Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

PWsteal.trojan


  • Please log in to reply
2 replies to this topic

#1 Supermart57

Supermart57

  • Members
  • 104 posts
  • OFFLINE
  •  
  • Local time:10:07 PM

Posted 03 July 2004 - 11:52 AM

I ran a full scan using NAV 2002 the other day. It reported the virus PWsteal.Trojan located in dtc32.dll. Norton could not quaratine or delete it which seemed odd. The Symantec website included instruction on how to manually delete it giving a list of files which had to be deleted manually. They either did not exist or there were several different copies referring to various valid applications eg Mine.exe.

I checked the Sophos website where the trojan was listed as a hoax. Mcafee lists it as a virus.

Is it something nasty and if so how do I get rid of it?
I'd like to die peacefully in my sleep like my grandfather, not screaming in terror like his passengers

BC AdBot (Login to Remove)

 


m

#2 den010

den010

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:10:07 PM

Posted 03 July 2004 - 09:48 PM

I ran a full scan using NAV 2002 the other day. It reported the virus PWsteal.Trojan located in dtc32.dll. Norton could not quaratine or delete it which seemed odd. The Symantec website included instruction on how to manually delete it giving a list of files which had to be deleted manually. They either did not exist or there were several different copies referring to various valid applications eg Mine.exe.

I checked the Sophos website where the trojan was listed as a hoax. Mcafee lists it as a virus.

Is it something nasty and if so how do I get rid of it?

http://www.google.com/search?hl=en&ie=UTF-...G=Google+Search


That should help!

#3 Papakid

Papakid

    Guru at being a Newbie


  • Malware Response Team
  • 6,522 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:07 PM

Posted 05 July 2004 - 08:28 PM

Hi Supermart57,
It's really a misnomer to call PWSteal a hoax. It really does exist, and a hoax is usually about nonexistant malware. What i get from the Sophos web page is that some people are having a problem with Norton finding PWSteal where it doesn't exist on you computer--a false positive.

From your description and considering you're running an older version of Norton, I would think this is what is happening with you. But to be sure, I suggest you run some free online scans--if they find PWSteal on your PC then you know it's not a false positive (FP). If you run two or more scans and nothing else finds PWSteal on your PC, then most likely it is an FP.

I would suggest running the following, and more can be found HERE:

Trend Micro Housecall
Panda Active Scan
GFI Trojanscan

Let us know how it goes and if you have any more questions.

The fate of all mankind, I see

Is in the hands of fools

--King Crimson





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users