Malware Removal Forums

Win32.TrojanSpy.banker

six-h · 2008-02-04T15:01:10+00:00

Hello there, Saturday evening I attempted to buy tickets on BMI Baby site, never previously had any problems. This time, when clicking the final screen to authorise purchase, I was returned to the beginning of the purchasing process with no explanation (no "field x must be completed" or any other explanation). I exited the site, and e-mailed them for some confirmation that a transaction had/had not been made. No answer to date! Did a scan with Spybot, AdAware2007 and AVG Antivirus. AdAware turned up "Win32.TrojanSpy.banker" which I removed. To check it was gone, I downloaded and ran a-Squared, which didn't find it, but did find something in the sys32 folder called "Win32.processor.20" which I've not been able to find anything about, except that it is some kind of low risk process. I don't understand what it is, or which programme it may be associated with, so I've quarantined it. Fortunately, my bank confirm that there is no suspicious traffic on my card, but I've ordered a new one, to

16 min read

✨ The volunteers who helped with this thread aren't active anymore, but you can still get a personalized answer — click Ask AI below.

Scotty Retired Graduate

February 14, 2008, 8:41 PM UTC

Ill be back soon, but before you start to worry, the second set of results are nothing to do with your computer.

Scotty Retired Graduate

February 14, 2008, 8:54 PM UTC

Hi again six-h

There is no sign of malware. That process.exe is just what we thought it was. See what help you can get at A-squared, regarding what has been quarantined, it's probable something or either has been wrongly quarantined.

p.s I registered over there, and will be watching your topic to see how it goes.

six-h Banned Member

February 14, 2008, 8:55 PM UTC

Hi, Scotty,

before you start to worry, the second set of results are nothing to do with your computer.

Thanks for those soothing words!

It's hard not to try sniffing out information from the web, but I must stop it, 'cos it's scaring me !! :shock:

six-h

six-h Banned Member

February 14, 2008, 9:01 PM UTC

OK Scotty,

I'll give 'em a try!

six-h

six-h Banned Member

February 15, 2008, 5:38 PM UTC

Scotty,

Don't know if you are watching my progress, or rather lack of it on the a2 forum, but it's quite a trial!

I am totally out of my depth with all the software that they have instructed me to download, and I haven't a clue what is going on myself.

Turning me into a gibbering wreck! :shock:

six-h

Scotty Retired Graduate

February 15, 2008, 8:46 PM UTC

Hi

Ill pm someone there and ask them to go easy.

six-h Banned Member

February 15, 2008, 9:07 PM UTC

Thanks Scotty,
Really no need, it's just that they seem to assume familiarity with the software they use, which I'm not finding easy!
Also, they mistakenly credit me with more knowledge than I seem able to have.
The don't seem to have this one!

:withstupid:

six-h

NonSuch Administrator

February 15, 2008, 11:34 PM UTC

This topic is now closed. If you wish it reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.

You can help support this site from this link :
Donations For Malware Removal

Please do not contact us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.

✨ Ask AI about this thread

No ads, no affiliate links — generated on request from this thread's own archived content, not written by forum staff. Never run a scan/removal tool as a self-service step if the original thread describes it being done under a helper's direct supervision, and don't include your name, email, or other personal details in a follow-up question. See our privacy page for details on how this works.