high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | June 2007 (4.18) |
| Protection available since | 21 April 2007 15:34:15 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Bancos-BBU is an internet banking Trojan for the Windows platform.
When run Troj/Bancos-BBU copies itself to <Start Menu>\Programs\Startup\help.scr and <System>\help.scr.
The following registry entry is set to run Troj/Bancos-BBU on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
help
<System>\help.scr
Troj/Bancos-BBU also inserts a scheduled task into the Windows scheduler by creating the file <Windows>\Tasks\startt.job to run itself on startup.
Troj/Bancos-BBU also creates the files:
<Root>\start.bat
<System>\netaps.txt
These files can be safely removed.
|
