MSNBancos is a trojan that monitors user activity on banking and financial web sites in attempt to steal victim sensitive information such as account login names, passwords and credit card numbers. The parasite is able to spread by sending bogus instant messages to all the contacts in MSN Messenger. Such messages contain links to malicious files that install the trojan. MSNBancos can terminate running antivirus processes. The trojan automatically runs on every Windows startup.
imagens001.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunservices