Something/someone is sending viagra ads 2 random people in my contact list!?

Question

Dont know how/why but something/someone is sending totally inappropiate ads to random people in my contact list. Could it be a virus? How can I get rid of it? Its embarrasing, 2 say the least! I have an anti-virus thing installed... how could this have happened?

Answer 1

Scan with superantispyware and malwarebytes too. Weboot is not 100% (no program is).

Answer 2

Since AZiNEC seems to have covered the anti-virus software part of it but I will explain manual removal in case that doesn't work.



A) Delete ALL executable files you have downloaded.

B) Get Process Explorer (See link in sources) and run it.

C) Figure out which process is the Virus (can use google to verify each one)

D) It will tell you where it is running from (won't be the original file), write the files location down.

E) Kill the process

F) Start --> Run --> type "regedit"

G) Ctrl+F and search for "runonce" with the search set to keys

H) Just above RunOnce should be Run click on it, this will list all things that run when your computer starts up and what file it runs

I) Check the entries against the what you wrote down in step D, delete the one that matches

J) Then find the file from step D and delete it.



Once you have removed the virus you're going to need to change your password, these viruses work by getting your password then feed your account into a server to send emails thus until you change your password they still have the correct credentials to log in and send emails.

Answer 3

generally its a malware.. whats your anti virus?

try using SimplySup's Anti Trojan and malware.. its a full working 20day trial.. its pretty powerful in removing persistent virus/malware.



Trojan Remover aids in the removal of Malware - Trojan Horses, Worms, Adware, Spyware - when standard anti-virus software either fails to detect them or fails to effectively eliminate them. Standard antivirus programs are good at detecting this Malware, but not always good at effectively removing it.



http://simplysup.com/tremover/download.html



Its just like Sohanad.worm in YM that sends inappropriate websites.