Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
one of my friends went into porn on my computer and ran some download for this one porn thing to work and now it keeps popping up a window that says,"
Your computer was infected by unknown trojan.
It's dangerous for your system (critical files can be lost)!
Click OK to download the antispyware program to clean your system! (recommended)."
and whenever i go to google and search ANYTHING i pop up with,"Your browser was hijacked! some results was changed by porn advertising!
You need to clean your system immediately to prevent it. Download the newest antispyware software!."and even if what i search comes up on google when i click on the link to go to it it send me to a porn site.or a virus remover tool .

First, don't download any of those suggested "tools." They just install more spyware. Download and run Ad-Aware. If you can't download it on your computer, download it on a friend's PC and burn it to a CD or put it on a flash drive. That should clean up most of the junk. Also make sure you have an antivirus program. If not, try AVG free edition.
-Ryan Adams
http://RyanTAdams.com

I would download winpatrol and see which start-ups and IE helpers are loaded. It also has the function to stop them from running.
There are lots of good free spyware and AV programs in the link of this post. Iwould suggest running all of the spyware ones.
Some HELP in posting on Cnet plus free progs and instructions Glad to Help!

I didn't have any luck with spyware removal tools, spybot did the best for identifying the culprit(s). But then removed them manually. Wasn't a big deal once I figured it out, but that stuff is a pain. Look a the postings for zlob or trojan downloaders if the tools don't work. The best is to identify the processes via taskmanager if you can, then search your drive for those files. I identified NetProject under c:\program files (which of course i hadn't installed). Went into safemode with limited minimal required to run, then removed the directory (renamed it to make sure that was the correct one) then use registery editor to remove keys associated with all of the files in that directory including those that were running processes previously. I then reran spybot while still in safemode and it seemed to come clean....
good luckdb

I also get It's dangerous for your system (critical files can be lost)!
Click OK to download the antispyware program to clean your system! (recommended)."
and whenever i go to google and search ANYTHING i pop up with," message when I'm in Windows Explorer searching through My Computer. I've run Ad-Aware, VundoFix, RegCure, Avast!, and Spybot S&D and none of them have worked. Spybot keeps up finding this SmitFraud C.CoreService that it cannot delete and says it will delete after reboot but keeps on saying same thing over and over again. I'm currently running SUPER AntiSpyware Free Edition. I have a HijeckThis log if needed

Hiya Peter,
If you have these two files:
core.cache.dsk
core.sysin this folder:
c:\windows\system32\drivers
take a look at this link:http://www.computing.net/security/w...
(response #8, re: Jim Carolan), it is a removal method for the older variant of the core.cache.dsk menace.
It is reasonably easy to follow, I hope it helps.

Fortunatly i guess, I dont have either one of those. I think they may have downloaded one of those ActiveX Object downloads because they wanted to see a "movie" but needed to download something, and once they clicked "run" the virus came up. Any other opinions on what could be going on?

![]() |
Red cross C Drive icon &a...
|
autorun.vbs virus
|

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |