Sophos

Sophos blogs

Troj/Banker-EEJ

Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Protection available since 5 April 2007 23:56:31 (GMT)
Last updated 13 April 2007 18:38:32 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Troj/Banker-EEJ is a banking Trojan for the Windows platform.

When Troj/Banker-EEJ is installed the following files are created:

<System>\helper.xml
<System>\mac.dll

The file helper.xml is non-malicious as an individual file as so can be deleted manually.

The file mac.dll is also detected as Troj/Banker-EEJ.

The file mac.dll is registered as a COM object and Browser Helper Object (BHO) for Microsoft Internet Explorer, creating registry entries under:

HKCR\CLSID\{33161E98-0A6C-4d3c-BD62-3A7D56137F52}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{33161E98-0A6C-4d3c-BD62-3A7D56137F52}

Registry entries are created under:

HKLM\SOFTWARE\Helper

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer