Detection of the latest variant of Trojan Bancos

Avast Free Antivirus / Premium Security
1

Did not see this posted yet
any word on this bad buoy??
http://malwareresearchgroup.com/2010/12/detection-of-the-latest-variant-of-trojan-bancos-2/

http://i53.tinypic.com/28tcpcm.jpg

2

Mmm…that’s interesting.

3

any devs care to answer??

4

Schmidthouse,

May I ask you a question about something I’m noticing on my computer. I’m computer security impaired. When I’m browsing, Firefox ver. 3.6.13, I will click on a link say from Google and I’ll get this page that says we couldn’t find it… blah blah. This happens all of the time tho and the page looks the same. Such as
http://i145.photobucket.com/albums/r225/drjenniferperkins/ERRORmsg.jpg
Do you have any insight for me?

Thank you so much,
Jennifer

5

Hello and Welcome to the forum; If you could please provide some further information it will help us in resolving your questions/concerns.
What OS are you running? What security software do you have installed on your computer ie. Anti Virus/ Firewall/ Anti Malware etc.
Thank you

6

Yes of course, sorry,

I have an HP laptop, can give more info if you need, Windows 7, avast free antivirus, malwarebytes free, windows security, just downloaded Ad-Aware today to see if it caught something.

It’s so odd how it happens. I’ll click on a link and it shows me a similar looking error page, I click the back button and it takes me to the page that belongs to the link I clicked to begin with. Just so odd.

Let me know if there’s any other information you need and I really really appreciate your help.

7

Hello Perk,

Please start a new thread. You’re hijacking someone else’s.

You are getting redirected to some site which you shouldn’t. This surely some malware’s effect. You should create a new thread for someone to help you. I will ask one of my forum friend, who is a malware expert, to take look at your infected computer. He surely will fix your computer.

8

Hello Perk and welcome to the forum.

Normally I would ask you to start a new topic/new thread since the original poster’s (OP) topic has nothing to do with yours, and this will only confuse things. Here is how to start a new topic:

  • Go to this link, http://forum.avast.com/index.php, scroll down to the Avast Viruses and Worms forum or the appropriate forum section for the topic you need to post in and click it, click the New Topic button at the top of the list and post there.

Questions for you:

  1. Is your machine acting strange in any other way? Do you have a 32 or 64-bit machine?

  2. Is this problem of being redirected online only with Firefox (FF) or with IE or other browsers as well?

  3. Did you run any Avast scans? If so, which ones (Quick, Full, Boot) and is anything in your Virus Chest? If anything is in the Chest, please give a screen shot of the Chest.

Suggestions:

  1. Uninstall Ad-aware since it has been replaced by MBAM, which has a much better detection rate. Follow the vendor’s uninstaller tool for uninstalling, then reboot.

  2. Check your computer for malware with Malwarebytes’ Anti-Malware (MBAM).
    · Download free http://www.malwarebytes.org/ (the blue button) for an on-demand scanner.
    · Double Click mbam-setup.exe to install the application.
    · After install, click update so you have latest database before scanning.
    · Under Settings:
    o General: Automatically Save File After Scan Completes is checked off
    o Scanner Settings: Check all boxes
    o Updater: Download and install update if available is checked off
    · Once the program has loaded, select “Perform FULL Scan”, then click Scan.
    · The scan may take some time to finish, so please be patient.
    · When the disinfection scan is complete, a log will appear in Notepad and you may be prompted to Restart. (See Extra Note).
    · Click the “remove selected” button to quarantine anything found. You will find the infection details under the Quarantine tab.
    · The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
    · Copy & Paste the entire report in your next reply.

  3. Check the information on the first post of this thread under Virus/Worms for you to check your machine for malware: http://forum.avast.com/index.php?topic=53253.0. Follow the directions for obtaining the OTL logs (save them as ANSI and not Unicode). When the OTL scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. Post the two (2) OTL log as an attachment (Additional Options > Attach > Browse (the logs will be on your desktop > Post).

IMPORTANT: If you are on a home network, disconnect the affected machine from the network. Do not share a USB/flash drive or other removable devices with this machine. Try to use a different machine to check email, sync your phone, etc.

Please do not make any further changes to your machine after you provided the logs.

We will analyze the logs and if needed contact our Certified Malware Expert for further intervention. Let me know if you have any questions. Thank you.

9

any word on this being updated with def files?
and what a hi-jack jinks is going on!

10

I should imagine they are waiting to get their hands on a copy to analyse

11

I apologize for posting in the wrong place. I also want to thank you all for your help and I will go to the proper area now.

Thanks also for being so nice about it.

Jennifer

12

anyone with a name like Jennifer is cool in my book!! :wink:

13

Hide your e-mail address.

14

I’m pretty sure Para-Noid was referring to your email Jennifer.
Go to your profile, Under ‘Modify Profile’ select ‘Account related settings’ and check the box “Hide my email from the public”. Email harvester Prawl the forum regularily…and we all get enough spam as it is. :slight_smile: