win32.banker.eks

radroof · Jan 17, 2008

I tried the read me first tutorial, followed the directions and did the scans & no luck. Spybot found it but could not delete it. It said the program may be running. Help much appreciated

Lev · Jan 17, 2008

Welcome to MajorGeeks.com!

You obviously didn't read the directions closely enough, or you would have posted the requested logs. They are not just removal tools - they give the Authorized Malware Fighters here a greater insight into exactly what is going on inside of your machine. So.....

Please follow the instructions in the below link and attach the requested logs when you finish these instructions.

Read & RUN ME FIRST Before Asking for Support

radroof · Jan 17, 2008

win32.banker.ekn

I got the infection a few days ago. It came to my attention when I did a spybot scan and it showed up. Spybot could not remove. Attached are the required logs thanx

radroof · Jan 17, 2008

radroof said: ↑

I tried the read me first tutorial, followed the directions and did the scans & no luck. Spybot found it but could not delete it. It said the program may be running. Help much appreciated
Click to expand...

see my new post with .ekn at the end instead of .eks

chaslang · Jan 17, 2008

radroof said: ↑

see my new post with .ekn at the end instead of .eks
Click to expand...

You need to remain in one thread to avoid issues like this! You have been merged back into one thread.

What you are reporting is a false positive from Spybot. See this: http://forums.spybot.info/showthread.php?p=155047

GbpSv is the service of GBPlugin, a internet banking plugin very common in Brazil. I assume you know what this is since you have it installed.

Log in or Sign up

win32.banker.eks

radroof Private E-2

Lev MajorGeek

radroof Private E-2

Attached Files:

MGlogs.zip

ComboFix.txt

radroof Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member