Security

Ask something
Discussion Locked

Rogue Porn Generator Process or Service

0 helpful
6 replies

by silvermart

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have a process or service running that continuously launches IE in the background and locks onto porn sites. CW Shredder, Ad-Aware/Watch and Spybot 1.3 cannot find it. Norton stopping viruses constantly. Seems to be embedded in a process or service and can't be identified so it can be purged. Running win2K -- anyone dealt with this -- any suggestions -- could even be embedded in IE

6 replies

by pierrejamme

Check your Hosts file, AdAware Custom has this as an option or you can open it and look for yourself. It should only contain one entry:

127.0.0.1 localhost

The file is in the c:\I386 directory or you can do a search of C:\ for hosts.

by jgerlach237719

I had the same problem. I was only able to stop it by identifying ip 213.159.117.131 as a restricted site in Norton Internet security. Its source was a cracker in Russia that placed a virus on web sites that would exploit a newly discovered vulnerability in Internet Explorer that would infect your computer merely by visiting the infected site.

by wlbowers

Turn off system restore if it is used in your os.

Download, update, and run the following.

Your Antivirus Software

Spybot:
http://tinyurl.com/ziar

Ad-Aware:
http://tinyurl.com/tek5

CWshredder:
http://tinyurl.com/2bzef
Or
http://tinyurl.com/2k642
Look for the file in English CWShredder.exe

Hijack This:
http://mjc1.com/mirror/hjt/

Hijack This is useful in that it shows what is currently loading on startup. You must know what is good and what is bad. Once you check it and fix it is gone. So be sure.

Run Your Antivirus again

I have had to boot into safe mode and run these.

Good Luck Lee

by silvermart

Folks. I have truly solved my own problem but the size of the answer and the several steps to take to get rid of the "rogue" exceeds what is allowable in this area.

If you are interested, please send an email to killtherogue@aol and I will be happy to reply with the answer as a Word attachment

Thanks for all of the suggestions but they were wide of the mark -- at least for me.

This discussion is closed to new replies.