Troj/Banker-EWR is a Trojan for the Windows platform.
Troj/Banker-EWR includes functionality to create files in the <System> folder and download, install and run new software.
Troj/Banker-EWR communicates via HTTP with the following locations:
209 . 200 . 117 . 22
globo . com
When Troj/Banker-EWR is installed the following files are created:
<System>\cartao.exe
<System>\cartaof.exe
Registry entries are created under:
HKLM\SOFTWARE\Microsoft\DownloadManager