high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | December 2005 (4.00) |
| Protection available since | 1 November 2005 15:28:44 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Bancban-HB is a password stealing Trojan targeted at customers of Brazilian banks.
Troj/Bancban-HB attempts to log keypresses entered into certain websites and online banking applications. The Trojan may display fake user interfaces in order to persuade the user to enter confidential details. Stolen information is sent by email to a remote user.
When first run Troj/Bancban-HB copies itself to <Windows>\wupdmgr.exe.
The following registry entry is created to run Troj/Bancban-HB on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Windows Update
<Windows>\wupdmgr.exe
|
