Mobile menu

Trojan PWSteal - come si toglie?
Thread poster: sabina moscatelli

sabina moscatelli  Identity Verified
Local time: 14:52
Member (2004)
German to Italian
+ ...
Sep 27, 2004

Buongiorno a tutti

ormai sono alla disperazione. Ho scoperto che il mio PC è infettato dal Trojan in oggetto. Ho cercato di eliminarlo con Norton, ma non è possibile. Allora ho seguito le istruzioni del sito Symantec e ho effettuato lo scan virus avviando il computer in modalità provvisoria. Lo individua ma non lo debella.

Ho fatto girare non so quante volte Spybot e AdAware. Che hanno individuato e debellato un sacco di altre schifezze ignorate da Norton. Nella notte ho fatto andare nuovamente Norton, sperando di averlo debellato ma... niente!

L'ultima spiaggia è la formattazione del disco fisso. Avete qualche idea alternativa, per risparmiare tutto questo lavoro?



Direct link Reply with quote

Giuliana Buscaglione  Identity Verified
Local time: 14:52
Member (2001)
German to Italian
+ ...
Quale esattamente? Sep 27, 2004

Ciao Sabina,

Quale dei PWSteal? Ci sono diverse varianti... Che sistema operativo usi? XP?


Direct link Reply with quote
Albert Golub  Identity Verified
Local time: 14:52
English to French
Maybe this (from symantec) Sep 27, 2004

Cannot delete or quarantine files infected with PWSteal.Trojan after removing the PWSteal.Trojan or the AOL.PWSteal.32512 Trojan

You removed the PWSteal.Trojan or the AOL.PWSteal.32512 Trojan (also known as the Buddylist Trojan). However, subsequent scans indicate one or more files still are infected with the PWSteal.Trojan. NAV prompts you to delete or quarantine the file. When you click Delete or Quarantine, NAV cannot do either, and it presents you with the same options again. Ultimately, you cannot remove the infected file.

This can happen when the infected file is compressed. Do the following to delete the infected file from your system:

Determine the name of the infected file by finding it in the NAV Activity Log.
Search for and delete the file.

To determine the name of the infected file by finding it in the NAV Activity Log
Start NAV, and then click Reports.
Double-click "View the log of Norton AntiVirus Activities."
Scroll through the list to look for text that refers to the virus, for example, "The file Mine.shs in compressed file C:WindowsMine.shs is infected with the PWSteal.Trojan." (The most recent entries will be at the bottom of the list.)
Write down the name and location of each infected compressed file, and then go on to the next section.

To search for and delete the file
Click Start, point to Find, and then click Files or Folders.
Make sure that the "Look In" box points to the drive on which the compressed file was found.
Type the name of the compressed file that you wrote down.
Click "Find Now."
Select the file that is found, press Delete, and then click Yes to confirm.
Repeats steps 3 through 5 for any remaining files that are listed.
Right-click the Recycle bin on the Windows desktop, and then click Empty Recycle Bin.

Good luck

[Edited at 2004-09-27 07:32]

Direct link Reply with quote

Giovanni Guarnieri MITI, MIL  Identity Verified
United Kingdom
Local time: 13:52
Member (2004)
English to Italian
informazioni dal sito Sophos... Sep 27, 2004


PWSteal is not the name of a virus, but a name used by Symantec's Norton Anti-Virus when it thinks it may have found a password stealing trojan horse.

You may like to re-scan your system with Sophos Anti-Virus - if it is a virus or trojan horse that Sophos knows about it will tell you its correct name.

However, according to postings on the internet Norton Anti-Virus has been incorrectly identifying files as PWSteal when they are in fact not malicious.

We recommend you contact Symantec technical support to verify if you are experiencing a Norton Anti-Virus false alarm.

Detto questo, ci sono tante versioni in giro. Come ti sei accorta di avere il trojan? L'ha rilevato Norton?


[Edited at 2004-09-27 07:52]

Direct link Reply with quote

sabina moscatelli  Identity Verified
Local time: 14:52
Member (2004)
German to Italian
+ ...
l'ha rilevato Norton Sep 27, 2004

durante le operazioni di Scan Virus. Int. Explorer è molto lento, dà moltissimi messaggi di errore, blocca le pagine e non te le lascia più chiudere, etc. etc. Per il resto, il PC non pare avere problemi.

Non ho annotato la versione. Stasera rifaccio lo scan e poi vi dirò...

Direct link Reply with quote

To report site rules violations or get help, contact a site moderator:

Moderator(s) of this forum
Simone Catania[Call to this topic]

You can also contact site staff by submitting a support request »

Trojan PWSteal - come si toglie?

Advanced search

Protemos translation business management system
Create your account in minutes, and start working! 3-month trial for agencies, and free for freelancers!

The system lets you keep client/vendor database, with contacts and rates, manage projects and assign jobs to vendors, issue invoices, track payments, store and manage project files, generate business reports on turnover profit per client/manager etc.

More info »
Déjà Vu X3
Try it, Love it

Find out why Déjà Vu is today the most flexible, customizable and user-friendly tool on the market. See the brand new features in action: *Completely redesigned user interface *Live Preview *Inline spell checking *Inline

More info »

All of
  • All of
  • Term search
  • Jobs