Spyware, Viruses, & Security forum

General discussion

Porn virus help please!

by auxte-230 / September 6, 2009 12:32 AM PDT

My gf's daughter asked me to look at their computer because she was getting a pop up internet security virus/malware. When I did, about 10-12 porn sites showed up in the history for the last two days. I erased the links, rebooted explorer, and they came up again. I erased them again then rebooted the computer and they were gone. About a week later, porn icons filled the computer screen. My gf took the computer to an expert(who happens to work for the police in this field) he looked into it, and determined that the only way this could have happened was by actually going to porn sites. I don't think he found anything in cookies or anywhere else as far as I know. I know that I didnt go to any sites at all and I'm also pretty sure her daughter didnt either. I did see some music download stuff but was told it was never opened or used. So my question is - Is it possible for this to happen without going to a porn-type site? Because of this, my relationship ended with my gf but maybe this can help someone else that is put in this situation that is innocent.

Discussion is locked
You are posting a reply to: Porn virus help please!
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: Porn virus help please!
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Collapse -
get Hijack This
by frifawnwolf / September 6, 2009 1:09 AM PDT

Use cnet downloads and put
1-HijackThis on a usb flash drive using a good computer
2-install on infected computer,(unplug or turn off net connection beforehand)
3-run program,during which it will ask you to reconnect to the net
4-done

once you register HijackThis,you will have free use for 30 days only

Collapse -
A couple of things
by roddy32 / September 6, 2009 2:49 AM PDT
In reply to: get Hijack This

1. HijackThis is free always, not just for 30 days.
2. It does not have to be registered.
3. It should also NOT be used without supervision. It is too easy to delete something you actually need. There are forums that do this that have trained experts but CNET is not one of them.

Here are just a few of the reputable ones. There are others also.

1. http://www.lognrock.com/forum/index.php?showforum=5
2. http://forum.securitycadets.com/index.php?showforum=2
3. http://www.temerc.com/forums/viewforum.php?f=12
4. http://www.malwarebytes.org/forums/index.php?showforum=7
5. http://www.bleepingcomputer.com/forums/forum22.html

4. If YOU downloaded a trial of HJT that is only free for 30 days you probably downloaded a fake one. There are many out there.


Actually that was more than a couple of things Happy

Collapse -
Re: porn virus help
by Kees Bakker / September 6, 2009 1:18 AM PDT

All we know from your story:
(1) there were links to porn sites in the history
(2) there were porn icons (what are that?) on the screen (what screen?)

As for (1), it's uncommon that a link is in the history without the site being visited. But I assume it can be done by a malicious program. But I see no good reason why it should do it. So let's assume that somebody HAD visited that sites using THAT userid. See, it makes sense to have a password protected userid. Then nobody can use that to put something in YOUR history.

As for (2) I assume that any site can leave something on a not-well protected machine that would have that effect. So that only proves that SOMEONE visited SOME site or opened SOME email and maybe was a little bit uncareful doing that.

Kees

Collapse -
RE: porn virus help
by auxte-230 / September 6, 2009 1:42 AM PDT
In reply to: Re: porn virus help

Thanks for responding to this.

The links in the history were for the day I logged on and the day previous to it. I had not touched her computer until the day I logged on (I don't live with her) They were all different types of sexual catagories..but all sexual in nature.
The computer runs on XP, and everyone uses the same history and stuff..no seperate windows log ins for each individual.
The porn icons appeared all over her windows desktop. (upon looking, these would be called window shortcuts) I never saw them, but from what I was told they had obsene pictures on them and linked to pornographic sites.
The computer guy that looked at the machine said there was no way to have that happen without going to a pornographic site, and being the only male that visits, I'm the prime suspect. That was the first time I had touched the computer in over a month.
The machine was running Norton antivirus, but thats it. Thanks again.

Collapse -
It would have been rather stupid ...
by Kees Bakker / September 6, 2009 2:07 AM PDT
In reply to: RE: porn virus help

to do it that way. And you don't seem stupid, so that casts some doubts on the conclusion.

Let me give one tip to readers wanting to use computers other than their own for visiting whatever sites (especially sites they wouldn't tell in public): use portable Firefox. Runs from a USB-stick and leaves no traces in the computer used. Good both for privacy and for (computer) safety.

Kees

Collapse -
Porn virus help
by auxte-230 / September 6, 2009 10:35 AM PDT

Has anyone been in or seen a situation like this? Is it possible to get this stuff without actually going to a pornographic site?

The computer was fixed by the computer guy so it just boils down to my word vs. his. I think the relationship is done anyhow but I would like to find out the answer for my own piece of mind.

P.S Thanks Kees..it would have been very stupid. Especially when I live somewhere else with my own computer.

Collapse -
To further elaborate
by auxte-230 / September 6, 2009 2:03 PM PDT
In reply to: Porn virus help

I know the most likely way for something like this to happen is by actually browsing pornographic sites, but this computer guy says its the only way. I really find that hard to believe. I would think you might be able to get a virus like that via an email, music or video download (even the clean kind) or even going to a smaller, untrusted site (say, checking on underground bands or similiar) She does have an 18 year old daughter that had just moved back home and the only reason I even got on that computer that day was because that daughter alerted me to a problem on that system..it was already acting funny before I touched it. One of those scanner spam pop-up's would run when windows would originaly load. She also complained that the computer was processing very slowly compaired to normal.

Collapse -
The "Fake AV" Malware That Was
by tobeach / September 6, 2009 4:03 PM PDT
In reply to: To further elaborate

causing the pop-ups always, once clicked on, downloads a trojan downloader that allows the original malware to download & install as many other programs as it pleases.

Given that the originator gets paid xx$ for each successful download installed & sex sites pay well, I would be surprised if some of those didn't show up along w/ key loggers/screen captures and likely a more evolved rootkit. Yes, they would likely put in links to the sites (probably pay by adding to phone bill if dial-up ISP)).

I disagree with statement that visiting is the ONLY way.
Good Luck! Happy

Collapse -
Thank you so much!
by auxte-230 / September 7, 2009 12:00 AM PDT

That's the answer I was looking for. I would have never touched the computer that morning if I was not alerted to a problem. They are out to make money, it's too bad they have to destroy lives to do it. I think for me it's too late but maybe this might help someone else that has a family that could potentially be destroyed by something like this. I searched and searched the internet, and could not find much on this subject..only cases where the porn site was actually accessed. Thanks again.

Collapse -
Porn Viruses...
by AMcCoy09 / September 20, 2009 4:40 AM PDT
In reply to: Thank you so much!

I've found those same icons on my mother's computer.. She's 62 yrs. old and it's HIGHLY UNLIKELY that she'd be looking at porn..lol Her computer is infected with no telling how many Trojans and other problems.. Malwarebytes will usually get rid of most of them, but they still seem to come back sooner or later.. She's on Cable internet, and I'm guessing that it's also why you can leave the computer one minute and it's fine, then turn it back on a little while later and it be full of viruses again.. Been fighting these things for about 3 weeks... Ready to just get out my hammer and see if that'll fix it..!! lol

Collapse -
Just A Recent Post To Show How...
by tobeach / November 9, 2009 2:20 PM PST
In reply to: Thank you so much!

an innocent can be had....Posted S,V,S Form News November 9th/09:

"AP IMPACT:Framed For Child Porn ? By PC virus

By JORDAN ROBERTSON
Mon Nov 9, 2009

Of all the sinister things that Internet viruses do, this might be the worst: They can make you an unsuspecting collector of child pornography.

Heinous pictures and videos can be deposited on computers by viruses ? the malicious programs better known for swiping your credit card numbers. In this twist, it's your reputation that's stolen.

Pedophiles can exploit virus-infected PCs to remotely store and view their stash without fear they'll get caught. Pranksters or someone trying to frame you can tap viruses to make it appear that you surf illegal Web sites.

Whatever the motivation, you get child porn on your computer ? and might not realize it until police knock at your door.

