high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | July 2007 (4.19) |
| Protection available since | 30 May 2007 11:36:39 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Bancban-QB is an information-stealing Trojan for the Windows platform.
When first run Troj/Bancban-QB copies itself to <Windows>\Media\w7zip.exe and creates the following files:
<Current folder>\Emails.dat
<Current folder>\Emails.txt
<Windows>\lnk_dados_1.dll
Troj/Bancban-QB creates the following registry entry in order to run itself on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
w7zip
<Windows>\Media\w7zip.exe
|
