Please Assist~

[DieselBoy09]

So I was out getting dinner and then I come home to find my older brother surfing porn on my computer, and what do you know? I now have some LOVELY adware/a virus on my computer constantly bringing up windows and messages telling me that there is a virus and that I need to purchase this software to correct it. I've run Nortan Antivirus already, Ad-Aware SE, and a spybot searcher, as well as have done several system restores to try and fix the problem, all of which have been fruitless. I've also tried manually finding the files scattered throughout the computer, but have yet to actually find anything to give me a place to start from (I really didn't expect to find anything). I'll post some images of what the messages look like as well what they say to hopefully give you all some place to start in telling me how I should alleviate this problem, if one of you knows how.

[DieselBoy09]

Re: Please Assist~

http://farm2.static.flickr.com/1060/...102f2e1d_o.jpg

[DieselBoy09]

Re: Please Assist~

http://farm2.static.flickr.com/1064/...a5d45b9c_o.jpg
http://farm2.static.flickr.com/1360/...59dbd1f4_o.jpg

[ChocoboBunny]

Re: Please Assist~

I would suggest if you had another computer do a search on google for the name of that. I forgot how I got rid of that one. I had that from a trusted site I once visited. They now have a new server with a new company. But look up that ad on google. And what ever you do, dont dl any of that nonsense they are pushing. It will cause more problems. Use these programs if you dont have them get them. AVG, XoftSpySE, Spybot, Adaware, and hmmm swshredder. Try those and keep searching google I am sure someone will remember more about this spyware.

[nazlfrag]

Re: Please Assist~

In case you're not sure, none of those popups are actually from windows, they are all from your infection. The product they push is more malware.
I found some removal instructions here http://www.precisesecurity.com/blogs...moval-by-siri/
I'd also recommend switching to Opera or Firefox+NoScript plugin (all free) for your future porn surfing habits. It won't make you safe (especially from brothers clicking things they shouldn't), but it will reduce the chances of infection. Best of luck!

[DieselBoy09]

Re: Please Assist~

Thank you for your help, I'll try that method in the morning, as for now I'm too burnt out from updating things, trying to delete this through other methods, searching through google and yahoo, and then of course being enfuriated with my older brother for bringing such a disaster to my computer when he has his own in the other room.

If anyone else has ideas on this, feel free to continue discussion~

[Feba]

Re: Please Assist~

Download Adaware, Spybot S&D, AVG (Free Ver.), and HijackThis, you can find them all on google.

Reboot into safe mode, and run HijackThis, save the log- if you aren't sure what the virus is post it on the HJT forums and let someone look at it, remove whatever the virus is, run Adaware and Spybot, and keep AVG running afterwards as your antivirus. In the future, don't allow other people to use your computer, ESPECIALLY not as root, that's just asking for trouble. Run Adaware and Spybot every few days at least to keep your PC clean.

[InuTrunks]

Re: Please Assist~

This is why if I leave my computer (rarely haha), I always lock it down (quick key is windows key + L).

[DieselBoy09]

Re: Please Assist~

The Smitfraud thing just added more adware/malware~

[DieselBoy09]

Re: Please Assist~

Alright, I posted a topic on Hijackthis and am waiting for a reply after giving the log data, it seems like it might take awhile, in the mean time the malware has progressed to the point of where I can not open windows on internet explorer, so to fix that and still grant me access, I downloaded firefox, which seems to be working fine, free of the malwares interference. lol, I was starting to get worried there.

[Feba]

Re: Please Assist~

btw, tell your brother to find better porn sites. SRSLY, I've never gotten a single bit of malware from that.

[KingOfZeal]

Re: Please Assist~

Also, take care with HijackThis -- make sure you know what you're removing, as it could potentially wreck your system. Also, if the scan doesn't turn up anything, rename the main EXE file to something like "scan.exe" -- many of the newer processes/viruses/etc actually block the original filename from seeing that they're running. I had this problem a little while back, changed the name, and doubled the length of the list of stuff.

But personally, that's all I use. The way I see it, as long as it doesn't start up n the first place, and it's not taking up any significant space on the drive, it's fine. It'll go away when I do my yearly virus/AdAware/Spybot scan.

Edit: Also, disable your Windows Messenger service if you haven't already. Windows Messenger = evil^100.

[InuTrunks]

Re: Please Assist~

Windows = Evil.

[Feba]

Re: Please Assist~

Windows = Evil.

no no no, Windows = crap. Microsoft = Evil. Get it straight.

[InuTrunks]

Re: Please Assist~

no no no, Windows = crap. Microsoft = Evil. Get it straight.

So, Windows:Microsoft::Crap:Evil?