Need help with Trojan Banker - Please!!

[zinck]

essexboy,

Thank you for your continued help.  This time everything went well until I tried attaching a zip file to this post.  It says zips are not permitted.

Now what?

[zinck]

I have bad news.

I just went to my bank site to see if it is working properly and saw that the virus is still there.  My name does not show up when I log in.  That's how I knew I had this Trojan banker in the first place.  So now I know that it is still there.  What a mess!!!

[Dieselman]

Hate to have friends like you who send me viruses. Try running a scan with Hitman Pro. be sure to empty all your cookies,cache and temp files also. Does this happen only on IE or Firefox also?

http://www.surfright.nl/en

[zinck]

I have been accessing my Itau bank site with Firefox.  It appeared to have been fixed a few days ago but it is certainly infected again today.

Just for good measure I did a full scan with AVAST once again and it still did NOT find anything.  I also ran Malwarebytes and it also said zero infected objects.  I don't understand how these trojan viruses can slip past everything.

[Dieselman]

You might have a rootkit calling home which downloads the malware to your pc.

[zinck]

You might have a rootkit calling home which downloads the malware to your pc.

What is a "rootkit calling home"?  How can I fix it?

[Dieselman]

Download Hitman Pro which I provide a link to. See what it finds other then cookies. Download TDDSkiller and Gmer also.

http://support.kaspersky.com/viruses/solutions?qid=208280684

http://www.gmer.net/

[essexboy]

upload to Mediafire and post the sharing link.

[zinck]

http://www.mediafire.com/file/bfnhsaccst7aekr/avptool_sysinfo.zip

Here it is Essexboy.  Once again, thanks for the help!  I guess you saw where I said that the Itau bank trojan is still at work on my machine.

Do you suggest running the Hitman, TDDSkiller and Gmer programs as well?

Thank you!

[Dieselman]

http://www.mediafire.com/file/bfnhsaccst7aekr/avptool_sysinfo.zip

Here it is Essexboy.  Once again, thanks for the help!  I guess you saw where I said that the Itau bank trojan is still at work on my machine.

Do you suggest running the Hitman, TDDSkiller and Gmer programs as well?

Thank you!

Yes do those things please.

[zinck]

Dieselman,

I ran all three and did not come up with anything.  I'm attaching the gmer report.

I just went to the Itau bank site here in Brazil and I'm still infected.  Whoever came up with this Trojan virus seems to be good at doing evil.

[Dieselman]

So Hitman Pro did not find anything? Did you say this effected IE and Firefox? Also have you cleaned out your cookies,temp files and caches?

[zinck]

Another friend I have suggested that I run F Secure.  I just did the quick scan on that but all I found was one tracking cookie.

Finding where this malware is hidden seems next to impossible.

[Dieselman]

Please read my last reply. Thanks. Installing another real time av will not accomplish anything.

[zinck]

Dieselman,

So Hitman Pro did not find anything? Did you say this effected IE and Firefox? Also have you cleaned out your cookies,temp files and caches?

I am not using IE, only Firefox.  I do have Google Chrome.  I just used it to access the Itau bank site and everything APPEARS to be normal.  So maybe that is a good sign.

Yesterday after you said to clean out cookies, temp, etc. I ran Disk Cleaner. 
Is there some better way to clean caches, temp files, etc?

In general my computer seems to be working fine.  Not slow like it was a few months ago when I had another virus. 

So could this Trojan be linked to Firefox?  (And NO, Hitman only found three tracking cookies.)