Bankem.b is a trojan that steals user sensitive information. Once executed, the parasite secretly installs itself to the system and registers as a web browser add-on. Then it contacts a predefined web site, downloads specific instructions and starts monitoring Internet Explorer windows. Bankem.b records everything the user enters on web sites of well-known banks and money services. It also collects system information and logs auto-complete passwords in Internet Explorer. Furthermore, the trojan steals user e-mail account details. All gathered data is secretly transferred to the predetermined web site or FTP server. Bankem.b runs on every Windos startup.