Troj/Banker-HM is a Trojan for the Windows platform.
Troj/Banker-HM includes functionality to send notification messages to remote locations.
When first run Troj/Banker-HM copies itself to <Windows>\csrss.exe.
The following registry entry is created to run Troj/Banker-HM on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Windows Update
<Windows>\csrss.exe
Troj/Banker-HM attempts to log keypresses entered into certain websites and online banking applications. The Trojan may display fake user interfaces in order to persuade the user to enter confidential details. Stolen information is sent by email to a remote user.