fri May 07, 2010 4:52 pm

Quoting Fly2HMO (Reply 31):
Your friend got lucky then. System Restore is not a reliable way of removing viruses or malware. The more aggressive types of these programs will not be affected by a restoration.

Even worse, you can have viruses & malware hide in old system restores, making your clean-up be in vain. Personally I've disabled system restore entirely.
 
comorin
Topic Author
Posts: 3857
Joined: Sun May 29, 2005 5:52 am

RE: PC Malware Goes To Porn Sites

Fri May 07, 2010 10:02 pm

I'd like to thank everyone for their valuable suggestions. The person involved decided to do a system restore against my better judgement and it seemed to have worked.
 
MasterBean
Posts: 174
Joined: Fri Apr 30, 2010 9:48 pm

RE: PC Malware Goes To Porn Sites

Fri May 07, 2010 10:14 pm

I had this a few days ago. I didn't have the computer on for a day and when I turned it back on it had magically disappeared.
 
Confuscius
Posts: 3568
Joined: Wed Aug 29, 2001 12:29 am

RE: PC Malware Goes To Porn Sites

Sat May 08, 2010 2:36 am

There's porn on the net? Interesting, I didn't know that.   
Ain't I a stinker?

Who is online

Users browsing this forum: DeltaDog, PacificBeach88, ual777, usflyer msp, WarRI1 and 5 guests