PDA

View Full Version : PWSteal .Banker.B virus



taly
27-10-2005, 07:18 AM
Got this virus. Tried Symantec site. They advice to cleen registry, but can't findnd files they mention. I have Win PC with XPhome on Pent 2 and Epox MBD.
Need advice.
Thanks

Safari
27-10-2005, 07:30 AM
Try doing an online virus scan at one of these sites.

http://housecall.trendmicro.com/

http://www.bitdefender.com/scan8/ie.html

http://www.pandasoftware.com/products/activescan

pheonix
27-10-2005, 09:08 AM
Where does Nortons say the virus is located? It could be locked up in a restore file.
You could turn System restore off, then restart, and turn back on again. Then finally, make another restore point before doing anything else.

Also, do a search for C:\Windows\System32\lsd_f3.dll
This is one of the files that trojan creates. The other is either iesprt.sys or timestamp.sys (also in the system32 directory.)

taly
27-10-2005, 12:22 PM
Hi Guys!
Symantec listed number of files in reg. Managed to find one:Local Mashine System /Control/ it said to find "Impersonate"="<random number><User name of carrent user>".
Deleted it and scan was cleen!
Can't beleive it! Too good to be true. May be it is still there? But before Norton was stopping all outgoing emails and interrapting internet connection.

Any ideas about how safe it can be now?

Thanks

Jen
27-10-2005, 05:14 PM
If you are still unsure whether your machine is clean, then try a couple of the online virus scans using the links Safari provided.