w32:Banker.adz Canīt clean it!

w32:Banker.adz Canīt clean it!
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
w32:Banker.adz Canīt clean it! AVallejo 03-04-2006
Posted by AVallejo on March 4, 2006, 8:08 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
My Avast says it finds this trojan,though many other antivirus tested at
www.virustotal.com canīt find it. Avast finds it,but when it moves it to
quaraantine,anathor copy with another name imediatly comes up,always as a
.tmp file.
Anyone knows something about it,and what can I do. System restore already
deactivated.
Thanks,
Vallejo



Posted by David H. Lipman on March 4, 2006, 8:12 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| My Avast says it finds this trojan,though many other antivirus tested at
| www.virustotal.com canīt find it. Avast finds it,but when it moves it to
| quaraantine,anathor copy with another name imediatly comes up,always as a
| .tmp file.
| Anyone knows something about it,and what can I do. System restore already
| deactivated.
| Thanks,
| Vallejo
|

Please copy and paste the Virus Total report.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by AVallejo on March 4, 2006, 8:21 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Antivirus Version Update Result
AntiVir 6.33.1.53 03.03.2006 no virus found
Avast 4.6.695.0 03.03.2006 Win32:Banker-ADZ
AVG 718 03.03.2006 no virus found
Avira 6.33.1.53 03.03.2006 no virus found
BitDefender 7.2 03.03.2006 no virus found
CAT-QuickHeal 8.00 03.02.2006 no virus found
ClamAV devel-20060126 03.03.2006 no virus found
DrWeb 4.33 03.03.2006 no virus found
eTrust-InoculateIT 23.71.92 03.03.2006 no virus found
eTrust-Vet 12.4.2104 03.03.2006 no virus found
Ewido 3.5 03.03.2006 no virus found
Fortinet 2.71.0.0 03.03.2006 no virus found
F-Prot 3.16c 03.03.2006 no virus found
Ikarus 0.2.59.0 03.03.2006 no virus found
Kaspersky 4.0.2.24 03.03.2006 no virus found
McAfee 4709 03.02.2006 no virus found
NOD32v2 1.1427 03.03.2006 no virus found
Norman 5.70.10 03.03.2006 no virus found
Panda 9.0.0.4 03.03.2006 no virus found
Sophos 4.03.0 03.03.2006 no virus found
Symantec 8.0 03.03.2006 no virus found
TheHacker 5.9.5.105 03.03.2006 no virus found
UNA 1.83 03.02.2006 no virus found
VBA32 3.10.5 03.03.2006 no virus found

>
> | My Avast says it finds this trojan,though many other antivirus tested at
> | www.virustotal.com canīt find it. Avast finds it,but when it moves it to
> | quaraantine,anathor copy with another name imediatly comes up,always as
> a
> | .tmp file.
> | Anyone knows something about it,and what can I do. System restore
> already
> | deactivated.
> | Thanks,
> | Vallejo
> |
>
> Please copy and paste the Virus Total report.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>



Posted by David H. Lipman on March 4, 2006, 8:27 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| Antivirus Version Update Result
| AntiVir 6.33.1.53 03.03.2006 no virus found
| Avast 4.6.695.0 03.03.2006 Win32:Banker-ADZ
| AVG 718 03.03.2006 no virus found
| Avira 6.33.1.53 03.03.2006 no virus found
| BitDefender 7.2 03.03.2006 no virus found
| CAT-QuickHeal 8.00 03.02.2006 no virus found
| ClamAV devel-20060126 03.03.2006 no virus found
| DrWeb 4.33 03.03.2006 no virus found
| eTrust-InoculateIT 23.71.92 03.03.2006 no virus found
| eTrust-Vet 12.4.2104 03.03.2006 no virus found
| Ewido 3.5 03.03.2006 no virus found
| Fortinet 2.71.0.0 03.03.2006 no virus found
| F-Prot 3.16c 03.03.2006 no virus found
| Ikarus 0.2.59.0 03.03.2006 no virus found
| Kaspersky 4.0.2.24 03.03.2006 no virus found
| McAfee 4709 03.02.2006 no virus found
| NOD32v2 1.1427 03.03.2006 no virus found
| Norman 5.70.10 03.03.2006 no virus found
| Panda 9.0.0.4 03.03.2006 no virus found
| Sophos 4.03.0 03.03.2006 no virus found
| Symantec 8.0 03.03.2006 no virus found
| TheHacker 5.9.5.105 03.03.2006 no virus found
| UNA 1.83 03.02.2006 no virus found
| VBA32 3.10.5 03.03.2006 no virus found

So NO other AV company recognizes this. I wasn't sure from your post.

It *may* be a False Positive declaration.

Disable Avast and then send a sample of a reportedly infected file to
virus@avast.com
indicating that you suspect this of being a False Positive and include the Virus
Total
report.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by AVallejo on March 4, 2006, 8:36 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I did send it to Avast and a couple of other companys about 3 days ago,but
no answers so far... I was thinking about a false positive,but what convince
me it's real is the fact that a new copy appears in my temp directory as
soon as I delete the current one.Always a .tmp file,with a sequential numer
or letter,or a mix,like .e1.tmp,then E2.tmp,or F1.tmp,like that. Really
driving me nuts.And considering it's a banker,it's nonsense not to be
sure...
Any ideas? Already used ewido to,which found other 2 virus,but not this
one...

>
>
> So NO other AV company recognizes this. I wasn't sure from your post.
>
> It *may* be a False Positive declaration.
>
> Disable Avast and then send a sample of a reportedly infected file to
> virus@avast.com
> indicating that you suspect this of being a False Positive and include the
> Virus Total
> report.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>



Similar ThreadsPosted
Clean Clean DocumentEmail MicrosoftInternetExplorer4 January 26, 2006, 11:27 am
W32.Stration.DB@mm Won't Clean October 31, 2006, 3:49 pm
REGISTRY CLEAN POP UPS February 5, 2007, 12:29 pm
Re: Is there a tools to clean Trojan-psw ? May 25, 2007, 2:13 pm
RE: Is there a tools to clean Trojan-psw ? June 23, 2007, 2:51 am
How to clean an infected computer? October 30, 2007, 2:27 am
Virus Persists After Clean-Install October 23, 2006, 6:01 pm
Re: Server Infected by virus and unable to clean May 31, 2007, 2:04 am
dmserver.dll has a virus, how to install clean version. September 29, 2008, 5:46 pm
AntiSpyware Beta1 - Cannot Delete, Move, or Clean gpkjnvlt.exe July 7, 2005, 10:33 am

The site map in XML format XML site map

Contact Us | Privacy Policy