How do you remove the Trojan Horse PSW Banker 2 Z that cannot be healed or removed by AVG?

Answer 1

The people at this sight are VERY good. They just eliminated a seemingly 'unkillable' Trojan that hijacked my system a while back. You MUST read and follow the instructions in their FAQ, or you may not get a response. The process is very much worth it, my system is clean and they showed me several new (free) tools to keep it that way. Best of luck!

http://www.spywareinfo.com/articles/hijacked/#removal

This Trojan should be removed by AVG 6.0, when all updates are in place.

If Avg really can't remove it, try it with the online virusscanner of McAfee. This one should also be able to remove this Trojan.

Link to the McAfee Online scanner: http://us.mcafee.com/root/mfs/default.asp?cid=9914

Good luck, Jahewi :-)

Hi,

similar problem: AVG's latest edition found trojans PSW.Bispy.E and PSW.Bispy.B in a path I can't see in explorer (although hidden files and that stuff switched on!). I even downloaded the AVG recommended vcleaner.exe. Started in protected mode (WIN XP prof.) and ran it. It did not find nor remove the virus.

So what I did was to open a command window (start-run-cmd) and used good old DOS commands to CD to that path. Then entered "DEL ." Good old DOS trick to delete everything in a directory. That was it.

The name of the misterious path is below - you see this is a system run in Germany.

And as I saw "Content.IE5" as part of the paths name I knew where I got the virus from(just started IE5 today once to see a certain difference compared to firefox ) And I knew I wouldn't need any of the stuff I deleted :-)

Path was: C:\Dokumente und Einstellungen\Standard\Lokale Einstellungen\Temporary internet Files\Content.IE5\8LU8UFG7\payload[1].cab:\bi.dll

Actually, windows did not show any path below Content.IE5. Sometimes it's really good help that windows still is DOS-based.

Have fun!

Karenina,

I had the same virus & finally got rid of it today.

turn off system restore open windows in safe mode use windows explorer & delete hookerdll.dl2l and cssrs.exe from c:\windows

then go back to live mode & rerun AVG

now it's gone reenable system restore

for 2 months of research, you & I are the only ones on the web that mentioned this virus. I hope that works for you Pat

You can get rid of the Trojan horse , by following these steps .

1 Download and intall the Malwarebytes on your computer .

2 Update your Malwarebytes .

3 Scan your computer for all the malwares in your computer .

4 Remove all the malwares , found while scanning with the malwarebytes .

5 Restart your computer .