Porn bill. Can't get rid of.

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

I'd go for the format & reinstall option after you've ran some free malware/spyware software - could solve the problem in 10 mins, if it doesn't a reinstall will only take you 10 mins longer - not much for the effort.

You're friend needs to try some cleaner stuff next time

 

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

Try a free online scanner. Here is one that worked for me when a non-tech friend sent me a virus though IM. AVG couldn't find it but they did.

http://housecall.trendmicro.com/

If you don't want to use that one panda has one to. Just google free online antivirus scanner. They scan for both virus and spyware.

 

Format and re-install is the only way and before you do format, make sure you get the good stuff off his hard drive first

 

omg, your not getting anywhere near my puter, ever!

 

Now that's a sign of hiding something

 

It's definitely malware, and it's a spoof bill, meaning anyone visiting that site could pick it up, especially if they use Internet explorer and don't utilise some form of spyware/malware/adware blocking software like Javacool's *spywarebalster*

It's worth downloading and running Windows Defender, Spybot S&D and Ad-aware as all these applications are free and can usually eradicate most instances of malware. Note using just one on it's own is rarely successful. Also, if system restore isn't successful and i doubt it will be you need to turn it off prior to running these cleaners, also it is a good idea to run them in safe mode - if you don't turn off system restore, you might find the problem returning as these nasties can hide in the system restore files themselves.

A re-format is the only way to know for sure that you have fully cleaned the system, but it will take a lot more than 10 minutes, as you will then need to re-install all his chipset drivers, hardware drivers, applications, anti virus programs and update the operating system files. Then you will have to restore all his data and set up his Outlook, emails etc. It will take hours!!

 

LOL!

Have you done a search for the actual name of the website? It might have a solution to decrypting the key in the registry that will get rid of the bill.

 

Interesting. How do you do that ?

 

Maybe run hijackthis on the computer aswell. Available here http://www.spywareinfo.com/~merijn/programs.php#hijackthis

Then copy and paste the log here to see what goodies you have. http://www.hijackthis.de/

 

An encrypted key can be placed in the registry with associated .dll in a hidden folder somewhere that effectively locks the malware into the system. When the bill is payed an application with associated unlocker clears the menace, although this is not the same as deleting the malware from the system.

I'm not saying that this is the method guaranteed to be used, but it has been used in the past and is very, very tough to get rid of.

Depending on how well designed the malware is (in some extremely rare cases) it could mean trashing the physical HD to guarantee that you've go rid of it.

 

Thanks, Raffaz.

I'll email these links over to my mate and give it a go.

 

This too is another option. Thanks, Sparks.

 

Scary stuff. Thanx, Mathematix.

 

But of course Wiz. Every girl has secrects. However, you will not be fig them out anytime soon.

 

Yep, that's got my vote as well - he's probably got an app sitting resident on his system. May not even be a real bill... just a bit of intimidation (that some people probably pay).

 

REALLY nasty stuff will rootkit itself into your system, hiding all traces of itself to your OS. You don't see it, your OS can't see it, and your AV either can't see it or at best, can't pry it out. They usually come bundled with keyloggers that will capture your credit card info, passwords, and other harmful data. A repartition, reformat, and reinstall is the ONLY way to go when that happens. If he's got that level of nastiness and he doesn't nuke and repave, he'll eventually wish he had...

 

Don't worry one day you will slip up and reveal all

 

No problem, mate. I just hope that your mate can get rid of it without too much hassle.