Threat Database Trojans Trojan-PSW.Banker

Trojan-PSW.Banker

Trojan-PSW.Banker is a sneaky computer threat that hides itself in the registry files of a compromised computer. Trojan-PSW.Banker modifies a computer's settings, making it vulnerable to attackers and giving them access to a victim's sensitive information. Trojan-PSW.Banker may also enable attackers to remotely use an infected machine in malicious botnet activities. To prevent possible Identity theft, remove Trojan-PSW.Banker immediately.

Aliases

6 security vendors flagged this file as malicious.

Anti-Virus Software Detection
- Win32/IRCBot.worm.variant
- Trojan-Spy.Win32.Zbot
- Mal/Behav-353
- Trojan-Spy.Win32.Zbot.gen
- Generic PWS.y!bbb
- PWS:Win32/Zbot.gen!R

File System Details

Trojan-PSW.Banker may create the following file(s):
# File Name Detections
1. %System%\lowsec\user.ds.lll
2. %System%\lowsec\user.ds
3. %System%\lowsec\local.ds

Registry Details

Trojan-PSW.Banker may create the following registry entry or registry entries:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]

Trending

Most Viewed

Loading...