Avast WEBforum
Other => General Topics => Topic started by: bob3160 on June 03, 2005, 02:53:24 PM
-
This problem (http://support.microsoft.com/default.aspx?scid=kb;en-us;894269) may occur because your computer is infected by the TrojanSpy:Win32/Banker Trojan horse program.
When this problem occurs, TrojanSpy:Win32/Banker takes the following actions:
TrojanSpy:Win32/Banker sets the Internet Explorer home page to "about:blank."
TrojanSpy:Win32/Banker deletes all the files in the C:\Program Files\Microsoft AntiSpyware folder.
TrojanSpy:Win32/Banker looks for Windows relating to Microsoft Windows AntiSpyware (Beta) and sends messages to these windows to close them.
TrojanSpy:Win32/Banker shuts down processes that are associated with Microsoft Windows AntiSpyware (Beta).
TrojanSpy:Win32/Banker tries to download and then run updates from a Web server.
TrojanSpy:Win32/Banker tries to download and then run additional software from an FTP server.
TrojanSpy:Win32/Banker prevents the user from accessing certain security Web sites.
TrojanSpy:Win32/Banker removes the gcasServ registry entry from the following subkey: HKLM \ Software \ Microsoft \ Windows \ CurrentVersion \ Run
TrojanSpy:Win32/Banker collects personal user information when a user visits online banking sites.