securybanks phishing trojan

[Omega Man]

This is a paticularly difficult bug to get rid of, circumventing Spybot ect. Any ideas.

[rjfvillarosa]

have you tried running your scans in safe mode with system restore switched off? have a read here first for some why's and how's on safe mode and system restore.
http://forum.pcmech.com/showthread.php?t=115633

[glc]

This phishing trojan hides itself in the temporary internet files\content ie5 folder and attaches itself to IE. It also makes a copy of itself inside the index.dat file and that's why it keeps reappearing after you have removed it.

Please download the following tool:

http://support.it-mate.co.uk/?mode=P...index.datsuite

Index.dat Suite allows you to look into the contents of the index.dat file and allows you to safely delete it. Please make sure that you write down any username/password combinations you may have allowed IE to "remember", since deleting the index.dat file will erase that information. Follow the instructions in the website to delete index.dat. After reboot IE will create a fresh one and the malicious trojan will be gone. You'll have to re-enter your username/password for websites you're registered to, but that's a small tradeoff for getting rid of Securybanks.

NOTE - system restore MUST be turned off or it will keep coming back.

[sumukh]

Hi,
Phishing is growing at an alarming rate. Securybanks phishing trojans are active on the net. Here is the procedure to Remove Securybanks Phishing trojans.

If you want more details on phishing, please read Phishing articles.

Thanks & regards


Sumukh