Troj/Banker-GX is a Trojan for the Windows platform.
When Troj/Banker-GX is installed it creates the file <Windows>\taskimgr.exe.
The following registry entry is created to run taskimgr.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
WallPaper
<Windows>\taskimgr.exe
Registry entries are created under:
HKLM\SOFTWARE\Tchltwo\Validade\