Questions

Help with Removing a Pornographic Screensaver

+
0 Votes
Locked

Help with Removing a Pornographic Screensaver

nmpc3
Help! We needed an extra computer just for writting letters and my boss brought one from his house that one of his kids used. When switching screensavers, I saw one that said My Picture Screensaver and clicked on it thinking that it would have pictures of their kids, etc. Instead it contained pornographic pictures. I have tried deleting it and it keeps coming back. I tried removing it with one of the screensavers removal softward and it indicated that it was a Microsoft Protected screensaver.

I don't really want to tell me boss since the pictures are very explicit, but I also do not want someone sitting down at my computer finding these images thinking that I downloaded them.

Any suggestions?

Thanks in advance for your help
+
0 Votes
OldER Mycroft

What you have is a pornographic screensaver that existed on this machine before you took possesion of it.

Presumably, at some future point in time, it may be returned to its original owner: the kids of your boss. Do you get rid of the pictures to prevent the assumption that you put them there OR do you ignore them by simply not using the screensaver ??

Strictly speaking you could be accused of deleting someone else's intellectual property and when the machine is returned THEY might be rather upset when they don't find all their naughty pictures.

I would elect to NOT USE the screensaver and to notify your boss as soon as possible of the situation.

After all, your only use of this system is for typing letters on it.

+
0 Votes
w2ktechman

listen to Mycroft.

+
0 Votes
ThumbsUp2

Are you sure it said "My Pictures Screensaver", or did it say "My Pictures Slideshow"?

The second one is installed by Windows. It can be set to browse any folder on the hard drive and display all of the pictures in that folder, one after the other. If this is the screensave you have on your system, click settings, then look to see what folder the images are stored in.

I'm not saying you can delete them if you do find them. That can be left up to your BOSS. But, at least you'll know where they're at and also know how to change which folder it's browsing to so you can elliminate the porno folder from the ones that get displayed.

+
0 Votes
ManiacMan

Just kidding...LOL.

Anyhow, you should bring it to the attention of your boss, as you don't want to be accused of violating sexual harrassment policies if porn is found on a machine you use, even if it's not your fault.

+
0 Votes
nmpc3

Okay - I have talked with my boss and he wants it removed tomorrow when we go to work, but I am not sure how I will do it since I keep getting the message that it is windows protected. The file extension is ssmypics.scr. How did a virus attach itself to a microsoft program that can't be removed? Any suggestions.

We are a small office and there are only three of us and since the computer will be staying in our office until it dies, I would like to get this taken off.

I am not a computer geek so any suggestions will need to be in normal terms.

Thank you for any help

+
0 Votes
normhaga

1. Boot with knoppix live and delete the file.

2. Then boot into Windows safe mode and manually remove every ref to the file from the registry.

3. After 1 and 2 run a registry cleaner.

A second method, but not as effective:
skip 1 above and do two and three.

I forgot that your question indicates that the screen saver is showing stealth/virus techniques. Before starting the above, you might want to shut off your restore points and check the dllcache for the file.

+
0 Votes
ajaxnii

Wipe it and start from scratch! Copy the porn 1st....jk!

+
0 Votes
ManiacMan

you'll have to disable the system restore option and kill the file from every location you can find. First, download AVG free antivirus from www.grisoft.com, disable system restore and then boot into safe mode. From safe mode, do a search for this scr file and delete it. Also, perform a full scan of your PC with AVG to catch any other viruses on the PC. Once you are sure it's gone and all is clean, restart into normal mode and re-enable system restore.

+
0 Votes
LocoLobo

the pix. That should stop the screen saver from displaying the images. You should be able to change the folder it displays as well.

Just a thought.

+
0 Votes
OldER Mycroft

"The file extension is ssmypics.scr. How did a virus attach itself to a microsoft program that can't be removed?"

Up until this post, no mention had been made of ANY virus or indeed any sign of an infection.

Certainly, no AV scan had been applied - therefore no virus warning had been generated.

It would appear that the majority of you are all jumping in with your half-@ssed ideas about how best to kill, eradicate, annihilate this nasty virus, that until now has not actually been detected!

There are, admittedly, sporadic entries on the 'net about ssmypics.scr being replaced with a viral file of the same name but NO MENTION has been made of any problems other than a user happening upon (actually meddling with) a screensaver with a slideshow that turned out to be pornographic.

I suggest that the OP boots-up as normal, right clicks on the desktop, accesses the screensaver page, clicks on the settings button for the slideshow, tracks down which system folder contains the porn (it'll be the filepath in the settings page), then selects another screensaver or, better still, none at all.

Then follow the settings page filepath and simply delete ALL the PORN (sob, sob ...ok!).

It is safe to say that the porn image files will not be protected, they'll be easy to delete.

You've all been wasting too much keystrokes trying to delete an innocent little system file that is not doing anything other than what it was originally designed to do!

MOB RULE is not always the best way forward!


<Edited for typos>

+
0 Votes
ManiacMan

Did I not mention AVG as a solution?

+
0 Votes
nmpc3

If AV means antivirus, I have the most updated version of Norton Antivirus.

+
0 Votes
ThumbsUp2

Did you see the rest of the posts in both of your threads telling you that ssmypic.scr is a system screen saver? That all you have to do is to right click the desktop and choose properties, then choose the screen saver tab and click settings... look at the location of the folder containing the pics, then cancel. Now, choose another screen saver or "none" for now. Click ok to exit. Go find the folder of pics and delete it.

