Sophos

Troj/Bancban-MJ

Aliases
  • Trojan-Spy.Win32.Banker.anx
  • PWS-Banker.gen.i
  • trojan
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Included in our products from February 2006 (4.02)
Protection available since 22 December 2005 09:17:15 (GMT)
Detected by All Sophos products

Action

More Information

Troj/Bancban-MJ attempts to log information sent to certain websites and online banking applications. The Trojan may display fake user interfaces in order to persuade the user to enter confidential details. Stolen information is sent by email to a remote user

Troj/Bancban-MJ may also perform the following functions:

- start a Proxy server
- download and execute additional files

The following registry entry is created to run Troj/Bancban-MJ on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
aaprotect
<path to Trojan>

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer