Posted 15 December 2010 - 10:41 AM
A friend of mine brought over his HP Mini 1000 netbook with Windows XP for me to look at. I am usually pretty good at wiping out viruses. This one though has given me a run for my money and is still winning. You cannot access any repair files because it will give you the security warning box that states - application cannot be executed. The file is infected. do you want to activate your antivirus software now? Then four additional boxes appear after that.
Windows security alert - windows reports that computer is infected. Antivirus software helps to protect your computer against viruses and other security threats. Click here for the scan your computer. Your system might be at risk now.
Antivirus software alert - attention! spyware alert. Vulnerabilities found. Your computer is infected by spyware - 34 serious threats have been found while scanning your files and registry. It is strongly recommended that you disinfect your computer and activate realtime secure protection against future intrusions. Why do you need realtime spyware protection (this is a hyperlink)? Upgrade to full version of antivirus software to clean your computer and prevent new security and privacy attacks. You will be able to download daily updates and get online protection against internet attacks. Then it has two boxes you can click on - activate your antivirus software or stay unprotected.
Antivirus software alert - infiltration alert (virus attack). your computer is being attacked by an internet virus. It could be a password-stealing attack, a trojan -dropper or similar. Details - attack from: 220.127.116.11, port 59103 attacked port: 54011 threat: Win32/Nuqel.E Do you want to block this attack? yes or no boxes.
The last box is internet explorer and it switches back and forth between two websites - porno.com and viagra.com
The infiltration box switches frequently giving me new IP and port info every couple of minutes, for ex. just since I posted the above info I already am showing a new attack from: 18.104.22.168, port 62086 attacked port: 20670 threat: same as above.
If I try to access a different web page to run a scan or anything I get: Internet Explorer Warning - visiting this website may harm your computer! And it gives me two links to either purchase secure internet surfing or check my computer for viruses and malware.
I tried safe mode and got nowhere. I also tried chkdsk and got the infection message. I tried downloading avira through a flash drive and again got an infection message. I tried last good known configuration and got no where. I can't use the restore option either.
Please help! Not sure what else I can do. My friend had let someone borrow his XP cd and never got it back so I can't even use that. I can download from my computer to his via flash drive if I need to.
Edit: Moved topic from XP to the more appropriate forum. ~ Animal