An Associated Press investigation found cases in which innocent people have been branded as pedophiles after their co-workers or loved ones stumbled upon child porn placed on a PC through a virus. It can cost victims hundreds of thousands of dollars to prove their innocence.

Continued here: http://tech.yahoo.com/news/ap/20091109/ap_on_hi_te/us_tec_a_virus_framed_me
(End)".

Plenty Scary as I see it! Sad

Collapse -
Happened to Me!
by bethend / December 30, 2009 10:34 AM PST
In reply to: Thank you so much!

I am working on my computer right now to remove this exact virus. (this I am typing on my laptop. My PC is running a norton scan from the boot menu b/c I can't get it to work in XP) I know for a fact that no porn site was visited, because the links on my desktop showed up right before my eyes! I was getting an error message for viruses from the 'security center' which I thought was strange, since I use Norton 360. I tried to use a restore point, and when the computer rebooted, there were three porn pictures on my desktop.
I'm not sure where this came from: today I downloaded three ringtones from an apple iphone app. I also installed skype. Lastly I did start up bitcomet, but then I did not download anything. I don't know how norton didn't catch this.

Collapse -
porn popups
by steve66 / December 30, 2009 2:51 PM PST
In reply to: Porn virus help

This won't be of much help; but maybe a little. on a couple of occasions (in a poorly secured office environment, I might add), I mistyped a URL and there was an endless explosion of porn popups. One after the other, just the worst stuff. Tried to three-finger IE to get them to stop, which didn't work, and ultimately had to manually turn off the computer.

Whether all those ended up in history, I can't say, because I honestly don't remember checking. My point is that you can accidentally start a porn barrage without deliberately visiting a porn site.

Collapse -
Porn virus
by Demoking / January 12, 2010 6:14 PM PST
In reply to: Porn virus help

Hello
Just my thots
I worked on an old mans computer that ended up with Porn.com
Nude.com Im pretty sure he never went there as we are pretty close and it also killed his internet after refomating
and reinstall I had the same occurance She may be telling the truth .
My other thought is that if she is really hitting the Porn sites keep her !

Collapse -
its happening to me too
by nbarber25 / February 17, 2010 12:07 AM PST
In reply to: Porn virus help

I was on the computer last night closed out all windows and got to cleaning my house was done came in the living room and the comp screen was filled with pron sites. My husband was at work and and a virus detector thing was showing, but I dont use that I use Norton, which does not seem to be picking up that virus, one is a bankerfox.A something others are trojans, but not I can not open many of my computer programs. But I know it was not him because I am the main user on the computer and I clear the history on the computer weekly and stuff so I usually know what is going on. So I am in the process of trying to get rid of them, but no luck on my own. I got a guy at my church who knows all this kind of stuff about computers so we will probably have him over tomorrow night. Unless anyone knows how to fix this

Collapse -
fix
by bethend / February 18, 2010 5:23 AM PST

I fixed mine, but it took awhile. First, my brother had a CDROM with avast virus software and I ran it from the boot menu. It took out several, but not all viruses. Then I was able to work within my computer better, and I downloaded Spybot (free) and ran that. Do all scans with Complete/thorough. I ran them both twice, as they kept picking up some each time, ones that were well hidden within others.
The viruses disable your usual virus software (mine was Norton) so it's important to get a disc with LATEST updates (we put the updates on a jump drive....you have to do this on a diff computer.)
Don't bother trying to go to a restore date, either, since they disable that too.

Collapse -
Something similar happened to me on my iphone
by dunbsl / April 28, 2010 8:47 AM PDT
In reply to: Porn virus help

Something very similar happened to me. A few weeks ago I opened my safari internet/google search engine on my iphone and suddenly there were 25 or so various porn sites that had been visited. My husband and there young girls swore they did not touch my phone (and who would want to search for porn on a little bitty iphone anyway?). y. I cleared the history and didn't have a problem for a few weeks. Today I opened my iphone and there was my last normal search, however, sometime later in the day, I reopened my safari/internet and suddenly there was a google search for "big *****" and one a listing of all the porn sites. I was in the car all day and the only one with the phone. It is mind boggling. I'm either picking up someone's wifi searches or there is some type of virus.

