Startsidan f�r Internet Explorer �terst�lls till "about:blank" och Windows Defender avslutas ov�ntat i Windows 2000, Windows XP eller Windows Server 2003

Artikel-id: 894269 - Visa produkter som artikeln g�ller.

Symptom

P� en dator med Microsoft Windows Server 2000, Microsoft Windows XP eller Microsoft Windows Server 2003 kan f�ljande problem uppst�:

Startsidan i Internet Explorer �terst�lls till "about:blank".
Microsoft Windows Defender avslutas ov�ntat.

Tillbaka till b�rjan | Ge feedback

Orsak

Det h�r problemet kan bero p� att datorn har angripits av trojanen TrojanSpy:Win32/Banker.

Tillbaka till b�rjan | Ge feedback

De flesta antivirusprogram kan identifiera och f�rhindra angrepp fr�n skadliga program. Undvik d�rf�r det h�r problemet genom att k�ra ett antivirusprogram som �r uppdaterat med de senaste signaturfilerna, och installera sedan om Microsoft Windows Defender.

Tillbaka till b�rjan | Ge feedback

Mer Information

Om datorn angrips av TrojanSpy:Win32/Banker h�nder f�ljande:

Startsidan f�r Internet Explorer blir "about:blank".
Alla filer i mappen C:\Program\Microsoft AntiSpyware tas bort.
F�nster som har att g�ra med Microsoft Windows AntiSpyware (Beta) identifieras, och sedan skickas meddelanden till dem f�r att de ska st�ngas.
Processer som h�r till Microsoft Windows AntiSpyware (Beta) avslutas.
TrojanSpy:Win32/Banker f�rs�ker h�mta och k�ra uppdateringar fr�n en webbserver.
TrojanSpy:Win32/Banker f�rs�ker h�mta och k�ra ytterligare program fr�n en FTP-server.
Anv�ndaren kan inte komma �t vissa s�kerhetswebbplatser.
Registernyckeln gcasServ tas bort fr�n f�ljande undernyckel:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Personlig anv�ndarinformation samlas in n�r en anv�ndare bes�ker vissa webbplatser f�r Internetbanktj�nster.

Detta g�ller f�ljande webbplatser:
- ibank.barclays.co.uk
- ibank.cahoot.com
- myonlineaccounts2.abbeynational.co.uk
- olb.westpac.com.au
- olb2.nationet.com
- online.lloydstsb.co.uk
- sec.westpactrust.co.nz
- web.da-us.citibank.com
- www.bpinet.pt
- www.ebank.hsbc.co.uk
- www.ebank.hsbc.com.hk
- www.halifax-online.co.uk
- www.iblogin.com
- www.national.com.au
- www.nwolb.com
- www.rbsdigital.com
Sedan f�rs�ker TrojanSpy:Win32/Banker skicka informationen till en FTP-server.
URL-adresser som anv�ndaren bes�ker loggas i filen %windir%\Req.log, men URL-adresser som inneh�ller f�ljande str�ngar loggas inte:
- https
- safeform.com
- northeast.on.ca
- salesforce.com
- prudential.com.hk
- sammikk.com
- samsunggsbn.com
- sbc.com
- s-central.com.au
- ebay
- sciamdigital.com
- scicollege.org.sg
- upjs.sk
- eutelsat.net
- searchfit.org
- seatbooker.net
- sebra.com
- yimg.com
- acadiau.ca
- adultfriendfinder.com
- advisor.com
- authorize.net
- bearshare.com
- betbanking.com
- bnpparibas.net
- c1hrapps.com
- customersvc.com
- konetic.org
- delias.com
- deluxepass.com
- directnic.com
- directsex.com
- earthport.com
- elance.com
- element5.com
- elsevier
- emetrix.com
- e-registernow.com
- europeonline.com
- ezpeer.com
- fredericks.com
- gevalia.com
- hilton.com
- hostdozy.com
- hotbar.com
- idx.com .au
- indigosp.com
- infusion-studios.com
- intuitcanada.com
- reuters.com
- kent.net lkw-walter.com
- medibank.com.au
- mouse2mobile.com
- mysylvan.com
- nacelink.com
- netbilling.com
- netfirms.com
- netspeed.com.au
- nike.com.hk
- novuslink.net
- nzqa.govt.nz
- oberon-media.com
- onlineaccess.net
- optusnet.com.au
- orcon.net
- ordering.co.uk
- oztralia.com
- register.com
- safesite.com
- shaw.ca
- billerweb.com
- sms.ac
- sparkart.com
- sparknotes.com
- starbiz.net.sg
- telusmobility.com
- thewheelconnection.com
- tickle.com
- trekblue.com
- tsn.cc
- ubi.com
- vandyke.com
- w2express.com
- mgm-mirage.com
- webeweb.net
- wn.com.au
- securecart.net
- secureordering.com
- secureserver.net
- imrworldwide.com
- playstation.com
- western-inventory.com
- securewebexchange.com
- securitymetrics.com
- selfmgmt.com
- t-mobile.co.uk
- xtra.co.nz
- canon-europe.com
- senecac.on.ca
- sephora.com
- liveperson.net
- ariba.com
- sympatico.ca
- xs4all.nl
- macau.ctm.net
- rogers.com
- sfgov.org
- cic.gc.ca
- vodafone.co.uk
- hku.hk
- sfa.prudential.com.sg
- shkcorpws5.shkp.com
- ecompanystore.com
- o2online.de
- shopadmin.daum.net
- shoppersoptimum.ca
- go-fia.com
- zoovy.com
- shopundco.com
- shutterfly.com
- signup.sprint.ca
- silicon-power.com
- singnet.com.sg
- simplyhotels.com
- sims.sfu.ca
- singaporeair.com
- site-secure.com
- esdlife.com
- flextronics.com
- cometsystems.com
- snapfish.com
- solo3.nordea.fi soccer.com
- hkuspace.org
- soundclick.com
- swamp.lan spiritair.com
- sportingbet.com
- sportodds.com
- worldgaming.net adaptec.com
- sqnet.com.sg srp.org.sg
- ains.com.au
- campoints.net
- ingrammicro.com
- kundenserver.de
- speedera.net
- farlep.net
- lanck.net .sok
- monster.com
- ihost.com
- gigaisp.net
- webtrendslive.com
- a-net.com
- puma.com
- apple.com
- streamload.com
- maximonline.com
- look.ca
- supergo.com
- cablebg.net
- dell
- sony
- inlandrevenue.gov.uk
- tbihosting.com
- quickbooks.com
- techdata.com
- telpacific.com.au
- telstra.com
- freedom.net
- recruitsoft.com
- tepore.com
- theaa.com
- three.com.hk
- ticketmaster.com
- ultrastar.com
- ti.com
- tirerack.com
- tm.net.my
- tmi-wwa.com
- tdcwww.net
- stanfordalumni.org
- 012.net
- starhubshop.com.sg
- datasvit.net
- ssdcl.com.sg
- music
- iinet.net.au
- iprimus.com.au
- hp.com
- game
- towerhobbies.com
- travel.com.au
- travel.priceline.com
- travelclub.swiss.com
- travelcommunications.co.uk
- trivita.com
- trust1.com
- trustinternational.com
- yorku.ca
- preschoicefinancial.com
- united.intranet.ual.com
- unixcore.com
- uwindsor.ca
- ucas.co.uk
- ups.com
- yesasia.com
- usafis.org
- uscden.net
- uscitizenship.info
- va-bank.com
- vasa.slsp.sk
- veloz.com
- victoriassecret.com
- videotron.com
- mcafee.com
- virginblue.com.au
- virginmobileusa.com
- vodafone vpost.com.sg
- vutbr.cz
- opusit.com.sg
- ibm.com
- aircanada.ca
- walgreens.com
- watchguard.com
- icq.com
- ych.com
- uottawa.ca
- uoguelph.ca
- there.com
- webassign.net
- comcast.net
- douglas.bc.ca
- carleton.ca
- mcgill.ca
- mcmaster.ca
- queensu.ca
- sheridanc.on.ca
- ubc.ca
- unb.ca
- .ac.at
- .ac.nz
- .ust.hk
- microsoft.com
- guidehome.com
- sap-ag.de
- nwa.com
- webzdarma.cz
- intel.com
- bigpond.net.au
- willhill.com
- .ac.uk
- t-mobile.com
- uwaterloo.ca
- delawarenorth.com
- worldwinner.com
- worth1000.com
- wrem.sis.yorku.ca
- sierraclub.org
- serviticket.com
- yagma.com
- yes.com.hk .edu
- yourastrologysite.com
- ytv.com .o2.co.uk
- zwallet.com

TrojanSpy:Win32/Banker installeras i Internet Explorer som ett webbl�sartill�gg.

Du kan skydda din dator mot angrepp genom att alltid anv�nda antivirusprogram med de senaste signaturfilerna. P� f�ljande Microsoft-webbplats kan du l�sa mer om hur du ser till att datorn �r skyddad mot nuvarande och framtida hot:

http://www.microsoft.com/athome/security/default.mspx

(http://www.microsoft.com/athome/security/default.mspx)

Tillbaka till b�rjan | Ge feedback