Troj/Bancban-GP is a Trojan for the Windows platform.
Troj/Bancban-GP targets the users of certain Brazilian banking websites with the aim of harvesting account details.
Troj/Bancban-GP includes functionality to send notification messages to remote locations.
When first run Troj/Bancban-GP copies itself to <Windows>\wupdmgr.exe.
The following registry entry is created to run Troj/Bancban-GP on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Windows Update
<Windows>\wupdmgr.exe