high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 27 October 2005 04:20:11 (GMT) |
| Last updated | 31 October 2005 22:17:16 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Bancban-GU is a password stealing Trojan targeted at customers of Brazilian banks.
Troj/Bancban-GU attempts to log keypresses entered into certain websites and online banking applications. The Trojan may display fake user interfaces in order to persuade the user to enter confidential details. Stolen information is sent by email to a remote user.
Troj/Bancban-GU copies itself to the Windows system folder and creates the following registry entry:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
dark
<System>\csrs.scr
|
