Sophos

Troj/Bancd-B

Aliases
  • PWSteal.Banpaes
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Included in our products from January 2006 (4.01)
Protection available since 29 November 2005 06:32:41 (GMT)
Detected by All Sophos products

Action

More Information

Troj/Bancd-B is an information stealing Trojan for the Windows platform.

The Trojan monitors browser activity and attempts to steal account details for internet banking sites.

When first run Troj/Bancd-B copies itself to <System>\XPLoogNT.exe.

The following registry entry is created to run XPLoogNT.exe on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Windows Update
<System>\XPLoogNT.exe

Sophos's anti-virus products include Genotype&trade, detection technology, which can proactively protect against new threats without requiring an update. Sophos customers have been protected against Troj/Bancd-B (detected as Troj/Bancd-Fam) since version 3.98.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer