• Home
  • About Us
    • Our Mission
    • Our Testing
    • Resources
    • Best Antivirus 2011
  • Recent News
    • Virus Removal Guides
    • Antivirus News
  • Installation Guide
  • Advanced Virus Removal
  • FAQ’s
  • Contact Us

Trojan-PSW.Bancos!rem Trojan Virus Infection Removal

Posted by ThreatDetector
/ January 4, 2012 / Posted in Uncategorized


Trojan-PSW.Bancos!rem Trojan Virus Infection Removal



The Trojan-PSW.Bancos!rem trojan virus is a dangerous trojan virus infection affecting computer users worldwide. It also goes by the name Trojan-PSW.Bancos!rem, Infostealer.Bancos, Trojan.Win32.VB.yti, Backdoor.Win32.VB.ksa, PWS-Banker!fvm and Trojan.Win32.Dabvegi. This trojan was discovered on January 4th, 2012, by various trojan detection and prevention sources including Antivirus Help Center.


The Trojan-PSW.Bancos!rem trojan is extremely similar to other trojans in its method of operation. It can perform file system changes, memory modifications, registry value changes, and registry key changes. These types of trojan infections cause serious harm to your computer operating system as well as all files saved in your computer.


Trojans are also very popular for computer hackers due to their ability to install key loggers and other programs used for identity theft. A trojan can log the password to your online bank account and then forward it back to the trojan creator. The Trojan-PSW.Bancos!rem trojan virus may be capable of performing these malicious actions.


If you have been infected with Trojan-PSW.Bancos!rem, or any other trojan virus, it is highly recommended that you scan your computer and remove any infections that are found immediately.


  • 1. Start Virus Removal
  • 2. Retry The Download
  • 3. Advanced Removal Page
Our recommended virus removal program is called PC Tools Internet Security 2011. We have tested many different virus removal programs and after our testing we put our full 100% confidence with PC Tools for all trojan virus infections on your computer. PC Tools Internet Security 2011 will get rid of the virus on your computer!

Start Virus Removal Download

Did the download not start? Proceed to Step 2.
If you have tried to download the installation file and it will not start to download, keep clicking on the download link. Click on it at least 10 times until the download begins. If you continuously click and try to download the virus removal program, it will over-ride the infections attempt at stopping you.

Start Virus Removal Download

Still having trouble? Proceed to Step 3.
If you have tried both steps and it still hasn’t worked, please visit our Advanced Removal Page for advanced instructions and troubleshooting by clicking the button below.

Start Virus Removal Download

Modified System Files


Filename(s): %Programs%\Startup\trfowinw.lnk
File Size: 1,537 bytes
MD5: 0x9F570991F81E05B8D87116B862DDE049
SHA-1: 0x45843929F3AB7E997CD76F060BEF8677819C45C1
Alias: (not available)


Filename(s): %ProgramFiles%\wvoaa\config\exitd.vxd

%ProgramFiles%\wvoaa\config\ref\banif.on

%ProgramFiles%\wvoaa\config\ref\barclays.on

%ProgramFiles%\wvoaa\config\ref\bb.on

%ProgramFiles%\wvoaa\config\ref\bes.on

%ProgramFiles%\wvoaa\config\ref\bpinet.on

%ProgramFiles%\wvoaa\config\ref\bradesco.on

%ProgramFiles%\wvoaa\config\ref\caixa.on

%ProgramFiles%\wvoaa\config\ref\cgd.on

%ProgramFiles%\wvoaa\config\ref\credito-agricola.on

%ProgramFiles%\wvoaa\config\ref\globo.on

%ProgramFiles%\wvoaa\config\ref\gmail.on

%ProgramFiles%\wvoaa\config\ref\hotmail.on

%ProgramFiles%\wvoaa\config\ref\ig.on

%ProgramFiles%\wvoaa\config\ref\itau.on

%ProgramFiles%\wvoaa\config\ref\live.on

%ProgramFiles%\wvoaa\config\ref\locaweb.on

%ProgramFiles%\wvoaa\config\ref\montepio.on

%ProgramFiles%\wvoaa\config\ref\orkut.on

%ProgramFiles%\wvoaa\config\ref\santander.on

%ProgramFiles%\wvoaa\config\ref\terra.on

%ProgramFiles%\wvoaa\config\ref\yahoo.on
File Size: 0 bytes
MD5: 0xD41D8CD98F00B204E9800998ECF8427E
SHA-1: 0xDA39A3EE5E6B4B0D3255BFEF95601890AFD80709
Alias: (not available)



