Jasper
|
| posted on 20/1/06 at 04:05 PM |
|
|
'Porn Turbo' virus removal
I'm on a computer than is infected with 'Porn Turbo'. It sits in 'Add and Remove Programs'. The effect is that any
emails that have highlighted links to regular things redirect to their web site, and it leaves an icon on the desk when explorer is opened.
Tried the usual - Adaware, Spybot and AVG free version, nothing has removed it - any thoughts?
|
|
|
|
|
DorsetStrider
|
| posted on 20/1/06 at 04:15 PM |
|
|
Probably a stupid suggestion... but have you tried to find it in task manager, stopping it then using add/remove programs to delete it?
Who the f**K tightened this up!
|
|
|
britishtrident
|
| posted on 20/1/06 at 04:24 PM |
|
|
Start by going to this site where you will find the most potent tools for removing this kind of threat http://www.spywareinfo.com/~merijn/
(if your trojan redirects this link try the sites nummerical IP address http://216.180.233.162/~merijn/index.html)
Also make sure you have disabled windows system restore and are running in the safe mode before trying to do anything. Klil any running process that
are suspect using the task manager then use merijns' StartupList to stop then starting at next boot. Do a sweep with HijackThis to hunt out
any registry hacks, then run Merijns' other anti-malware stuff.
You could also try a sweep with Free AV which I have always found pretty good
http://www.free-av.com/
And Symmantec web site is always worth a look for specific virus fixes which are free downloads.
Once you get is cleared do a sweep with HijackThis and keep the log file then do regular sweeps with hijack this to monitor registry changes.
If none of this works try posting your problem and the HijachThis log on the Castle Cops website (used to be ComputerCops)
http://castlecops.com/
|
|
|
Peteff
|
| posted on 20/1/06 at 07:39 PM |
|
|
Try Housecall on the trendmicro site as well. It does an online virus scan and gets rid of a lot of adware as well.
http://housecall.trendmicro.com/
yours, Pete
I went into the RSPCA office the other day. It was so small you could hardly swing a cat in there.
|
|
|
jestre
|
| posted on 20/1/06 at 10:27 PM |
|
|
Rerun all your scans in "safe mode"
reboot and press F8 often while booting
-=too much horsepower is just enough=-
|
|
|
Jasper
|
| posted on 21/1/06 at 11:09 AM |
|
|
Thanks chaps - tried running the scans with spy sweeper in safe mode as well, no luck. The Hijack This stuff and StartUp List is a bit beyond me, and
I don't have the time, so I will get him to call a man in to sort it.
|
|
|
