Urgent System Infected

lemontree

Message Windows Security Alert is infected and offering to sell software.Attack from 165.21.173.37 port697
Attacked Port Threat Win32/Nugel.E
I have tried to run CC Cleaner and AVG but it states these are infected and cannot run.
As I am am not at all technical I have no idea what to do.
Any help appreciated!!!!!!

aliEnRIK

reboot and keep pressing F8 to get into SAFE MODE WITH NETWORKING

Download MALWAREBYTES (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_malwarebytes_anti_malware/
Open malwarebytes and goto UPDATE and click 'check for updates'. After its updated goto SCANNER and click PERFORM FULL SCAN then click SCAN
Remove everything thats found (needs to be ticked)
Post the COMPLETE log here AFTER youve deleted everything it finds

reboot
Download HIJACK THIS (Make sure you click 'DOWNLOAD THIS VERSION')
http://www.filehippo.com/download_hijackthis/2894/
Click MAIN MENU then DO A SYSTEM SCAN AND SAVE A LOGFILE(Takes seconds) then post the log so we can see whats running
(do NOT do anything else with Hijack but scan and post the FULL log)

lemontree

Rebooted and pressed PF8 repeatedly but cannot get into safe mode as each time Windows XP loads with all the warnings.

financequest

Just a thought, you ned to press PF8 as AliEnRIK advises, but be sure to press it during the boot process, not after boot has completed.

lemontree

Antiviral Solution Pro keeps popping up and scanning even though I keep stopping it.

GunJack

keep tapping F8 from as soon as you push the power button

lemontree

I have tried this lots of times but it does not work.
Is there anything else I can try?

exegnomad

Do you have access to another computer ( at work or a friend's).

You could download a free bootable rescue disk from several opf the antivirus companies such as F-secure or Avira
http://www.f-secure.com/linux-weblog/2008/06/19/f-secure-rescue-cd-300-released/

http://www.avira.com/en/support/support_downloads.html

Put the rescue cd in the cd-drive, switch off, wait a few seconds and switch back on.
The pc should boot up from the cd instead of in windows, and will be scanned for malware.
When cleaned you can switch off and re-boot back into windows.
Then try antimalwarebytes or superantispywarepro

aliEnRIK

Download HostsXpert
http://www.softpedia.com/progDownload/Hoster-Download-27041.html
and then follow the below steps.

* Unzip HostsXpert.zip
* It will create a folder named HostsXpert in whatever folder you extract it to.
* Run HostsXpert.exe by double clicking on it.
* click the Make Writeable? button.
* click Restore Microsoft's Hosts File and then click OK.
* Click the X to exit the program


then try malwarebytes again

explumber

Hi lemontree,

I had a similar problem, quite recently.
as the desk top started to load, the rogue virus scanner automatically started running. as it did i tapped the control alt and delete keys to bring up the task manager, and hit the end task box in the window that opened. you should then be able to follow the advice given by previous posters on your dillema.
good luck.

Linbox

Check this out read it ALL
http://forums.moneysavingexpert.com/showpost.html?p=31881347&postcount=215