Attack from: 18.104.22.168, port 13737
Attacked port: 17851
Attack from: 22.214.171.124, port 15088
Attacked port: 38493
Threat: Wind32/Nugel F
and there may have been more that were different.
I am also getting countless security warnings saying "Application cannot be executed. The filed wuauclt.exe is infected." The file changes frequently, it has also said rstrui.exe, verclsid.exe, and more.
If I try to open System Restore, or even Task Manager, the window pops for a split second and disappears before I can see or do anything.
The same thing is happening when I try to download antivirus software. When I try to run these programs, they disappear almost immediately.
I am also getting several internet pop ups now. I'm unsure what to try.
(Also, I viewed the Malware and Spyware Cleaning Guide and I downloaded TFC and MalwareBytes' Anti-Malware. I was unable to run either of these - they would pop up and quickly disappear. I tried renaming mbam.exe, but the problem persists. I get an alert "Application cannot be executed. The file mbam.exe is infected." When I change the name, the name in the alert just changes. I also downloaded ERUNT but couldn't even get past setup without the window disappearing.)
Update- since Firefox was working, I renamed mbam.exe to firefox.exe and was able to run MalwareBytes' Anti-Malware. For now, everything seems to be working.
Edited by lindsey91, 12 May 2010 - 10:50 AM.