This is a trojan that steals bank-related credentials. It also has keylogging capabilities.
Based on the settings of your F-Secure security product, it will either move the file to the quarantine where it cannot spread or cause harm, or remove it.
This malware drops the following files:
It also installs its component as a Browser Helper Object so that every time that Internet Explorer is running, this malware also runs.
This malware steals bank-related informations as well as passwords. It also has keylogging capability. It checks the sites that the infected user is visiting and compares it to the following bank-related strings:
It can also steal information such as:
Here is a sample log file:
It sends a POST command to the following site to send all the stolen information from the infected machine:
Date Created: 2007-05-30 17:52:36.0
Date Last Modified: 2007-05-30 19:15:24.0