Troj/Banspy-F is a .net application that steals personal information from Brazilian banking sites.
Troj/Banspy-F will install itself at the following registry location so that it autoruns at startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run