high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 11 September 2006 20:25:53 (GMT) |
| Last updated | 18 September 2006 19:21:45 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Banker-DLD is a Trojan for the Windows platform.
Troj/Banker-DLD monitors the user's internet access and steals on-line banking details. The Trojan also attempts to block access to anti-virus and security related websites.
When Troj/Banker-DLD is installed the following files are created:
<Windows system folder>\agpbrdg0.dll
<Windows system folder>\agpbrdg5.sys
<Windows system folder>\ksl48.bin
The file agpbrdg5.sys is detected as Troj/Haxdor-Gen.
The following registry entries are created to run code exported by agpbrdg0.dll on startup:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\agpbrdg0
DllName
agpbrdg0.dll
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\agpbrdg0
Startup
agpbrdg0
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\agpbrdg0
Impersonate
1
|
