Results 1 to 3 of 3

Thread: Win32.Trojan.Spy.Banker.ju

  1. #1
    marlin Guest

    Default Win32.Trojan.Spy.Banker.ju



    Hi,












    I have a spyware on my computer that I am having problems removing permanently.
    I m running XP Home sp3, AMD AthlonXP 2600+ 2.09 GHz, 1GB RAM. Internet Explorer 7 (full updated)





    ZoneAlarm Security Suite version:8.0.298.035, TrueVector version:8.0.298.035, Driver version:8.0.298.035, Anti-virus engine version:6.0.2.678, Anti-virus signature DAT file version:984791977, Anti-spyware engine version:5.0.209.0, Anti-spyware signature DAT file version:01.200905.5915, AntiSpam version:6.0.0.1429.




    Occasionally, ZA spyware
    catches,
    Win32.Trojan.Spy.Banker.ju,
    at location HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Ext\Settings\{C41A1C0E-EA6C-11D4-B1B8-444553540000, this I am able to DELETE, but it reappears.




    I can reproduce the activation of the spyware by DISABLING; GbIeh Obj Class (name), Not Verified Banco do Brasil (publisher), Enabled (status), Browser Helper Object (type), gbieh.dll (file). In IE 7 s, tools, manage add-on s, enable/disable.
    The REMOVE button is not highlighted.




    Once the file Win32.Trojan.Spy.Banker.ju is deleted by ZA, the add-on is re-ENABLED.





    C41A1C0E-EA6C-11D4-B1B8-444553540000, is also found in the following files on the computer;

    ntuser.dat.rmbak (c:\Documents and Settings\Malin), software.rmbak (c:\windows\system32\config), software.sav (c:\windows\system32\config), software (c:\windows\repair)




    Help with finding a permanent solution is greatly appreciated.

    Operating System:Windows XP Home Edition
    Software Version:8.0
    Product Name:ZoneAlarm Internet Security Suite

  2. #2
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,290

    Default Re: Win32.Trojan.Spy.Banker.ju

    Hi!please tryall steps of the standard cleaning procedure as detailedhere:http://forum.zonelabs.org/zonelabs/b...essage.id=3787Ifyou have a new or difficult to remove pest the best is to get expert help here:http://www.bleepingcomputer.com/forums/topic34773.htmlCheers,Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  3. #3
    itacbt Guest

    Default Re: Win32.Trojan.Spy.Banker.ju

    Hi,
    I have the same problem! I have similar computer but I use Firefox.
    Is there any problem with Banco do Brasil certification?
    sincerely
    ita

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •