Troj/Banker-EUQ

Category: Viruses and SpywareProtection available since:20 Oct 2009 05:48:47 (GMT)
Type: TrojanLast Updated:20 Oct 2009 05:48:47 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Banker-EUQ is a Trojan for the Windows platform.

Troj/Banker-EUQ includes functionality to access the internet and communicate with a remote server via HTTP.

When first run Troj/Banker-EUQ copies itself to
<SystemRoot>\system32\drivers\microsoft.exe

and creates the following files:

<System>infec.ini
<Program Files>systemsph.ini

Troj/Banker-EUQ sets the following registry entries to run itself on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
"Internet_Explorer"
"<SystemRoot>\\system32\\drivers\\microsoft.exe"