This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Malware removal for PC - infected from porn sites??

76 min read

This thread's last reply is from February 21, 2017, 8:53 PM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

Yes i was testing those, i know alot of the plugins i have can slow down the browser and block certain images, but i was testing with and without them and there was definitely a significant decrease in performance at the time. updating firefox seemed to remedy that though. but i even noticed decreases in performance for programs like Filezilla , outside of browsers and everything which was making me suspicious.

Computer seems fine, i have updated windows and some graphics drivers and various things also. seems to be running okay.

Am interested to hear any suggestions you have about how i can maintain my PC against viruses/malware and all of that?

I am currently not running a standard global anti-virus as it used to inhibit a VPN, which i no longer use. i guess i should enable some kind of AVG antivirus or something?

Thanks!

Here is the fixlog as requested:

Fix result of Farbar Recovery Scan Tool (x64) Version: 15-02-2017 02
Ran by [removed] (18-02-2017 10:11:03) Run:2
Running from E:\firefox downloads
[removed]
Boot Mode: Normal
==============================================

fixlist content:
*****************
D:\ALL BACKUPS\Desktop\GOMPLAYERENSETUP.EXE
D:\ALL BACKUPS\Desktop\Setup_FreeConverter.exe
D:\ALL BACKUPS\old desktop and settings files\Desktop\GOMPLAYERENSETUP.EXE
D:\ALL BACKUPS\old desktop and settings files\Desktop\winamp5601_full_emusic-7plus_en-us.exe
E:\APOLLO\What.CD Toolbox 6 for Windows\Burning\SetupImgBurn_2.5.8.0.exe
E:\APOLLO\What.CD Toolbox 6 for Windows\ContentAnalysis\Adobe Audition CCv6.0.732\adobe.photoshop.cc-patch-painter.exe
E:\APOLLO\What.CD Toolbox 6 for Windows\FileManagement\FreeFileSync_5.20_Windows_Setup.exe
E:\firefox downloads\rcsetup153.exe
F:\#C drive backup from legit windows install\desktop\flynn\Desktop\ccsetup515.exe
F:\#C drive backup from legit windows install\desktop\New folder\Desktop\ccsetup515.exe
F:\#C drive backup from legit windows install\desktop\New folder\New folder\Desktop\ccsetup515.exe
F:\Programs\utorrent\uTorrent.exe
*****************

D:\ALL BACKUPS\Desktop\GOMPLAYERENSETUP.EXE => moved successfully
D:\ALL BACKUPS\Desktop\Setup_FreeConverter.exe => moved successfully
D:\ALL BACKUPS\old desktop and settings files\Desktop\GOMPLAYERENSETUP.EXE => moved successfully
D:\ALL BACKUPS\old desktop and settings files\Desktop\winamp5601_full_emusic-7plus_en-us.exe => moved successfully
E:\APOLLO\What.CD Toolbox 6 for Windows\Burning\SetupImgBurn_2.5.8.0.exe => moved successfully
"E:\APOLLO\What.CD Toolbox 6 for Windows\ContentAnalysis\Adobe Audition CCv6.0.732\adobe.photoshop.cc-patch-painter.exe" => not found.
"E:\APOLLO\What.CD Toolbox 6 for Windows\FileManagement\FreeFileSync_5.20_Windows_Setup.exe" => not found.
E:\firefox downloads\rcsetup153.exe => moved successfully
F:\#C drive backup from legit windows install\desktop\flynn\Desktop\ccsetup515.exe => moved successfully
F:\#C drive backup from legit windows install\desktop\New folder\Desktop\ccsetup515.exe => moved successfully
F:\#C drive backup from legit windows install\desktop\New folder\New folder\Desktop\ccsetup515.exe => moved successfully
F:\Programs\utorrent\uTorrent.exe => moved successfully

==== End of Fixlog 10:11:06 ====
Hello purgemypcplease,


"purgemypcplease" wrote:
I am currently not running a standard global anti-virus as it used to inhibit a VPN, which i no longer use. i guess i should enable some kind of AVG antivirus or something?

