Troj/Bankhof-C is a Trojan for the Windows platform.
When Troj/Bankhof-C is installed the following files are created:
<Windows system folder>\rdrlib.dll
<Windows system folder>\vbn.dll
The following registry entry is created to run code exported by OLE Module on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
{190EE07F-D388-410c-A42D-11BD588E10FE}
OLE Module
The following registry entry is set:
HKCU\Software\Classes\CLSID\{190EE07F-D388-410c-A42D-11BD588E10FE}\InProcServer32
(default)
<Windows system folder>\vbn.dll
Registry entries are created under:
HKCU\Software\Classes\CLSID\{190EE07F-D388-410c-A42D-11BD588E10FE}\InProcServer32\