Troj/Bancban-LH is an internet banking Trojan.
Troj/Bancban-LH includes functionality to send notification messages to remote locations.
When first run Troj/Bancban-LH copies itself to:
<Startup>\Microsoft Office.exe
<System>\Microsoft Office.exe
and creates the file <System>\Netaps.txt which is a log file and may safely be deleted.
The following registry entry is created to run Microsoft Office.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
system
<System>\Microsoft Office.exe