Your last set of FRST logs indicated that you had Bitdefender installed.

AV: Bitdefender Antivirus Free Edition (Enabled - Up to date) {3FB17364-4FCC-0FA7-6BBF-973897395371}
AS: Bitdefender Antivirus Free Edition (Enabled - Up to date) {84D09280-69F6-0029-510F-AC4AECBE19CC}

Since you removed it, I would advise you to either re-install it or install one of the following Antivirus:

  • Avast!
  • Microsoft Security Essentials



I also see that you have the following programs installed on your computer:

Malwarebytes Anti-Malware version 2.2.1.1043
Spybot - Search & Destroy

You should remove one and keep the other. This isn't as much related to security as it is to computer performance, since both programs running simultaneously along with an AV will most likely decrease your computer speed. If you choose to keep Malwarebytes installed on your computer, please be aware that there is a new version of the program out (Malwarebytes 3.0). Although the MBAM sites mentions that the new version can replace a traditional Antivirus, I would still recommend to use it alongside one of the AVs mentioned above.


I have good news.. there are no more signs of malware on your computer! :) Please follow the steps below and then you'll be all set to go..


Let's take care of the outdated programs on your computer..

  • Click the Star Menu and select Control Panel.
  • Click Programs, then Programs and Features.
  • Select the following programs:

    • Adobe Flash Player 22 ActiveX
    • Adobe Flash Player 22 NPAPI
    • Adobe Reader 9

  • Select Uninstall.
  • When prompted select Yes.
  • Answer any questions attentively.
  • When the process is finished, please restart your computer.

Note: you can only remove one program at a time.


You can re-install both programs by following the links below..

  • Adobe Flash Player
  • Adobe Reader DC
    Please be careful and uncheck any bundled offers.



The following program was discontinued several years ago and is vulnerable.

Microsoft Office Standard Edition 2003

I would highly recommend you to either upgrade to a newer version or use one of the free alternatives mentioned in the following article: Free Microsoft Office Alternatives


Next..


Let's remove the tools we have been using so far..
  • Please download Delfix to your desktop.
  • Right-click on delfix_1.013.exe and select Run as administrator.
  • Check the following boxes:

    • Remove disinfection tools
    • Purge system restore

  • You can now safely remove any tools and/or logs that may remain on your computer.



Before I start addressing computer security and browsing habits, I just want to mention that I am not here to make any judgement; I am merely trying to inform you of the possible consequences should you choose to continue to use your computer the way you do.

When you first posted you mentioned that you thought your computer had caught an infection because you were accessing porn websites. I can assure you that visiting these types of websites, along with the use of peer-to-peer software (qbittorent, Utorrent, etc..) is a sure way to catch an infection. The same goes for the use of cracked/illegal software, which I found in your ESET scan!

Fortunately, the items I removed from your computer were remnants of a former Adware infection and there was no sign of active malware on your computer. However, next time could be a completely different story... Malware writers nowadays create computer infections for the sole purpose of making money and they are very good at it. The infections that can be found on websites, such as those you visit, include ransomware (which will encrypt all your files in order to extort money from you); Remote Access Infections (which are used to steal someone's identity, distribute illegal pornography using your computer, etc..) and other serious threats.

As a computer user, the onus is on you to try and prevent such serious infections from accessing your computer. Below you will find some very informative articles which I highly advise you to read attentively and bookmark.



With everything said above, I would also like to mention that if you request help at this forum in the future and we see that you still engage in bad browsing habits, use of P2P software and/or have cracked/illegal programs on your computer, you might not receive any help.

If you have any questions, feel free to ask, otherwise please acknowledge that you have seen this post and I will request for this topic to be closed.
As there have been no additional comments or requests by the topic's originator, this issue is presumed to be resolved and