Trojan win32.Banker.fgv

[giorgos]

hello, doing a scan with Spybot I discovered the trojan win32.Banker.fgv (6 items) and I began to worry after what I read about this virus, spyybot can not delete it . I need your help to remove it.

Just a small question to start, the trojan is activated , does they scans every single file of pc and all passwords pc? What about passwords? the trojan is it really dangerous?

I use avast (updated) as antivirus, Spybot . Give suggestions,

[go raiden]

Hello

Download the HijackThis and post your HijackThis log here.

Also use the FindyKill, If you are under Vista (run as administrator) Let the installation is done with the parameters displayed by default.

[Shen]

Can you post it's Log, accessible from the Logs tab, please?

In addition, what Spybot Search & Destroy is found, it might be better to show the results of an analysis.

Run SpyBot check for problems, fix all red items, when its right click and choose Copy finished results (not full report) to clipboard and paste it back here please.

[Big Fish]

Use the ComboFix , When running , ComboFix will check if the Recovery Console Microsoft Windows is installed. With infections , it is strongly advised to have pre-installed on your PC before removing harmful. It will start in a special mode of recovery (repair), we can help you more easily if your computer never has a problem after an attempted cleaning.

Follow the prompts to allow ComboFix to download and install the Recovery Console Microsoft Windows, and when requested, accept the License Agreement End User to install. Once on your desktop double click on it to start.
Important note: If the Recovery Console Microsoft Windows is already installed, ComboFix will continue its procedures for removing harmful.

[Zachary]

Locate and delete these files. It wil be better if you use Spybot-S&D to remove them.

1. A file with an unknown location named "404fix.exe".
2. The file at "<$APPDATA>\process.exe".
3. The file at "<$COMMONAPPDATA>\404fix.exe".
4. The file at "<$COMMONAPPDATA>\process.exe".
5. The file at "<$LOCALAPPDATA>\404fix.exe".
6. The file at "<$LOCALAPPDATA>\process.exe".
7. The file at "<$SYSDIR>\404fix.exe".
8. The file at "<$SYSDIR>\process.exe".
9. The file at "<$WINDIR>\404fix.exe".
10. The file at "<$WINDIR>\process.exe".