How to protect from the PWS-Bina

[Agustíne]

I am the student. I am having the problem with my computer due to the virus infection of PWS-Bina. Due to this virus PWS-Bina my computer system can be working very slowly as compared to the previous. So, I want to protect against the virus PWS-Bina. Hence, Can anyone has the solution for me to remove and keep my computer system keep protected from this virus PWS-Bina.

[Snake08]

The PWS-Bina can be a Trojan not a virus. The PWS-Bina Trojan can not be replicate by itself, it can replicate after executed by the user. Because the PWS-Bina can be of type Trojan it can infect your computer system through the mediums such as the Internet, chatting on the Internet, downloading the games,video's, songs etc. from the internet. The PWS-Bina can infect one computer to another computer.

[Zachary]

There can be a various varieties of this PWS-Bina trojan and some details such as names of the files, message boxes, registry entries can vary slightly, so this description can be a general guide. This PWS-Bina trojan dropper can arrive in a spoofed e-mail advising it contains the files pertaining to the Brazilian "Big Brother" TV show. On running of this Trojan dropper it could extract the following files for them to be run :

1. MS.DLL (9,216 bytes)
2. CT.DLL (9,728 bytes)
3. WINBINA.EXE (approximately 322 KB, depending on the variant)
4. LEIA_ME.TXT

[Big Fish]

The PWS-Bina trojan can copies itself into the directory of the WINDOWS as WINM.EXE. The PWS-Bina trojan can also copies its DLL files into the directory of the WINDOWS along with the various other files that can despite their file-extension contains the following text :

1. SCT.SYS (1 byte)
2. PED_%ComputerName%_%ComputerName%08D001.TXT (2,831 bytes)
3. MCT.SYS (2 bytes)
4. WIN.TXT (8 bytes)
5. WINI.SYS (43 bytes)
6. WBERR.TXT (68 bytes)

[Shen]

Whenever the PWS-Bina Trojan can be executed by the user, the PWS-Bina can creates the folder that can called MSYS into the directory of the WINDOWS and in this MSYS folder can creates a number of files with the following naming convention :
1. WBI%ComputerName%_%ComputerName%08D0##.BXC
A registry run key can be created into load the trojan at startup :
1. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
"win32x" = %WinDir%\winm.exe