Threat Database Trojans TrojanSpy:Win32/Banker.AJC

TrojanSpy:Win32/Banker.AJC

By Sumo3000 in Trojans

Threat Scorecard

Threat Level: 80 % (High)
Infected Computers: 13
First Seen: September 13, 2012
Last Seen: January 22, 2020
OS(es) Affected: Windows

TrojanSpy:Win32/Banker.AJC is a Trojan that steals data from the affected PC. TrojanSpy:Win32/Banker.AJC is a DLL component of the Win32/Banker family. TrojanSpy:Win32/Banker.AJC steals online banking credentials such as account login names and passwords, log keystrokes and transfers the collected information to a remote server. Mainly, TrojanSpy:Win32/Banker.AJC affects customers of Brazilian banks. TrojanSpy:Win32/Banker.AJC propagates with the help of other malware infections, often by variations of the Win32/Banload family. TrojanSpy:Win32/Banker.AJC creates its start-up registry entry so that it can launch automatically whenever you boot up Windows. TrojanSpy:Win32/Banker.AJC is installed onto your computer togteher with other files. These files may be configuration files or other variations of the Win32/Banker or Win32/Banload families. If TrojanSpy:Win32/Banker.AJC finds these configuration files on your computer system, it will read and decrypt them. Once decrypted, these other files may also be identified as other PC infections.

File System Details

TrojanSpy:Win32/Banker.AJC may create the following file(s):
# File Name Detections
1. %APPDATA%\drivers\ablxm.dll
2. %APPDATA%\Microsoft\Windows\netsecurity.cpl
3. \netsecurity.cpl
4. %APPDATA%\drivers\rtl2108.rtl
5. %APPDATA%\Microsoft\Windows\kb8532.scr

Trending

Most Viewed

Loading...