|At work one of my users complained that pop-ups (porn and the like) were coming up everywhere and according to him the mouse was moving by itself (which really concerns me). He shut the machine down immediately. I disconnected the machine from the network and booted into XP (SP3 I think). AVG instantly popped up stating a virus had been found" File: C:\Windows\system32\ws2_32.dll Infection: Virus found in Win32/Patched Result: Object is white-listed (Critical/System file that should not be removed)"|
That lists itself about 20 times and keeps adding more lines of the same thing the longer the machine is on.
Performed an AVG virus scan (Network Edition 8.5) and it found 3 virii, was able to heal/remove 2. It asked for a reboot and upon reboot began popping up with the same thing. I started a malwarebytes scan and ran Hijackthis on the machine. Here is a link to the logfile.
Any help is greatly appreciated.
I am also curious what kind of security risk this poses to the rest of my network (about 35 machines and an SBS server). Like I said I disconnected the machine from the network and I ran a succesful (and uneventful) scan on the server.
Thanks in advance --J