Collapse -
Hi, Dunbsi ! It Sounds Like You Currently
by tobeach / April 28, 2010 4:00 PM PDT

are having infection problems (via your Safari on phone). May I recommend you repost your problem in a separate NEW post so it will be noticed by more respondents to offer possible solutions?

Posting in an old post like this will likely be missed by most viewers
reducing your help available.

I ONLY checked this post because I was the first to reassure original poster that he could well be innocent on the first page. Grin

Thanks! Happy

Collapse -
Its happening to my iPhone aswell
by Mileske / April 12, 2014 11:54 AM PDT

Not long ago I accidentally clicked on a porn ad and was redirected to a site.Next thing I'm getting a barrage of porn ads.I was at work and my partner had the phone and there was tons of porn sites that had been visited.Now my partner is pissed off and thinks I'm a creep.The phone has also slowed down and safari randomly crashes and things like that.Virus or something like that.

Collapse -
Unlikely? Only in a small world. Never say never
by Darkkewlz / September 19, 2009 6:31 PM PDT

Trojans Malware. And good-time Charles.

I have this same bug right now.
Trojan, came in on the back of a typping program I downloaded. .

First sign: I heard the clicks of web browser. Internet Explorer. ( a browser I rarely use)
just clicking away. But the browser wasn't open!
My computer be Deviled I say.
Not long after. Porno icons (weblink shortcuts) appeared on my desktop.
Well, looks like my computer is having a really good time without me!

So I figured I should put on some virus protection. Hmm
the Devil in my box didn't agree with that.
To even atempt an online scan, resulted in nothing more than misdirection.

What I've figued out. Is it's using the desktop itself as a browser. You know that active desktop thingy from Microsoft that absolutly NoBody ever uses.

Well time to excersize this here binary Demon.
I took a look at that system configuation panel.
All kinds of single letter startup items are in there. ex: a.exe, b.exe, c.exe.
Well well.
Time to pull out the good book and go into "Safe Mode with Networking"

to be continued

Collapse -
Please Try This...
by Grif Thomas Forum moderator / September 20, 2009 4:54 AM PDT

On a friend or family member's computer, download the Malwarebytes installer and update files from the links below, copy them to a CD or flash drive, then transfer the files to the problem machine and use them. If you can't start the computer into "normal" windows, try installing, updating, and running the scans AFTER the computer is started into Safe Mode.. I use the sites below to download the installer file and the manual updater:

Once downloaded and before transferring them to the problem machine, rename the program installer "mbam-setup.exe" file to something else like "Gogetum.exe", then copy the installer file and the update file to a CD or flash drive.. Transfer the file to the problem machine, then install the "Gogetum.exe" file, then run the update to get the program current.. After that, run a full system scan and delete anything it finds.

Malwarebytes Installer Download Link (Clicking on the links below will immediately start the download dialogue window.)
http://www.besttechie.net/tools/mbam-setup.exe

Malwarebytes Manual Updater link
http://www.malwarebytes.org/mbam/database/mbam-rules.exe

Next, download the SuperAntispyware program and the manual updater from the links below. After running the Malwarebytes tool above, if you still can't download and install it directly from the problem machine, download it on a friend or family member's computer as well. After installing and updating SuperAntispyware, run another full system scan and delete everything it finds as well. As before, you may need to rename the installer file to get the program to install.:

SuperAntispyware
http://www.superantispyware.com/

SuperAntispyware Manual Updater
http://www.superantispyware.com/definitions.html
____________

In a few situations, in order for the program to run, it was also necessary to rename the main "mbam.exe" file also after installing it.. It resides in the C:\Programs Files\Malwarebytes Antimalware folder....
_____________________

Hope this helps.

Grif

Collapse -
tech support
by Slevitt / September 21, 2009 7:39 AM PDT

There are a lot of free antivirus products on CNET. Most are mentioned in the responses. If you still have a problem, CyberDefender offers a technical support service which can solve the problem. It costs money because they use real engineers.

