Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 20 September 2005 12:48:24 (GMT) |
| Last updated | 17 October 2005 08:50:04 (GMT) |
| Detected by | All Sophos products |
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Bancban-FH is a Trojan for the Windows platform.
Troj/Bancban-FH attempts to log keypresses entered into certain websites and online banking applications. The Trojan may display fake user interfaces in order to persuade the user to enter confidential details. Stolen information is sent by email to a remote user.
Troj/Bancban-FH includes functionality to access the internet and communicate with a remote server via HTTP.
When Troj/Bancban-FH is installed it creates the file <System>\imgrt.txt.
Troj/Bancban-FH creates the following registry entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
dark
"C:\WINDOWS\System32\imgrt.scr"
