Trojan Horse Maccess

Last night, my SpySweeper detected Trojan Horse Maccess, defining it as critical. I have Windows XP Professional on a Dell XPS with Internet Explorer.

I quarantined the Trojan Horse without any problem. I then ran SpySweeper three more times, iaw their directions. I never saw another indicator of Maccess.

Just to be safe, I came to MajorGeeks and ran the entire "Spyware Removal" thing, all the way up to the HijackThis log posting, number 7. I stopped there because none of the many scans from "Preliminary House Cleaning" through "Online Virus and Trojan Scanning" found anything at all. So, I figured I was probably okay at that point. I saved all the log files to send as attachments, but I seem to have no problems at all, I guess. I also went back and disabled and re-enabled System Restore just to be safe.

My very first indication that I had a problem last night, prompting me to run SpySweeper, is that suddenly my Browser was not my own! It insisted on doing its own thing.

The thing is, in the 24 hours since I last ran SpySweeper before finding Maccess, I did not open a single attachment or download any files other than a Quicken Direct Connect to Web Connect thing that was sent from my bank in order to change to their new In Home Banking System. They really are changing ... it's legit. I was given a PIN, spoke to them on the phone to get walked through it, and everything. I also clicked on some bothersome emails on Outlook Express that keep coming my way from "people" and subjects I don't know just in order to delete them. (I have so far found no way to delete them in Outlook Express without clicking on them. They are supposedly not "opened" when I click them, but you can certainly read whatever's in them in the bottom of the Outlook Express screen. I didn't open any attachments ... there weren't any.) So, other than the usual frequent and annoying "stock market" (usually) spam emails and that change in my In Home Banking, I cannot figure out HOW I got this Maccess.

My Questions are: What does anybody know about Trojan Horse Maccess? I can't find much on it at all. Is it as scary as the messages that came with it on SpySweeper? How might I have gotten it?

 

Its just another one of the nasties out there, have a search on google if you want more information ..

As far as infections go its not the worst, but it does attempt to change browser and firewall security settings and if successful may allow remote access and as such is pretty critical.

If you want to post the logs we can take a look at them for you