If you later want to use that particular screen saver, choose another folder to display pictures from.

+
0 Votes
OldER Mycroft

You offered AVG as an anti-virus solution, quite rightly, except THERE IS NO VIRUS!!!

All this Poster has is a system screensaver that is doing exactly what it is supposed to do - it's just that the Poster is concerned about the pornographic slideshow.

It's not the screensaver that is causing the problem - it's the slideshow content, and AVG can't identify pornographic pictures so - Have YOU read through all the threads?

More importantly, this phenomenon didn't suddenly invade this computer - the OP went looking for it in order to change the existing screensaver, in the hope of seeing some piccies of the Boss's kids!

All that the OP got was a shock - NOT a virus!

<Edited for clarity>

+
0 Votes
CavalierX

It's not necessarily a virus. It sounds as though the screen saver is displaying pictures that are stored on the machine. You said, "I have tried deleting it and it keeps coming back." Change the screen saver. Simply right-click on the Windows desktop, click Properties, go to the Screen Saver tab, and choose a different screen saver. First note the folder under the Settings button in which the pictures are located, so you can delete them from Windows Explorer. If it comes back after THAT, then yes, it's probably a virus. Try going to http://housecall65.trendmicro.com/ for a virus check/removal.

+
0 Votes
OldER Mycroft

My point exactly above yours.

All a thread needs is one suggestion of a virus and all the heavy military ordnance comes out of the cupboard....

+
0 Votes
CavalierX

Everybody wants to be Ellen Ripley. "I say we take off and nuke the entire site from orbit. It's the only way to be sure."

+
0 Votes
Triathlete1981

My boss gave me his old computer to fix up for our network. He has a teenage son. There were over 10 GB of porn on it. Mother of God. I'm surprised the kid could walk.

Have you tried every virus scan under the sun? Sounds like a virus.

You could always do the dirty. Save your data and reinstall.

+
0 Votes
OldER Mycroft

I don't think there is ANY VIRUS !!!

Nobody mentioned a virus until the OP posted for a second time and 'suggested' that the porn slideshow was a virus because it was a protected file.

It was only a protected file because it's a genuine M$ system file. It's just a screensaver!

The only dodgy thing here is the instance of porn popping up when the user was expecting pictures of the Boss's kids.

TOO MANY COOKS...

+
0 Votes
Triathlete1981

get a massage, old. you won't be so angry.

:-)

+
0 Votes
OldER Mycroft

Coming up to nap time right enough!

Never thought of the massage though ...

+
0 Votes
nmpc3

Wow! I didn't think that this would set off a fire storm.

I have already tried deleting all the porn through properties and windows explorer, it keeps coming back.

And I was not snooping! The boss brought this computer to our office for our office needs and will not be returned to his house. He just asked me to go through and take any personal items off the hard drive.

I worked for this guy for 9 years and knew he would know that it was not me. I am a 56 year old grandmother and the reason I hesitated to tell him is because I knew how furious he would be with his son who is now 19 and in Africa on a mission trip.

According to the date, it seems that this was downloaded almost 4 years ago so it is not something that he did recently.

Did I mention that this is going to be used by a new employee who will be doing word processing? That is why we need to remove it - we do not want to be charged with sexual harrassment. There are only 3 of us that work there now and one is the boss.

Thanks again for all the responses. If you have any other suggestions, please let me know. I ran Norton Antivirus again and it did not pick it up.

+
0 Votes
Tig2

First- can you find the folder that contains the images? It may be hidden so consider that when you look.

Download (to a thumb drive if you can from another computer) a copy of the free install from http://www.ccleaner.com. This is a registry cleaner.

Delete the folder of images. Run CCleaner. When the program asks you if you want to make a back up, say YES. Put the back up on the desktop.

Run CCleaner recursively- over and over. When it quits finding things you can stop.

Now reboot. This is important.

When you reboot successfully, kill the registry back up that you made. Reboot again.

I think that what has happened is that there is something in the registry that is allowing this to spawn. This *should* kill it.

Worst case, re-image the pc if you can. Of course, you will want to remove any files that are of importance first.

In the time frame that you mention, I had to clean a number of pcs that had a very similar problem. While not a virus per se, it crept in while the user was doing very innocent things. Please let your boss know that- his son probably got re-directed to a site without knowing it and with no intention of downloading anything. As I recall, that site opened a window and then quickly minimized the window so all you saw on the monitor was a flash- if you saw anything at all. I only found the folder while doing normal maintenance on the computer for a client and then started checking every computer I sat in front of for about 6 months.

Let me know if my process works for you. I have another few tricks up my sleeve if it does not.

Let the boss know his kid is probably quite innocent.

Good luck!

+
0 Votes
nmpc3

Thank you for the information on what to do. It worked!!! Those pictures are finally gone. Thank you, Thank you, Thank you.

+
0 Votes

How to Remove a Screensaver

The simplest method is to use the Uninstall feature of the program. Simply go to your Start Menu/Programs/ and find the program listed, then run the Uninstall.

If the screensaver is not listed there, try opening the Control Panel, then Add/Remove Programs. Scroll down the list of installed programs on your computer, and follow the directions for removing. (Usually highlighting the program by clicking on it, and then the Remove button.)

When all else fails, use your search function's advanced feature. Look for the file extension .scr. The search should bring up all screen saver files on your computer and you can locate the one you want.

Open Windows Explorer, the relevant file folder, and delete the screensaver you want. On most computers running a Windows OS, they are usually found in the Windows/System32 folder.