Announcement Banner
UNSOLVED

FIGHTN HOKIE

updated

19 years ago

0

1615

July 3rd, 2007 13:00

Trojan.PWS.Tanspy

What is it?
 
How do you get rid of it?
  • ky331

    5 Journeyman

    •

    15627 Posts

    •

    45058 Points

    171

    0

    Posted July 3rd, 2007 15:00

    EDIT:   After writing this, I've discovered you're already getting helped in the HJT forum...

     

    A simple internet search would lead you to information such as the following:

     

    "trojan.PWS.Tanspy is a spyware trojan that attempts to steal [passwords, and especially] banking information. It has the functionality to connect to remote servers using HTTP. Trojan.PWS.Tanspy installs itself into the registry and has been known to lower security settings".

     

    Certainly something you wouldn't want to have on your system... and need to get rid of ASAP.

     

    There may be some simple/automated programs that target this trojan... but since I'm not aware of a particular one offhand, I'd suggest you generate and post a HiJackThis log, in the HJT forum:

     

     

    Download a self-extracting copy of the latest version of HJT (HiJackThis) (version 1.99.1) from
    Save it to your Desktop.
    Double-click on the file    hijackthis_sfx.exe    file, and allow it to self-extract [by clicking on UnZip] into the suggested/default folder,
    C:\Program Files\HijackThis
     
    Use Windows Explorer to navigate your way into this folder, and then double click on HiJackThis. exe

    Click on  Do a System Scan and Save a LogFile

    This will automatically open NotePad

    Copy the entire file from NotePad:  EDIT/SelectAll, EDIT/Copy

    Then go to the forum dedicated for HiJack This logs (**NOT** back here), and  PASTE the results there:

    http://forums.us.dell.com/supportforums/board?board.id=si_hijack

     

    Be sure to include a detailed description of any problems/errors/warnings you are encountering.  

    Also, please indicate the steps you've already taken, if any, in terms of running anti-malware scanners or malware removal tools.

     

    When you submit your HJT log, please make sure the box under your text which shows "Automatically convert carriage returns to HTML line breaks" is checked, or your log may not format correctly... it should consist of separate/readable lines, not one large "jumble".
     

    Hopefully, one of the HJT experts will get to it as quickly as possible.

     

    WARNING:  HiJack This is a VERY POWERFUL tool.  While it's  completely safe  for you to download, generate, and post your log (as described above), you should *NOT* attempt to do anything else (in particular, do NOT use it to delete/fix any entries) until you are advised to do so by a forum expert!!   Improper use of this tool can severely damage your system.





    Message Edited by ky331 on 07-03-2007 01:12 PM