high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 10 January 2006 11:04:24 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Banker-VF is a Trojan for the Windows platform.
Troj/Banker-VF includes functionality to send notification messages to remote locations.
The Trojan monitors Internet Explorer sessions and attempts to steal credentials entered into login forms on certain financial websites. Collected information is sent to a remote attacker via email or FTP.
When first run Troj/Banker-VF copies itself to <Windows>\Config\svchost.exe.
The following registry entry is changed to run microsoft.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Microsoft Office
<Windows>\Config\microsoft.exe
|
