Troj/Bank-Y is a Trojan for the Windows platform.
Troj/Bank-Y includes functionality to:
- run automatically
- steal confidential information
- access the internet and communicate with a remote server via HTTP
When Troj/Bank-Y is installed it creates the file <Windows>\javawsa.exe.
The following registry entry is created to run javawsa.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
javawsa.exe
<Windows>\javawsa.exe