Posted 06 November 2010 - 12:46 PM
I could use some help removing a nasty. The computer that has the problem is running XP Home SP3. When using Firefox, I have been getting random redirects and sometimes a pop up message that says "Wait a minute! This is important - we check your device - Mozilla Firefox. In the pop up window it also shows an ip address. After this it opens up a fake looking Windows Security screen which pretends to scan the computer and then prompts you to download an .exe file.
The computer had Avast Antivirus on it and when I scanned the computer after this found several files that were all similar to Win32:Fake AV-AVL (Drp) I have tried running MalwareBytes and SuperAntiSpyware on the computer. After both programs installed, they would not start or run. I had to rename them to get them to start and scan.
The update function did not work on either though and said there was no internet connection even though I can get online. This happens both in safe mode with networking and normal mode. I disabled the windows firewall to ensure that was not preveting them from connecting. I eventually updated MBam manually and scanned. I have logs for both if it would help.
I would assume the virus/malware is preventing the update features from working. I also tried removing Avast (successful) and installing AVG Free 2011 but it will not install due to not being able to connect to the net.