Sophos

Troj/Banker-DS

Aliases
  • Trojan-Spy.Win32.Bancos.dq
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Protection available since 30 June 2005 21:04:46 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Troj/Banker-DS is a password-stealing Trojan targeted at users of Brazilian online banks.

Troj/Banker-DS attempts to log keypresses entered into certain online banking applications. The Trojan may display fake user interfaces in order to trick the user to enter confidential details. Stolen information is sent by email to a remote user.

Troj/Banker-DS creates the following registry entry in order to run automatically on computer logon:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
WinXP-98
C:\Arquivos de programas\WinXP-98\Tools\CSRSS.exe

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer