Home / malware

PDF

Trojan:Win32/Banload.E

First posted on 15 July 2015.
Source: Microsoft

Aliases :

There are no other names known for Trojan:Win32/Banload.E.

Explanation :

Threat behavior

Installation


It can make various registry changes during its installation, including:

In subkey: HKLM\software\classes\typelib\{1ea4dbf0-3c3b-11cf-810c-00aa00389b71}\1.1\0\win32
Sets value: "(default)"
With data: "\oleacc.dll"



Payload


Allows backdoor access and control

This threat can give a malicious hacker access and control of your PC. They can then perform a number of different actions, such as:

• Deleting files
• Downloading and running files
• Logging your keystrokes or stealing your sensitive data
• Modifying your system settings
• Running or stopping applications
• Spreading malware to other PCs
• Uploading files

This malware description was published using automated analysis of file SHA1 161aa7e2b979786a15c4918628f41723f5a691bb.

Symptoms

The following can indicate that you have this threat on your PC:

• You see registry modifications such as:
  
  • In subkey: HKLM\software\classes\typelib\{1ea4dbf0-3c3b-11cf-810c-00aa00389b71}\1.1\0\win32
    Sets value: "(default)"
    With data: "\oleacc.dll"
    
    

Last update 15 July 2015

 

TOP