Troj/Bancd-B is an information stealing Trojan for the Windows platform.
The Trojan monitors browser activity and attempts to steal account details for internet banking sites.
When first run Troj/Bancd-B copies itself to <System>\XPLoogNT.exe.
The following registry entry is created to run XPLoogNT.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Windows Update
<System>\XPLoogNT.exe
Sophos's anti-virus products include Genotype&trade, detection technology, which can proactively protect against new threats without requiring an update. Sophos customers have been protected against Troj/Bancd-B (detected as Troj/Bancd-Fam) since version 3.98.