| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 63014 | 2005-10-26 18:18:00 | PWSteal .Banker.B virus | taly (5956) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 399515 | 2005-10-26 18:18:00 | Got this virus. Tried Symantec site. They advice to cleen registry, but can't findnd files they mention. I have Win PC with XPhome on Pent 2 and Epox MBD. Need advice. Thanks |
taly (5956) | ||
| 399516 | 2005-10-26 18:30:00 | Try doing an online virus scan at one of these sites. http://housecall.trendmicro.com/ www.bitdefender.com www.pandasoftware.com |
Safari (3993) | ||
| 399517 | 2005-10-26 20:08:00 | Where does Nortons say the virus is located? It could be locked up in a restore file. You could turn System restore off, then restart, and turn back on again. Then finally, make another restore point before doing anything else. Also, do a search for C:\Windows\System32\lsd_f3.dll This is one of the files that trojan creates. The other is either iesprt.sys or timestamp.sys (also in the system32 directory.) |
pheonix (36) | ||
| 399518 | 2005-10-26 23:22:00 | Hi Guys! Symantec listed number of files in reg. Managed to find one:Local Mashine System /Control/ it said to find "Impersonate"="<random number><User name of carrent user>". Deleted it and scan was cleen! Can't beleive it! Too good to be true. May be it is still there? But before Norton was stopping all outgoing emails and interrapting internet connection. Any ideas about how safe it can be now? Thanks |
taly (5956) | ||
| 399519 | 2005-10-27 04:14:00 | If you are still unsure whether your machine is clean, then try a couple of the online virus scans using the links Safari provided. | Jen (38) | ||
| 1 | |||||