Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Infiltration Alert Virus Attack BankerFox.A

  • Please log in to reply
1 reply to this topic

#1 n171n


  • Members
  • 2 posts
  • Local time:02:21 AM

Posted 20 April 2011 - 09:59 PM

Hi -- this is my work computer that I have Admin permissions on .... and am VERY careful on what I do/dont do on it. But somehow I seem to be infected and can't get rid of it. First I get a popup - Security alert. Virus Alert. Application cant be started. The file dds.scr (previously it was userinit.exe) is damaged. Do you want to activate you antivirus software now? Yes and No buttons. The file name changes.

I get a popup in the bottom right. "Windows Security Alert". Windows reports that computer is infected. Antivirus software helps to protect your computer against viruses and other security threats. Click here for the scan your computer. Your system might be at risk now."

Behind the popup is another dialong "Antivirus Software Alert"
Infiltration Alert virus attack. Your computer is being attacked by an internet virus. It could be a password-stealing atack, a trojan - dropper or similar.
Details attack from, port 44166
Attacked port: 15207
Threat: BankerFox.A
Sometimes it is a different threat.

Then I get another popup window Antivirus Software alert Vulnerabilities found. This is a big red and white popup. Your computer is infected by spyware - 34 serious threats have been found while scanning your files and registry. It is strongly recommend that you disinfect your computer and activate realtime secure protection against future invasions. There are 2 buttons - Activate your antivirus software and Stay unprotected. Manwhile IE tries to open and goes to www.porno.org.

I have tried running dds.scr as per the preparation guide and it just pops up the CMD prompt for a second and shuts down. I've tried going to cmd.exe from Start/Run and it wont let me go to the command prompt either

Edited by n171n, 20 April 2011 - 10:03 PM.

BC AdBot (Login to Remove)


#2 n171n

  • Topic Starter

  • Members
  • 2 posts
  • Local time:02:21 AM

Posted 20 April 2011 - 10:52 PM

found my answer here: http://answers.yahoo.com/question/index?qid=20100120065637AAISbIj

and then also here: http://www.bleepingcomputer.com/virus-removal/remove-antivirus-protection

please close this thread.

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users