Troj/Banker-CC is a password stealing Trojan for the Windows platform.
Troj/Banker-CC copies itself to the Windows system folder as svchost.scr and creates the following registry entry using the name of the file when executed to ensure it is run at system logon:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
<filename>
%SYSTEM%\svchost.scr
Troj/Banker-CC monitors which URLs are visited by the web browser and creates fake web pages for certain Brazilian banking sites in order to log account information. The logged information is sent to remote users via email.