Troj/Banloa-FC is a Trojan for the Windows platform.
Troj/Banloa-FC includes functionality to:
- access the internet and communicate with a remote server via HTTP
- send notification messages to remote locations
When Troj/Banloa-FC is installed the following files are created:
<Windows>\pt.ini
<System>\m.txt
<System>\m2.txt
These files contain email addresses from the user's address book. The files may be deleted.
Troj/Banloa-FC attempts to download a file from a remote location and install it to:
<Windows>\lsass.exe
This file is detected as by Sophos as Mal/DelpBanc-A.