Home Malware Programs Trojans MSNBancos

MSNBancos

Posted: March 28, 2006

MSNBancos is a trojan that monitors user activity on banking and financial web sites in attempt to steal victim sensitive information such as account login names, passwords and credit card numbers. The spyware is able to spread by sending bogus instant messages to all the contacts in MSN Messenger. Such messages contain links to malicious files that install the trojan. MSNBancos can terminate running antivirus processes. The trojan automatically runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 el.dll
    2 imagens001.exe
    3 sent.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunservices
Loading...