high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Included in our products from | May 2008 (4.29) |
| Protection available since | 2 April 2008 23:34:37 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Banloa-FC is a Trojan for the Windows platform.
Troj/Banloa-FC includes functionality to:
- access the internet and communicate with a remote server via HTTP
- send notification messages to remote locations
When Troj/Banloa-FC is installed the following files are created:
<Windows>\pt.ini
<System>\m.txt
<System>\m2.txt
These files contain email addresses from the user's address book. The files may be deleted.
Troj/Banloa-FC attempts to download a file from a remote location and install it to:
<Windows>\lsass.exe
This file is detected as by Sophos as Mal/DelpBanc-A.
|
