ultron
|
Nicole, you're fine. Here is what you do:
Step 1)
On another computer, download Malwarebytes. It is a free program.
Also download ProcessExplorer.
Step 2)
Drag the programs on your infected computer via a USB stick or whatever you choose. If you cannot do this, you may have to boot into SafeMode to do it.
Step 3)
Identify the browser that the program is using to send you to porn websites. It will probably be Internet Explorer, but even if it isn't, try this:
First, unzip ProcessExplorer until you find an executable file. If you cannot run winrar on your computer, then be sure to unzip the file before transferring it. Then, if you can, make your computer be able to see the full file type of your files (meaning you should be able to see "procexp.exe" and not just "procexp."
Doing this depends on your OS. If you have XP, follow these instructions:
http://www.fileinfo.com/help/windows-show-extensions.html
If you have Windows 7, follow these instructions:
http://askabouttech.com/how-to-show-file-extension-in-windows-7/
If you cannot do this, it may not matter. Just proceed.
Step 4)
Now that you can see your file extension, change the filename of your procexp.exe to iexplore.exe. We are trying to trick your virus into thinking you're opening up a webpage for them to buy their software. This should allow ProcessExplorer to run. If it does not, you'll have to boot into SafeMode, but this should work.
Step 5)
Once ProcessExplorer is running, identify the virus software. Scroll down until you see explorer.exe. It should be somewhere under there. If you can't figure out on your own which is the virus (it will probably name itself either some Anti-Virus name or some random string of letters), post here and we'll identify it.
Step 6)
Once you have identified the virus, right click it and select Kill Process Tree.
If you have gotten to this point, you're pretty much home free. We are just cleaning up from here.
Step 7)
After you have stopped the virus from running, it is time to install MalwareBytes. You could have tried installing this in the beginning, but most viruses these days restrict you from running programs other than the ones they allow (like iexplore.exe).
Step 8)
Run Malwarebytes and let it find and quarantine the virus.
Step 9)
Press Start, then select Run. Type in "msconfig" and press enter.
Go to the Startup tab.
Step 10)
Scroll down and look at all the processes are checked. Look for strange names, like strings of random letters. Can you identify these programs? If not, uncheck the name from the list. Press Apply and OK.
From here you should be pretty good. If you found some funny string of letters in that list, you can try hunting it down by looking at the file path and seeing if there is anything there. If there is, you can try to delete it if MalwareBytes hasn't already done so.
Step 11)
Reboot your computer to see if it's working and let us know.
|
