Troj/Bancban-QB is an information-stealing Trojan for the Windows platform.
When first run Troj/Bancban-QB copies itself to <Windows>\Media\w7zip.exe and creates the following files:
<Current folder>\Emails.dat
<Current folder>\Emails.txt
<Windows>\lnk_dados_1.dll
Troj/Bancban-QB creates the following registry entry in order to run itself on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
w7zip
<Windows>\Media\w7zip.exe