Home > General > Porn.exe

Porn.exe

It was coming in through emails disguised to look like pdf documents from internal sources. Thanks for this how-to, I hope it helps others who may experience this annoying malware. Porn.exe is not a Windows system file. If the files are removed manually they are recreated when somene tries to access the shared drive. weblink

Anmelden Teilen Mehr Melden Möchtest du dieses Video melden? it may help others to follow the steps and get rid of this malicious virus. 0 Featured Post Problems using Powershell and Active Directory? A deep scan is necessary. 2 Serrano OP JoshLar Dec 13, 2012 at 9:16 UTC One quick note if you're having trouble finding out who has the virus A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. https://community.spiceworks.com/how_to/38894-how-to-remove-the-porn-exe-virus

It was not a fun time. It is a file with no information about its developer. Do not delete this folder...it will help protect your drives from future infection by keeping the autorun file from being installed on the root drive and running other malicious files. ===================================================

I was at a loss of how the original files were still there but I could not see them even with the "show hidden folder" setting on. In this scenario, the "folder location" is the child folder that still has hidden files. 4 Remove Infected Files As noted in the introduction, this virus creates ".exe" files with the They come in all types of weird names, and it was different on each workstation we found it on. The next person to click on one of the .exe's  thinking it is the real folder then infects their computer and it then goes on to their shared drives, etc.

Advertisement Jealsj Thread Starter Joined: Mar 16, 2008 Messages: 96 Greetings to all. I have scanned with Kaspersky and Norton Internet Security. jealsj Jealsj, Sep 27, 2012 #3 Satchfan Malware Specialist Joined: Jan 12, 2009 Messages: 653 Hi Jealsj Kaspersky is excellent and I'm pleased that the previous symptoms have gone. https://www.symantec.com/connect/forums/pornexe-sexyexe-passwordsexe-etc-virus-cleanup Site Changelog Community Forum Software by IP.Board Sign In Use Facebook Use Twitter Need an account?

Sign In Now Sign in to follow this Followers 3 Go To Topic Listing Malwarebytes Anti-Rootkit BETA Support Recently Browsing 0 members No registered users viewing this page. or read our Welcome Guide to learn how to use this site. Need urgent help!! This site is completely free -- paid for by advertisers and donations.

  • Reply Subscribe RELATED TOPICS: Porn.exe Sexy.exe outbreak Globally in my Organisation.
  • It is also highly recommended that you investigate any other Windows computers on your network as they might be infected already.
  • by ericb08132 on Dec 13, 2012 at 7:22 UTC Windows 12 Next: Bugcheck Join the Community!
  • Die Bewertungsfunktion ist nach Ausleihen des Videos verfügbar.
  • please reply within 3 days.

Please see the following pinned topic which has information on how to get help with this: Available Assistance for Possibly Infected Computers Thank you Share this post Link to post Share Tech Support Guy is completely free -- paid for by advertisers and donations. Open an elevated command prompt and enter the following command: "attrib -r -a -s -h " This will unhide the folder and remove the attributes. can anybody please help.

Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site. Run this tool on all usb drives and computers: double-click Flash_Disinfector.exe to run it and follow any prompts that may appear the utility may ask you to insert your flash drive Loading... Wird verarbeitet...

We recommend SecurityTaskManager for verifying your computer's security. or read our Welcome Guide to learn how to use this site. The application starts when Windows starts (see Registry key: Run). Mark each machine clean as you go and leave it turned off to indicate it is clean.

Steps (6 total) 1 Remove User Permissions to All Network Shares Scrub each server on your network for shared folders. Several functions may not work. If you do not reply within this period I will post a reminder but topics with no reply in 4 days will be closed!

It is possible that all is now well but if you want us to look further, we're happy to do so.

When the Kaspersky scan has completed, download and complete a full scan with Microsoft Security Essentials. 6 Restore File Share Permissions After all scans have completed, restore share permissions for each Sign In Sign In Remember me Not recommended on shared computers Sign in anonymously Sign In Forgot your password? Interesting notes from the others about what has and has not found it. When spotted I killed the VPN for one site, and checked another site that does not share the same shares, they were ok so I left them alone.

Basically, you need to be swift and clean all machines that are infected. Sign Up This Topic All Content This Topic This Forum Advanced Search Browse Forums Guidelines Staff Online Users Members More Activity All Activity My Activity Streams Unread Content Content I Started We practically cleaned the environment as per the below: 1-Disabled autorun through GPO 2-turned off all switches 3-removed the hidden attributes on the shared drives (attrib *.* Go to Solution 3 Once you can see all of the hidden files/folders, permissions have to be changed to remove the "hidden" and "system file" attributes.

What do I do? Wird geladen... Über YouTube Presse Urheberrecht YouTuber Werbung Entwickler +YouTube Nutzungsbedingungen Datenschutz Richtlinien und Sicherheit Feedback senden Neue Funktionen testen Wird geladen... Notepad will open with the results. Join the community Back I agree Powerful tools you need, all for free.

porn.exe, sexy.exe virus Started by wgtadmin , Nov 26 2012 11:58 AM This topic is locked 2 replies to this topic #1 wgtadmin wgtadmin Members 1 posts OFFLINE Local time:07:31 Today the files are back, and they are spreading to the other shared folders as well. Keep in touch with Experts ExchangeTech news and trends delivered to your inbox every month Membership How it Works Gigs Live Careers Plans and Pricing For Business Become an Expert Resource Please do this even if you have previously posted logs for us.If you were unable to produce the logs originally please try once more.If you are unable to create a log

Do not allow the infected machine on the network in a native Windows environment until you have confirmed the worm has been purged. Why not be the first to write a short comment? Help Desk » Inventory » Monitor » Community » Home Virus making porn.exe files and Hiding folders on sharded drives.