Troj/Bancos-BBU is an internet banking Trojan for the Windows platform.
When run Troj/Bancos-BBU copies itself to <Start Menu>\Programs\Startup\help.scr and <System>\help.scr.
The following registry entry is set to run Troj/Bancos-BBU on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
help
<System>\help.scr
Troj/Bancos-BBU also inserts a scheduled task into the Windows scheduler by creating the file <Windows>\Tasks\startt.job to run itself on startup.
Troj/Bancos-BBU also creates the files:
<Root>\start.bat
<System>\netaps.txt
These files can be safely removed.