Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Fake "User Account Control" in XP

  • Please log in to reply
2 replies to this topic

#1 JoseTech


  • Members
  • 2 posts
  • Local time:04:32 PM

Posted 22 April 2010 - 09:47 PM

I'm this XP-SP3 PC with some kind of infection that brings up a "User Account Control" popup any time I try to run any program, any browser, Task Manager, etc.
When I try to run anything the popup says "Windows Security Center block active process: csrcs.exe Process try direct access to memory process programName."
I have 2 options, Allow, which will close the program I'm trying to run or "Scan System", which will take me down the purchase path.
One way or another I'm unable to open browsers, rkill (in any form), anything outside of ComboFix won't open, ComboFix opens but it doesn't seem to get rid of it.
By the way, those UAC popups are active even in Safe mode with Networking.

I've tried ComboFix, RKill, Malwarebytes' Anti-Malware.
I've taking the hard drive out and connected it to another PC, where I ran MS-Security Essentials, Avira, AVG9 and they didn't get rid of this thing.

Any ideas? I'm ready to try anything.

Thanks much

BC AdBot (Login to Remove)


#2 JoseTech

  • Topic Starter

  • Members
  • 2 posts
  • Local time:04:32 PM

Posted 29 April 2010 - 01:28 PM

Nobody out there has really experienced this one?
I'm ready to reinstall XP.


#3 Orange Blossom

Orange Blossom

    OBleepin Investigator

  • Moderator
  • 37,011 posts
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:04:32 PM

Posted 13 May 2010 - 11:40 PM


That request about NOT posting CF logs is primarily to keep people from running the program unsupervised.

Please read this topic: http://www.bleepingcomputer.com/forums/t/273628/combofix-usage-questions-help-look-here/ which explains that reasoning further.

Please follow the instructions in ==>This Guide<== starting at step 6.

Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Since you have run ComboFix, please include the ComboFix log in the new topic.

If you cannot produce any of the other logs, then please create the new topic anyway, include the information that you were unable to produce the other logs and why and include the ComboFix log along with a description of your computer issues.

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users