Troj/Bancban-GF is an internet banking Trojan.
When first run Troj/Bancban-GF copies itself to <Windows>\iexplore.exe.
The following registry entry is created to run iexplore.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
cmssapp
<Windows>\iexplore.exe