Filename(s): %ProgramFiles%\wvoaa\config\name.drv
File Size: 22 bytes
MD5: 0x51CA5EAE98AE98C84C50C49FC1B431F7
SHA-1: 0xADD98098443C3C458DA33808533F6E2A5FB8AAF5
Alias: (not available)


Filename(s): %ProgramFiles%\wvoaa\config\tm.t
File Size: 1 bytes
MD5: 0xC4CA4238A0B923820DCC509A6F75849B
SHA-1: 0x356A192B7913B04C54574D18C28D46E6395428AB
Alias: (not available)


Filename(s): %ProgramFiles%\wvoaa\config\wininfo1.vxd
File Size: 406 bytes
MD5: 0xEC60362799FDC683A7930B4B8E07B4B6
SHA-1: 0xD91BFE3CDCCCC28F63C402942891F64499111174
Alias: (not available)


Filename(s): %ProgramFiles%\wvoaa\scrypt.exe
File Size: 45,056 bytes
MD5: 0x425729F53F35C64E6AE5E423484E3ED3
SHA-1: 0x80A36A32227702E30F8A87D1D1D21E4A4587C81C
Alias: RogueAntiSpyware.SpySheriff!rem SpySheriff Trojan.Win32.VB.yti Generic VB.b Troj/VBBank-Gen Trojan:Win32/VB.UL Trojan.Win32.Dabvegi Win-Trojan/Agent.45056.AOS


Filename(s): %ProgramFiles%\wvoaa\sec\fx.crp
File Size: 15,694 bytes
MD5: 0x98437EFE9FE8E0ECB519778B6B891C56
SHA-1: 0x51D725BF495BB1DCD1F745F269505584665FBD71
Alias: (not available)


Filename(s): %ProgramFiles%\wvoaa\trfowinw.exe
File Size: 925,696 bytes
MD5: 0x8ACD32A12D8DB902319FBA8B1240DA98
SHA-1: 0xA296BD09E2E98E59928C2880A6987CA150192944
Alias: Trojan-PSW.Bancos!rem Infostealer.Bancos Backdoor.Win32.VB.ksa Generic PWS.fy Mal/Banco-B Trojan:Win32/Dabvegi.A Trojan.Win32.Dabvegi Win-Trojan/Xema.variant


Filename(s):
File Size: 276,816 bytes
MD5: 0xACC0751B17ADD453C44C93C3E59673F4
SHA-1: 0xC6143254D2DA652FD5B1A55E93871FA5F4FEDF79
Alias: Trojan-PSW.Bancos!rem Infostealer.Bancos Backdoor.Win32.VB.ksa PWS-Banker!fvm Trojan.Win32.Dabvegi
Modified Registry Keys

HKEY_CURRENT_USER\Software\WinRAR SFX

Modified Registry Values


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]

EnableHttp1_1 =



Leave a comment

Click here to cancel reply.

Virus Removal Guides

  • Security Sphere 2012
  • Computer Virus Infection alert! Thinkpoint virus removal available here!

Antivirus News

  • How to Install Windows 8 in VirtualBox
  • Computer Virus Infection alert! Thinkpoint virus removal available here!
  • 9-18-10 Who Will Have The Best Antivirus Software for 2011, Want to Know?

Help Center

  • Home
  • About Us
  • Our Testing
  • Trojan Virus Removal
  • Antivirus Installation

Resources

    Boot Into Safe Mode
  • Find Your Web Browser

PC Tools 2011

  • Download PC Tools
  • Trojan Virus Scan
  • Troubleshooting

Safe Site

  • McAfee Site Advisor
  • Google Safe Browsing
  • Webutation
Antivirus Help Center Search

Copyright © 2011 - Antivirus Help Center - All rights reserved. Terms & Conditions and Privacy Policy