Troj/Banker-FBZ

Category: Viruses and Spyware Protection available since:26 Nov 2010 05:23:02 (GMT)
Type: Trojan Last Updated:26 Nov 2010 05:23:02 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Examples of Troj/Banker-FBZ include:

Example 1

File Information

Size
2.2M
SHA-1
afcace06d5bfbbd7fb129f18aae6639975f4e6ac
MD5
74b1aaa6663f196d2c2b3ce5e3e85205
CRC-32
e48c5f5f
File type
application/x-ms-dos-executable
First seen
2010-11-26

Other vendor detection

Avira
TR/Spy.Bancos.XR.3

Runtime Analysis

Registry Keys Created
  • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system
    EnableLUA
    0x00000000
  • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    GB_Net_Protect
    C:\GB_Net_Protect.exe

Example 2

File Information

File type
application/x-ms-dos-executable

Runtime Analysis

Dropped Files
  • C:\libmySQL50.dll
  • C:\GB_Net_Protect.exe
    Size
    2.2M
    SHA-1
    afcace06d5bfbbd7fb129f18aae6639975f4e6ac
    MD5
    74b1aaa6663f196d2c2b3ce5e3e85205
    CRC-32
    e48c5f5f
    File type
    application/x-ms-dos-executable
    First seen
    2010-11-26

Example 3

File Information

Size
2.0M
SHA-1
10f15a8bbe02918617de6962db636fdf73fad433
MD5
036cbb9271b543aa0951b0735f00bfda
CRC-32
8a5d8b90
File type
application/x-ms-dos-executable
First seen
2011-01-21