The only reference I can find to Webmoney advisor is:
"Once installed, the Trojan captures data from HTTPS sessions, specifically to several banking sites. Domains containing any of the following strings are targeted:
Captured data is then sent via HTTP to be processed by a script residing on a remote server:
Administrators should block HTTP access to this domain." This is exactly what my bank is warning me of. So they must be detecting something of this type. I have the latest Mcaffee security center running with all the latest updates. So I am mystified why this is not been detected.
EDIT: Posts merged ~Budapest
Edited by Budapest, 27 June 2011 - 04:45 PM.