Troj/Bancban-CW is a Trojan for the Windows platform.
Troj/Bancban-CW steals confidential information relating to certain online banking applications by displaying fake login screens and sends stolen information to a remote user.
Troj/Bancban-CW is a Trojan for the Windows platform.
Troj/Bancban-CW steals confidential information relating to certain online banking applications by displaying fake login screens and sends stolen information to a remote user.
When first run Troj/Bancban-CW copies itself to <System>\lsass.scr.
The following registry entry is created to run lsass.scr on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
<random>
<System>\lsass.scr