high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 16 August 2005 15:26:12 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Bancban-EK is a Banking Trojan for the Windows platform.
Troj/Bancban-EK includes functionality to send notification messages to remote locations.
Troj/Bancban-EK attempts to log keypresses entered into certain websites and online banking applications. The Trojan may display fake user interfaces in order to persuade the user to enter confidential details.
When first run Troj/Bancban-EK copies itself to <Windows>\svchosts.exe.
The following registry entry is created to run svchosts.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
svchosts
<Windows>\svchosts.exe
Troj/Bancban-EK is known to be dropped by Troj/Mdrop-Y.
|
