Wednesday, November 12, 2008

Trojan-Spy.Win32.Banker.aiw - new fake trojan

Users are asking how to get rid of Trojan-Spy.Win32.Banker.aiw. It means that there is a spyware item installed at their machines that either shows pop-ups or scan windows referring to Trojan-Spy.Win32.Banker.aiw as to the main source of danger at the respective machine. They even say that rootkits can be created by this trojan so that unless Trojan-Spy.Win32.Banker.aiw removal is performed in a good time, this trojan can never be removed and complete system reinstallation needed. Needless to say, there is no scintilla of truth in such statements as Trojan-Spy.Win32.Banker.aiw is just an imaginary name. A real danger is relevant spyware that wants a user to pay from 40 bucks for… antispyware installation – well, life is a paradox, don’t you find so (blame someone else for someone else won’t blame you – tactic of spyware attacks) .
So, to remove Trojan-Spy.Win32.Banker.aiw means to remove related spyware. Click the link below in order to start scanning computer for free and remove Trojan-Spy.Win32.Banker.aiw pop-up in the right way (using SpywareDoctor+antivirus).

Trojan-Spy.Win32.Banker.aiw message:
Windows Firewall has detected unauthorised activity , but unfortunately it cannot help you remove viruses, keyloggers and spyware threats that steal your personal information from you computer. Click here to pick recommended software.
Trojan-Spy.Win32.Banker.aiw screenshots:

"Protect button" leads to defender-review.com misleading web-site



Trojan-Spy.Win32.Banker.aiw automatical remover:

13 comments:

Anonymous said...

Could not install on window vista 64 bit

marcus said...

thank you, im having this problem and it's really annoying.
i can't click the start button, either, or the whole taskbar will freeze.

Anonymous said...

I'm have the same problem and can't find a solution. Windows Defender, Avast, and Ad-Aware do not detect this spyware. Marcus, did this software remove the problem ?

Anonymous said...

I'm having the same problem and can't find a solution. Windows Defender, Avast, and Ad-Aware do not detect this spyware. Marcus, did this software remove the problem ?

Anonymous said...

I got the same thing on 11/12/08. Somehow while visiting websites my computer developed this spyware. I am currently running vista 32 and it has completley taken over my computer. as soon as windows starts(within 10 seconds) the entire computer does not respond to any mouse clicks or ,ost keyboard functions(sleep works however. I have used spydoctor and it does not detect it. spybot did not work either. I can only use my computer in safe mode right now. I can not install/ use adaware in safe mode and the spyware kicks in before anything can scan for it. any suggestions?

Anonymous said...

I got the exact same problem as the post above. Please help!

Anonymous said...

As I mentioned earlier (3rd post) I'm still having this problems with the same symtoms as mentioned. I get the same fake banker.aiw trojan popup that links to defender-review.com. However I also have the problem of the taskbar freezing after a few minutes. It seems as of now that no AV software will detect this problem. I have tried Avast, Ad-Aware, and Malwarebytes. The latter found a Rogue.Multiple but removing did not solve this issue. It seems Spy Doctor and other programs look for the following files when scanning for this virus:

dbbase.div
pdefendr.exe
sccmsk.dll
ikbmqvex.exe
Personal Defender 2009.lnk

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “asus32″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PDefender
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Personal Defender 2009″

However I have checked and do not have any of this files/reg keys and still have the same problem. So these are old solutions and there are no updated virus definitions available yet. If anyone finds a solution please post here. Good luck.

Glen

Anonymous said...

Okay, after my last post I managed to find the problem. I found a entry in Event Viewer showing an exception in Windows Defender where the adware allowed itself to pass unnoticed. I then checked the Windows Defender history to find the files and registry key to remove. Remove these files in Safe Mode, clear your Windows Defender history, and run a full sysem scan to be safe. This solved my problem including the task bar freezes. Here is the reg key and file to delete. DO NOT delete any other reistry keys besides this one ! You will see folders in the registry called DWM which is legit Windows Vista software - Desktop Window Manager.

regkey:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\dwm

file:
C:\Users\UserName\AppData\Roaming\Google\dwm.exe

Glen

Anonymous said...

Also, there is a second file dplmsk.dll in the folder as well so just delete the folder.

C:\Users\UserName\AppData\Roaming\Google

Anonymous said...

yep, same problem for me to on vista also, freezing taskbar and start button, no setup screen coms up when i put a movie or cd in...HELP PLEAAAASEEE

Anonymous said...

look for a TELCEL folder

Gawker said...

Gat this MF... (Windwos Xp SP3)
run -> C:\Documents and Settings\%username%\Application Data\Google\
Delete the content of this folder and Emjoy...

*******************
The day thet I'll stop to learn it's the day I'll die..
*******************
found by Gawker IL.

Gawker said...

don't forget to do a reset...
*************
Gawker IL
*************