Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | May 2005 (3.93) |
| Protection available since | 27 March 2005 04:23:08 (GMT) |
| Detected by | All Sophos products |
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Bancban-BY is a Trojan that attempts to steal banking details for certain Brazilian banks.
Troj/Bancban-BY monitors information entered into banking websites. Stolen information is sent to a remote user by email. The Trojan may display a fake user interface in order to trick the user into entering confidential details.
The Trojan creates the following registry entry in order to run itself on system logon or startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
winreg_32
<path to Trojan>
