Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | May 2005 (3.93) |
| Protection available since | 26 March 2005 16:14:32 (GMT) |
| Detected by | All Sophos products |
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Bancban-BX is a Trojan that attempts to steal banking details, in particular those for accounts related to Banco Do Brasil.
Troj/Bancban-BX monitors information entered into banking websites. Stolen information is sent to a remote user by email.
When first run, the Trojan copies itself to the Windows system folder as SVCHOST.SCR and creates the following registry entry in order to run itself on system logon or startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
c
<Windows system>\svchost.scr
