Thread: win32.trojanspy.banker

I ran an ad-aware full scan and discovered this nasty. I duly fixed it and then ran avg, spybot and Onecare scanner just to be safe. 2 days later I discover it again on an ad-aware scan. I've checked the Hijack this log but nothing jumps out. I thought I knew where it might have originated but now I'm not sure. Could it have remained hidden to the other antispyware programs and not actually been fixed by ad-aware, and then resurfaced? As it is a keylogger am I right in assuming that it might be able to steal certain internet banking log on info but not any parts controlled by drop downs? Would I also be correct in thinking that my Lavasoft firewall should stop it making an out bound connection to divulge details to the cyber thief?

Hi,

Alot of these infections "look" like they have been cleaned, but some of them are clever and rebuild themselves once you reboot or go onto the web.. I will look into it for you!

You say you fixed it ... did you remove it or Quarantine it. If it is simply in a Quarrantine bank other malware programs still think it is infecting your computer.

Hello ferret. Removed it.

Great thanks for letting us know.

Here's a great tool for weeding out those hard to get rid of nasties:

Process Explorer - Free software downloads and reviews - CNET Download.com

and if you'd like a presentation on it's use, go here:

Advanced Malware Cleaning

W32/Banker trogen antivirus download it here : W32/Banker Trojan Removal Tool. Download