Troj/Bancos-CU is a password-stealing Trojan for the Windows platform.
Troj/Bancos-CU steals confidential information relating to certain online banking applications by displaying fake login screens and sends stolen information to a remote user.
When first run Troj/Bancos-CU copies itself to <Windows>\Aslru.exe.
The following registry entry is created to run Aslru.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
asl
<Windows>\Aslru.exe