Though all kinds of malware are bad, but the nastiest of all are the banking trojans like SpyEye, Zeus etc. They infect your system and steal your banking account information when you try to carry out banking transactions online. This information is transferred to cyber criminals who use your banking credentials to wipe out your bank account and transfer funds to other difficult-to-trace countries. FitSec has developed a tool called DeBank using which you can find out if your system is infected with five major banking trojans – Zeus, SpyEye, Carberp, Gozi and Patcher and all their variants. Here is how :
- Download DeBank from http://www.fitsec.com/tools/DeBank.exe and save it to your Windows desktop.
- In Windows Vista and 7, right-click on DeBank.exe and choose Run as administrator. If you are using Windows XP, you can just double-click on DeBank.exe to run it but you should be logged in using an administrator level account.
- DeBank would start scanning the processes running in your system for the presence of any banking trojans it can detect. DeBank is different from traditional scanners as it does not scan for file signatures but for malware patterns in the memory of the running processes. If DeBank does not find any banking trojans code in the memory, it would show a message that no malicious code has been detected in the memory. Please note that DeBank only scans for five major banking trojan families and if DeBank does not find anything, it does not mean that your system is clean. For complete scan of your system, you should scan your system with free online scanners shown by DeBank.
- If any signs are detected in the memory of the running processes on your system, it will report the malware name and the affected process name. In the following picture, DeBank has detected SpyEye in many processes indicating that system is infected with the SpyEye banking trojan.
If DeBank reports any of these banking trojans on your computer, you should not use that computer for carrying out any financial transactions like logging on to your bank account, making credit card payments etc. You should immediately scan your computer with a good free anti-virus scanner like ESET Online Scanner, Malwarebytes Anti-Malware or some others listed by the DeBank program itself. Looking at the kind of trojan families DeBank is designed to scan, I advise that you consult a malware removal expert.
You should note that DeBank is just a quick scanner to find out if your system is infected by one of these banking trojans; it does not scan for all kinds of malware and it does not clean any found infections. Also worth nothing is that DeBank only detects worst kinds of trojans – so if detects anything, take it very very seriously. If it finds some malicious program on your computer, you can try cleaning your computer with aforementioned anti-virus programs but I suggest that you take your computer to professionals.