Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows Security Alert


  • Please log in to reply
2 replies to this topic

#1 romanonly

romanonly

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:10:54 PM

Posted 18 March 2010 - 01:43 PM

Okay, here's the deal. My GF's computer is SEVERELY infected. Multiple things are happening.

1. When I try to run .exe's I get this message in a pop up window:

Application cannot be executed. The file XXXXXXX.exe is infected. Do you want to activate your antivirus software now? (yes)(no)

This applies to just about every .exe from photoshop to task manager. They open for a split second, close, and the popup appears.

2. A green shield appears in the task tray and a word bubble pops up from it. This is what it says:

Windows Security alert
Windows reports that computer is infected. Antivirus software helps to protect your computer against viruses and other securtiy threats. Click here for the scan you computer. Your system might be at risk now. (Notice the bad English, smart enough to build malware, but they can't write!)

3. A pop up comes up in the lower right corner of the screen above the task tray, it's white with a red title bar that says Antivirus software alert. The rest of the dialog says this:

INFILTRATION ALERT virus attack

Your computer is being attacked by an internet virus. It could be a password-stealing attack, a trojan - dropper or similar.

DETAILS
Attack from: 151.65.11.98, port 5815
Attacked port: 40153
Threat: Win32/Nuqel

Do you want to block this attack?(yes)(no)

4. Windows Security System opens on it's own, with the "Malware Protection" expanded asking me to monitor my virus protection.

5. Internet Explorer (not the default browser) keeps opening to porn sites.

6. Another pop up comes up in the middle of the screen, also white with a red title bar asking me if I want to protect my computer from viruses.

7. Does "ANTIVIRUS SOFT" ring a bell for anyone? That's the software that's being offered to "fix" the problem. Yeah right!

If anyone could give me some help with getting rid of this obnoxious virus so the notebook can be usable again, please help!!!

Thank you!

BC AdBot (Login to Remove)

 


#2 romanonly

romanonly
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:10:54 PM

Posted 18 March 2010 - 02:15 PM

Sorry, I did not read the preparation thread, I now have and it really does no good whatsoever. The malware will not let me run Defogger and I definitely have Drive Emulation running.

It also will not run dds.scr because: "The file consent.exe is infected" I assume that this file is related to User Account Control? The dos looking window comes up with text about running a scan but immediately closes. :thumbsup:

Windows firewall was already enabled, so that's good to go.

Edited by romanonly, 18 March 2010 - 02:17 PM.


#3 romanonly

romanonly
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:10:54 PM

Posted 19 March 2010 - 10:23 AM

Nevermind!!!

A friend of a friend came over last night who works for a networking security company, he broke out a usb thumb drive with some kind of magical software that his company created and less than 10 minutes later, VIOLA! It's fixed!

Someone needs to teach me THAT trick!




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users