Collapse -
HijackThis forums
by Donna Buenaventura / September 22, 2009 4:13 AM PDT
In reply to: tech support

is able to provide help for free. I think we need to send people needing help to such forums so they don't have to spend money to fix their PCs. Some offer remote help but that costs them and until the company who will offer tech or remote support is clear from any issues, only then we should send at CyberDefender.

Collapse -
think I found the culprit
by mom2jmg / September 22, 2009 4:57 AM PDT

We recently had our computers attacked by porn. Appears to be coming in with downloads of Family Guy from Limewire. (which is also a source for free music your teen may have been getting) When you go back through the history it's mixed in with those files and appears to have never been opened. Also found one with a file name beginning Pokemon. Tell me that's not scary when you have young boys! Needless to say Limewire is no longer allowed on their computers and any Family Guy downloads will cost the boys their computers. There was even cartoon porn of that show that came in with all the other nasty stuff! They are seriously targeting kids! I know Family Guy isn't a kids show and my boys have never had permission to watch it but Pokemon file names? That's very young kid stuff!

Collapse -
is Antivirus Soft involved?
by sparklesal / February 17, 2010 1:26 AM PST

same problem here...program called Antivirus Soft has invented all these problems to make you part with your money!Porn sites pop up to convince you theres something wrong and internet explorer blocks pages so you can't find a way of getting rid of it. It is just a scam...my computer is fine, 34 viruses don't just pop up out of nowhere. There's a way of getting rid of Antivirus Soft, involving going into safe mode- but I haven't managed to do it yet. Fortunately Firefox works still!

Collapse -
its happening to me too
by nbarber25 / February 17, 2010 5:31 AM PST

I think I have it fixed but yeah that same thing was popping up, I used a trojan remover and I did it in safe mode, My computer seems to be fine now, but I did a google search for the Bankerfox.A and it pulled up all kinds of ways to get rid of it..

Collapse -
Remove Antivirus Soft (Uninstall Guide)
by Carol~ Forum moderator / February 17, 2010 7:58 AM PST

Have you tried ALL the steps in the below removal guide? You have all to gain, and nothing to lose. Hopefully, the only thing you'll lose a "ransomware" program, along with its "nasty" pop ups. Wink

Remove Antivirus Soft (Uninstall Guide)

Best of luck..
Carol

Collapse -
:0D
by sparklesal / February 17, 2010 4:37 PM PST

Woah Carol! The guide I used was v.complicated but the one you linked to was about 10x easier! all done in the space of about quarter of an hour- removed a couple of trojans, restarted and everything's working as it should again! Thank you very much, I owe you a pint! Happy

Collapse -
You're quite welcome. ONLY a pint? :D
by Carol~ Forum moderator / February 18, 2010 12:11 AM PST
In reply to: :0D

I'll be anxiously awaiting the offer! Happy

Just a word of caution about some of the guides you find. A few of them offer scanners, I wouldn't go near with... a ten foot pole! Should you ever find yourself in the same situation (which I suspect you won't Devil ) the site provided, also has guides for other "rogues" and "scareware".

Glad to hear it worked out for you!

Collapse -
porn virius
by iamhammer / June 3, 2010 8:23 AM PDT

had the same thing through downloading torrents movies for kids and wife and few sifi for me with old rock music and my history got the same crap in it.

I dont go to these but i get them when i download torrents

Popular Forums
icon
Computer Help 47,885 discussions
icon
Computer Newbies 10,322 discussions
icon
iPhones, iPods, & iPads 3,188 discussions
icon
Security 30,333 discussions
icon
TVs & Home Theaters 20,177 discussions
icon
HDTV Picture Setting 1,932 discussions
icon
Phones 15,713 discussions
icon
Windows 7 6,210 discussions
icon
Networking & Wireless 14,510 discussions

Tech for the school year

Smart tech for smart students

Forget the pencils and notebooks. Gear up your students with these portable and powerful note-taking machines.