Re: Trojan.PWS.Bancos.142

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 09/26/05

  • Next message: Simon Zerafa: "Re: PC shuts off on Virus Scan" 
    Date: Sun, 25 Sep 2005 22:07:46 -0400

    From: "Kayman" <khkaminski@csloxinfo.com>

    | Please accept my apologies for providing inaccurate information concerning
    | Patchmonitor. (I thought the URL was somehow affiliated with <auditpc>).
    | The (obfuscated ) URL for accessing the Download v1.0 patchmoitor.zip is
    | hxxp://www.patch-management.com/patch-management-software/patch-management-software.asp
    | .The 'Download v1.0 Now' is located on the bottom left corner of the window.
    |
    | With respect to my e-mail address showing, this obviously is a problem which
    | I did not experience before. What I don't understand is that previous
    | exchanges of communications in newsgroups (msnew.microsoft.com and
    | aioe.cjb.net) with yourselves and /or others never revealed my e-mail
    | address but only my nickname. I just received a message from
    | aioe.helpdesk.english and my personal e-mail address was not displayed in
    | their response.
    | Well, it seems that I haven't covered all bases and need to take into
    | account individual or different modes of responses. Thanks for pointing out
    | this flaw in my system. I am going to follow your recommendation and try to
    | alter my account details to rectify this unacceptable situation.
    | Very best regards,

    Ah -- there we go. I was at that page but did not see the The 'Download v1.0 Now' located
    at the bottom.

    Interestingly; BitDefender, DrWeb and VBA32 all declare this as "Trojan.PWS.Bancos.142"
    I have also scanned it with Trend Micro Sysclean, PF v855, and it too finds nothing.

    I have a suspicion that is is a Flase Positive declaration. But can't be sure. If all the
    ones flagging it were defined with different names I'd say it was a real infector. The fact
    that all three call it the same name, "Trojan.PWS.Bancos.142", is "interesting" to say the
    least.

    I will do further research and post back in this thread... 

    -- 
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm
  • Next message: Simon Zerafa: "Re: PC shuts off on Virus Scan"
    • Quantcast