e-gold Trojan Alert
e-gold users beware! There is a trojan in circulation that is allowing a hacker to disable your e-gold security settings and steal your money.
To check if you have the trojan, please follow the steps below.
- Check your computer for two files in the C:\Windows\System 32\ directory named “gdiwxp.dll” and “gdiw2k.sys“
- Check for a program installed in the C:\w directory
- Log onto e-gold.com by manually typing the URL into your browser and click “Access Your Account.” If you are redirected to a “Login Confirmation” screen asking for the touring number, please DO NOT type it in.
If your computer has any of these symptoms, you need to take steps to remove the files immediately. Please DO NOT use your computer at this time to process any sensitive information including passwords, credit card numbers, SSNs, or even confidential documents or e-mails. This trojan has so far only been reported for changing e-gold security settings, but who knows what else it may capable of.
To remove the trojan, download “Security Task Manager” here. The files and/or directory will not delete manually, so use this free application to remove them from your startup registry and then delete them. Most other programs, including North AntiVirus and Lavasoft’s Ad-Aware, will not recognize the files as infectious and will not delete them. For more information on removing the e-gold trojan, please refer to this thread at TechGuy.org forums.
Please feel free to comment with any information you have about this serious matter and I will update accordingly.
Thank you to Chastech over at Trinary’s HYI and Gambling Blog for this warning.
