Author Topic: Win: 32 Banker-CDW trojan  (Read 3669 times)

0 Members and 1 Guest are viewing this topic.

wally2

  • Guest
Win: 32 Banker-CDW trojan
« on: January 31, 2010, 09:08:34 PM »
just found during scan.  Using Vista sp 2 , IE 8 here.
Scan said this was in C:\windows\Memory.DMP

Avast suggested to move to chest.  Could not do for it said not enough space on disk and that it  could not process C:\Windows\Memory.DMP 

Downloading DrWEbCureIt now, is this the safest bet to see if this virus is for real ?
Not finding much about this virus on the web.

Thanks if you can help , know anything about this trojan

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: Win: 32 Banker-CDW trojan
« Reply #1 on: January 31, 2010, 09:24:50 PM »
upload the file to VirusTotal  www.virustotal.com  when you have the result, copy the URL in the addressbar and post it here

Win32/Banker
http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Win32%2fBanker

wally2

  • Guest
Re: Win: 32 Banker-CDW trojan
« Reply #2 on: February 01, 2010, 08:27:20 AM »
thank you but how can I upload the file when I don't have the " file" info ?  
Avast just tells me I have the trojan and the name of it.  I can't save it in my virus chest for the file appears to be too large to do so, hence there's no file info. there to be had at this time.
Dr. web CureIT  found it also but took forever to scan.  whilst I was outside waiting for the scan to finish, ( dial up here) I came back inside only to find Dr. WebCureIT did not finish and had this window info. up on my screen:
virus has been detected during scanning RC=255
M656pXP.exe stopped working  

Also tried Live OneCare, thanks for the info. . However,  I can't get it to install the scanner.  just darn it !  :P
« Last Edit: February 01, 2010, 08:36:15 AM by wally2 »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: Win: 32 Banker-CDW trojan
« Reply #3 on: February 01, 2010, 09:11:46 AM »
Have you tried to scan with Malwarebytes ?

MBAM http://filehippo.com/download_malwarebytes_anti_malware/
update and run quick scan, click on "remove selected"  to quarantine anything found and restart

you may post the scan log here