Posted 16 August 2010 - 04:33 PM
Its a inspiron 1525 running windows Vista
While I was away my bf followed a link on facebook and got a virus. Im not sure of the details other then what he can tell me.
Shortly after following the link when he tried to open IE he would get a msg saying it has been blocked. Then it started opening windows taking him to a antivirus site. He tried to run a scan through norton and it would not let him. He restarted in safe mode and ran the scan and Norton said it found no issues. He tried to do a system restore and couldn't.
Im not sure what happened between then and when I got home. By the time I got home all the IE windows had stopped popping up. The computer would not connect to a network, sometimes it would find them other times it couldn't. When attempting to connect I am told the my wep key is wrong (its not) other times it just cant connect. Before that he had been able to get on the netwrok with a cable, then it wouldent recognize it Help and support is not able to start. It cant communicate with a printer (plugged in) and a bunch of other random problems.
I checked the logs on norton and found the firewall has been modified to allow outbound traffic to two different sites-
The first says its with Adobe but I doubt it
Program name- AcroRd32
Location- C:\Program Files\Adobe\Reader 8.0\AcroRd32.exe
Remote Computer- 126.96.36.199
I googled the ip and its associated with all kinds of malware
The second is
Program name- pfujsvytssd
Remote Computer- 188.8.131.52
Google of the ip shows all kinds of antispyware viruses coming from it.
I downloaded Malwarebytes and it found-
It didn't remove all of them on the first try, but after a few times it supposedly got rid of everything.
I still cant connect to a network or get on the Internet, and am still having all kinds of random problems.