Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | May 2007 (4.17) |
| Protection available since | 9 March 2007 23:57:37 (GMT) |
| Detected by | All Sophos products |
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Banker-EBO is a Trojan for the Windows platform.
When run, Troj/Banker-EBO copies itself as <system>\firefox.exe. The following registry entry is added to hook system startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
firefox.exe
<system>\firefox.exe
Once running Troj/Banker-EBO attempts to connect to a remote server to download other code.
