Troj/Banker-AHO is a Trojan for the Windows platform.
Troj/Banker-AHO includes functionality to send notification messages to remote locations.
When first run Troj/Banker-AHO copies itself to <Windows>\wupdmgr.exe.
The following registry entry is created to run Troj/Banker-AHO on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Windows Update
<Windows>\wupdmgr.exe
The Trojan steals login credentials from Internet sessions with certain banking sites. Stolen information is sent to a remote user.