Troj/Banker-BMA is a Trojan for the Windows platform.
Troj/Banker-BMA includes functionality to:
- steal online banking information
- access the internet and communicate with a remote server via HTTP
- send notification messages to remote locations
When Troj/Banker-BMA is installed it creates the file <System>\csrs.txt.
The following registry entry is created to run in an attempt to run itself on startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
boby
<System>\csrs.scr