Posted 06 July 2010 - 07:36 AM
First time here so please bear with me. I am trying to fix a friend's Vista laptop. When booted up shortly after it receives the following popup (in the middle of the screen):
Security Warning: Application cannot be executed. The file xxx is infected. Do you want to activate your antivirus software now?
In the bottom right of the screen above the system tray two more popups. 1) same as above 2) Antivirus software alert stating "your computer is being attacked by an internet virus. It could be a password-stealing attack, a trojan - dropper or similar. Details: attack from IP-address xxx, port 60552. Attacked port: 55557. Threat BankerFox.a Do you want to block this attack.
In normal windows mode, nothing can be done (well minimal). I can't get any webpage to load. However, if I let the above messages stay up, shortly after tons of web page windows will come up - all with various porn/viagra sites.
This laptop does have an OLD version of Kaspersky security suite. I tried to manually update the definitions but it wouldn't let me (I believe because the trial version it was on expired). I tried to remove Kaspersky but nothing happens when I try. I can't pull up task manager.
I can get into Safe mode and don't receive all these popups, but not alot I can do in safe mode. I can't remove Kaspersky there, says I must do in normal mode.
I did download Microsoft Malware tool on a thumb drive from another computer and run it with full scan, nothing found.
I'm sure you guys have seen this before. Any and all help on what to do to remove/clean this up would be greatly appreciated.