Troj/Bckdr-QSL

Fielder · 25 Mar 2009

Pls, whose scans will detect this and who has a removal program? Thanks

Airbot · 25 Mar 2009

Well, if you read the other thread you posted in about this , you would see malwarebytes..

Malwarebytes.org

jfar · 25 Mar 2009

Hi Fielder, If it was me I would google Troj/Bckdr-QSL and see what that tells you about it ,and it should tell you how to get rid of the Trojan,if you right click where you wrote Troj/Bckdr-QSL on your post ,it will give you the Google option.

Jacee · 25 Mar 2009

Backdoor Trojans .... ZBots, oh my!
ThreatExpert Report: Trojan.Win32.Buzus.arqx, Infostealer.Banker.C, Troj/Bckdr-QSL..

Threat characteristics of ZBot - a banking trojan that disables firewall, steals sensitive financial data (credit card numbers, online banking login details), makes screen snapshots, downloads additional components, and provides a hacker with the remote access to the compromised system.
Creates a startup registry entry.
Contains characteristics of an identified security risk.

As of right now, we don't have any security tools available (by our developers) that will work on Win 7 to take out a ZBot.

I would suggest that you go to a known clean computer and change all your passwords, then reformat and re-install Win 7.

johngalt · 27 Mar 2009

There will shortly, though. Samples are submitted every hour to the MBAM team - and they are *extremely* good about turn-around.

They had new defs up within an hour of my submission for the Bckdr-QSL trojan.

Jacee · 27 Mar 2009

I'm looking forward to that! :)