Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works

BankerFox.A, Win32/Nugel.E, Security Warnings/Alerts [Closed]

  • This topic is locked This topic is locked



    New Member

  • Member
  • Pip
  • 1 posts
Suddenly I am getting endless popups from Windows Security Center about a virus saying
Attack from:, port 13737
Attacked port: 17851
Threat: BankerFox.A

Attack from:, port 15088
Attacked port: 38493
Threat: Wind32/Nugel F

and there may have been more that were different.

I am also getting countless security warnings saying "Application cannot be executed. The filed wuauclt.exe is infected." The file changes frequently, it has also said rstrui.exe, verclsid.exe, and more.

If I try to open System Restore, or even Task Manager, the window pops for a split second and disappears before I can see or do anything.

The same thing is happening when I try to download antivirus software. When I try to run these programs, they disappear almost immediately.

I am also getting several internet pop ups now. I'm unsure what to try.

Thank you!

(Also, I viewed the Malware and Spyware Cleaning Guide and I downloaded TFC and MalwareBytes' Anti-Malware. I was unable to run either of these - they would pop up and quickly disappear. I tried renaming mbam.exe, but the problem persists. I get an alert "Application cannot be executed. The file mbam.exe is infected." When I change the name, the name in the alert just changes. I also downloaded ERUNT but couldn't even get past setup without the window disappearing.)

Update- since Firefox was working, I renamed mbam.exe to firefox.exe and was able to run MalwareBytes' Anti-Malware. For now, everything seems to be working.

Edited by lindsey91, 12 May 2010 - 10:50 AM.

  • 0




    Math Nerd

  • Retired Staff
  • 3,644 posts
Hi lindsey91,

Welcome to Geeks To Go!

My name is mpascal, and I will be helping you fix your problem.

Before we begin, I would like to make a few things clear so that we can fix your problem as efficiently as possible:
  • Be sure to follow all my instructions carefully! If there is anything you don't understand, don't hesitate to ask.
  • Please do not do anything or perform other steps unless I have asked you to do so.
  • Please make sure you post all logs I ask you to, and make sure that the entire log gets posted.
  • Don't attach any logs unless asked. Posting them in the forums will make them easier to analyze.
  • If you are unsure of how to reply, or need help with anything regarding the website, please look here.
Can you try downloading and running MBAM in safe mode.
  • 0



    Math Nerd

  • Retired Staff
  • 3,644 posts
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0

Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP