Sophos

Troj/Banker-HM

Aliases
  • Trojan-Spy.Win32.Banker.akn
  • PWSteal.Banpaes
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Protection available since 24 November 2005 02:40:39 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Troj/Banker-HM is a Trojan for the Windows platform.

Troj/Banker-HM includes functionality to send notification messages to remote locations.

When first run Troj/Banker-HM copies itself to <Windows>\csrss.exe.

The following registry entry is created to run Troj/Banker-HM on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Windows Update
<Windows>\csrss.exe

Troj/Banker-HM attempts to log keypresses entered into certain websites and online banking applications. The Trojan may display fake user interfaces in order to persuade the user to enter confidential details. Stolen information is sent by email to a remote user.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer