Troj/Bancos-CV is a password-stealing Trojan for the Windows platform.
Troj/Bancos-CV steals confidential information relating to certain online banking applications by displaying fake login screens and sends stolen information to a remote user.
When first run Troj/Bancos-CV copies itself to <Windows folder>\Sernet32.exe.
The following registry entry is created to run Sernet32.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
sern
<Windows folder>\Sernet32.exe