Topic: Porno jpeg - can't delete

[momad30044]

I am so hoping that someone can help!  My boys download music from Winmax which they swear is safe and unobjectionable.  My son tells me yesterday he found a porno jpeg in his "my music" file (under "My Documents").  Sure enough.  It has a long, racey, nasty title and you can't delete it, rename it, or move it into a separate file.  

I spoke with the AOL Tech Help people and they said it was most likely an adware, spyware, etc....to update everything and it would go away.  Did that...it's still there.  How do I get rid of it?

You can't open it in Photoshop, despite it being a jpeg.  (I thought I could open it, change the file name and then delete).  

Help!  I want this ugly thing off my computer!

Thanks,

Debbie

[Clive]

Download http://www.x-raypc.com/ which will examine the files in your registry and automatically analyse them for you.  It will tell you which are the bad files and allow you to disable them.  Let us know how you get on with that.    8)

http://www.x-raypc.com/

[Simon]

Hi Debbie,

Try going into safe mode (press F8 repeatedly during boot up) and see if it will delete.  If not, still in safe mode, try running Ad Aware, and Spybot, to see if that gets rid of it.  If still no luck, boot back into normal Windows, then temporarily disable System Restore (if you have XP or ME), go back into safe mode, and try the procedures again.  Hopefully the info below may help:-

Ad Aware
Spybot S&D
Spyware Blaster

Windows prevents outside programs, including antivirus programs, from modifying System Restore. Therefore, antivirus programs or tools cannot remove threats in the System Restore folder. As a result, System Restore has the potential of restoring an infected file on your computer, even after you have cleaned the infected files from all the other locations.

Also, a virus scan may detect a threat in the System Restore folder even though you have removed the threat.

To disable System Restore, right click your My Computer desktop icon, and select Properties, then the System Restore tab.  Untick the box, to switch off System Restore.  Don't forget to enable it again, once you have cleaned your machine.

You could also try Clive's suggestion, as he got in first!  

[Clive]

Debbie, if you are on dial-up you should make sure that your connection hasn't been hijacked to a premium rate number.  Look in Internet Options/ Connections and see if anything new has been added there.  If you are on BB then make sure your 56K modem phone line is disconnected so that your computer can't dial up by itself!