161.40.59.127 attacked port 13567 BankerfoxA


  1. Posts : 12
    win 7 pro upgrade disc set running 64 bit
       #1

    161.40.59.127 attacked port 13567 BankerfoxA


    I am running 64 bit win7 and use Microsoft Security Essentials which is updated and real time protection is enabled. when a pop up window claimed i was infected by Bankerfoxa port 977 attacked port 13567 161.40.59.127 asking me if it wanted me to have it turn on my virus protection I hit my toolbar to see if security essentials was loaded ( which it was suppose to be but it was not) so i click start/programs, Microsoft security essentials i right click it run as admin and it opens its window and then closes and a pop up claims one of its files are corrupt and ask again if it wants me to have it start my anti virus program, while this attack is in progress i cannot use the prompt and run sfc /scannow or chkdsk /f all of Microsoft tools are disabled I have to reboot in order to stop this from happening and it has happened twice both times while looking for something with Google. wondering if anyone else has had this or similar and should i switch to avira anti virus
    thanks
      My Computer


  2. Posts : 6,879
    Win 7 Ultimate x64
       #2

    Following this,

    How to Remove BankerFox.A

    should get rid of it. And for what it's worth the IP address that was reported by that popup, I don't think they were trying to hack your computer,

    Whois record for 161.40.59.127
      My Computer


  3. Posts : 554
    Windows 7 Professional x64 SP1
       #3

    stormy13 said:
    Following this,

    How to Remove BankerFox.A

    should get rid of it. And for what it's worth the IP address that was reported by that popup, I don't think they were trying to hack your computer,

    Whois record for 161.40.59.127
    LOL@the Whois record. Definite win.
      My Computer


  4. Posts : 761
    Windows 2000 5.0 Build 2195
       #4

    stormy13 said:
    Following this,

    How to Remove BankerFox.A

    should get rid of it. And for what it's worth the IP address that was reported by that popup, I don't think they were trying to hack your computer,

    Whois record for 161.40.59.127
    Your link wanted us to download a registry-related program which, based on past experiences, aren't really reliable.

    McAfee lists BankerFox.A as a fake malware as per FakeAlert-SpywareProtect

    Based on McAfee's data, Microsoft list this similar scenario as caused by Encyclopedia entry: Trojan:Win32/FakeSpypro - Learn more about malware - Microsoft Malware Protection Center
      My Computer


  5. Posts : 1,210
    Windows 7 Ultimate x64 (XP, 98SE, 95, 3.11, DOS 7.10 on VM) + Ubuntu 10.04 LTS Lucid Lynx
       #5

    One thing I don't understand, if MSE was not running then where did the popup come from ??
      My Computer


  6. Posts : 761
    Windows 2000 5.0 Build 2195
       #6

    It has to be one of those websites were they trick you in to installing rogue anti-virus malware. See my first link, some screenshots are there.
      My Computer


  7. Posts : 5,056
    Windows 7 x64 pro/ Windows 7 x86 Pro/ XP SP3 x86
       #7

    Scan with Malwarebytes and Spybot.
      My Computer


  8. Posts : 12
    win 7 pro upgrade disc set running 64 bit
    Thread Starter
       #8

    I thank all of you for your knowledge, i am downloading the file and hopefully kill whatever it is. MSE was running at the time of the first pop-up window i believe the pop-up window was responsible for disabling MSE and the prompt (admin) was lame also you could type sfc /scannow and enter but it would not run, chkdsk /f also as arkhi said the reason for it is to have you buy it out of fear, both times i i rebooted it went back into hiding i suppose i do know both times i was using goggle and again both time i was looking at the choices of my search motor mounts for a neon. the program kept asking if i wanted it to turn on my anti-virus program each time i would (x) close it but when i try and start MSE this banker thing rendered it useless and another pop-up would claim the exe file is corrupt and again ask to turn on virus. i thank you all very much and i will do as you have suggested. thanks
      My Computer


  9. Posts : 2,303
    Windows 7 & Windows Vista Ultimate
       #9

    Hi, Hollywood2. Another name for the rogue is Antivirus Soft. See the removal guide at Bleeping Computer: Remove Antivirus Soft.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 02:48.
Find Us