Troj/Banker-EHB is a Trojan for the Windows platform.
Troj/Banker-EHB includes functionality to send notification messages to remote locations.
When first run Troj/Banker-EHB copies itself to:
<Startup>\AntiVirus.exe
<System>\Visualizador_Imagem.exe
The following registry entry is set:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
AntiVirus
<Startup>\AntiVirus.exe