Troj/Bancj-A

Category: Viruses and Spyware
Type: Trojan
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Bancj-A is a password-stealing Trojan for the Windows platform.

Troj/Bancj-A monitors browser activity for visits to specific banking websites. On detecting such activity, the Trojan displays a fake login page and records keystrokes in an attempt to steal login details. Any information stolen in this manner is submitted to the author by email.

When the Trojan is installed it creates the file %SYSTEM%\imgit.txt. This file can be deleted.

The following registry entry is created to run Troj/Bancj-A on startup:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
imgit
<pathname of the Trojan executable>

download Try Sophos products for free
Download now