David H. Lipman wrote:

>Close, but different family variant.
>
>Terry posted "PSW.Banker3.jpx" and the McAfee article was cross-referenced to
>"PSW.Banker3.IGM"
>
>.igm <> .jpx they are different variants in the same family and thus specifics such as
>Registry entries are most likely different as well.

So it is... rest of the advice is still valid, though. ;-)


Any ideas for what the igm and jpx suffixes are meant to convey?


I did find this pearl on the AVG forums (although it refers to the PSW
Generic 3 XQT variant.)

"Well.. that is probably because its part of a spyware that you had
picked up... as the name implies... its a Generic Password Stealing
type of trojan... these are so common and there are so many variants
that more info isn't available"
http://forum.grisoft.cz/freeforum/re...,backpage=,sv=

The advice rdsok gives is valid, also... :-)