Author Topic: Need help with Trojan Banker - Please!!  (Read 13751 times)

0 Members and 1 Guest are viewing this topic.

Dieselman

  • Guest
Re: Need help with Trojan Banker - Please!!
« Reply #45 on: April 19, 2011, 04:06:04 PM »
Please try IE also. If everything is fine then do a COMPLETE uninstall of Firefox. Firefox leaves a lot of left overs so its best to use Revo Uninstaller in Advanced Mode. Open up Revo once installed and use it to uninstall Firefox and select the advanced mode. When Firefox starts to uninstall be sure to select the option to delete all settings. Once done then click scan on Revo. Delete everything it finds by using the "select all button". Reboot and download a fresh copy of Firefox.

Be sure to backup your bookmarks first.

http://www.revouninstaller.com/

Offline essexboy

  • Malware removal instructor
  • Avast √úberevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Need help with Trojan Banker - Please!!
« Reply #46 on: April 19, 2011, 07:24:16 PM »
There is an infected file on your D drive which is running with the system via IE

  • Re-run AVPTool
  • Select the Manual Disinfection tab
  • Where it states Step 3 paste in the following disinfection script and press execute
Code: [Select]
begin
SetAVZPMStatus(True);
SetAVZGuardStatus(True);
SearchRootkit(true, true);
 DeleteFile('D:\NVI.exe');
 BC_DeleteFile('D:\NVI.exe');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.
  • Your system will reboot on completion, if it does not please do so yourself
  • On completion please run another analysis scan and attach the zip file



Dieselman

  • Guest
Re: Need help with Trojan Banker - Please!!
« Reply #47 on: April 19, 2011, 07:57:39 PM »
A new AVP toil must be downloaded since it changes about every 2 days.

Offline essexboy

  • Malware removal instructor
  • Avast √úberevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Need help with Trojan Banker - Please!!
« Reply #48 on: April 19, 2011, 08:43:17 PM »
No requirement unless I wish to run the AV scan part - the removal element I am using is based on the AVZ tool, which is now owned by Kaspersky 

zinck

  • Guest
Re: Need help with Trojan Banker - Please!!
« Reply #49 on: April 20, 2011, 02:43:25 AM »
Essexboy,

My D drive is fine.  It is a Bible program.  It will only run off of the CD.  It is tne Nova Versao Internacional or NVI.exe

Could it be that by removing Firefox that I got rid of the Trojan?

Yours, Larry

Dieselman

  • Guest
Re: Need help with Trojan Banker - Please!!
« Reply #50 on: April 20, 2011, 02:49:13 AM »
If you can log into your bank with using IE or Chrome and everything is fine then your all set. Re-install Firefox if you want. There are tons of add ons you can add to Firefox to make it even more secure.

zinck

  • Guest
Re: Need help with Trojan Banker - Please!!
« Reply #51 on: April 20, 2011, 03:06:45 AM »
I just reinstalled Firefox.  And I went to my bank site and it seems to be working normally at this time. 

What add ons do you suggest to make Firefox more secure?

Thank you again for the help!  It seems that removing Firefox was a great idea!

Dieselman

  • Guest
Re: Need help with Trojan Banker - Please!!
« Reply #52 on: April 20, 2011, 03:13:07 AM »
I will give you a list of Firefox Add Ons:

https://addons.mozilla.org/en-US/firefox/addon/browserprotect/

https://addons.mozilla.org/en-US/firefox/addon/adblock-plus/

https://addons.mozilla.org/en-US/firefox/addon/betterprivacy/

https://addons.mozilla.org/en-US/firefox/addon/lastpass-password-manager/

LastPass is the best. Never type in another login or password ever again which actually increases your security. Say good bye to keyloggers.

This last one is very good but comes at a cost. By default it will block everything. Once you allow the sites you visit often then your all set.

https://addons.mozilla.org/en-US/firefox/addon/noscript/

You dont need to use it if you dont want to. I dont cause it just blocks way too much.

One other thing is add on a secure dns server. I would go with ClearCloud. The set procedure is in there web site.

http://clearclouddns.com/Setup/Windows/

BTW..................Did you use Revo to remove Firefox completely? Most likely the trojan was hidden inside of Firefox's add on codes.
« Last Edit: April 20, 2011, 03:18:57 AM by Dieselman »

zinck

  • Guest
Re: Need help with Trojan Banker - Please!!
« Reply #53 on: April 20, 2011, 03:28:50 AM »
Dieselman,

I will plan to get those add ons.  And YES I ran REVO to remove Firefox completely.

I did not understand about ClearCloud.  Sorry I do not know what a dns server is.

Thank you again!   :) :) :) :)

Dieselman

  • Guest
Re: Need help with Trojan Banker - Please!!
« Reply #54 on: April 20, 2011, 03:31:58 AM »
ClearCloud takes a mere second to set up. Instead of me telling you what a secure dns is just Google it. Follow the steps that ClearCloud clearly lays out. There is also a downloadable setup tool for ease of setup.

All you need to know about a secure dns is provide in the ClearCloud web site.

http://clearclouddns.com/What-is-ClearCloud/

And once you got all that setup...............Keep your pc up to date with Secunia PSI.

http://secunia.com/vulnerability_scanning/personal/
« Last Edit: April 20, 2011, 03:35:44 AM by Dieselman »

zinck

  • Guest
Re: Need help with Trojan Banker - Please!!
« Reply #55 on: April 20, 2011, 02:15:51 PM »
OK

I installed ClearCloud and the PSI program.  I never knew that there were so many different ways to try and protect my computer.  I thought that with Avast and Malwarebytes I had everything I needed.

So we'll see how it goes from here.

Dieselman

  • Guest
Re: Need help with Trojan Banker - Please!!
« Reply #56 on: April 20, 2011, 02:22:21 PM »
Ok great. Glad to have helped. One last thing to remember. You can have the best security in the world but unless you have a backup plan it's meaningless. Look into getting an external hard drive, very cheap and make a system image.

zinck

  • Guest
Re: Need help with Trojan Banker - Please!!
« Reply #57 on: April 20, 2011, 02:33:44 PM »
I have an external hard drive and I do back up from time to time.  Especially of all my work and important documents.

As you can already tell I am not a computer expert.  And I do not know anything about a system image.

Thanks again, Dieselman!

Dieselman

  • Guest
Re: Need help with Trojan Banker - Please!!
« Reply #58 on: April 20, 2011, 04:08:36 PM »
Get your free system image program right here.

http://www.paragon-software.com/home/br-free/

zinck

  • Guest
Re: Need help with Trojan Banker - Please!!
« Reply #59 on: April 20, 2011, 07:27:19 PM »
So this Paragon program backs up my Data, the software, and my operating system?

So if I did a full back up and need to do a complete reinstall I don't have to go putting in the programs one by one?  And I would not even need my Windows CD?  Or the drivers?

I have done full installation before but I loaded it all bit by bit.