Troj/Banker-IS is a Trojan for the Windows platform.
When Troj/Banker-IS is installed the following files are created:
<Windows>\MsApps\msinfo\dat\Retorno.txt
<Windows>\modemlog.txt
<Windows>\wplogs.txt
The following registry entry is created to run Troj/Banker-IS on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
msapps32
<pathname of the Trojan executable>