It is designed to steal the banking data of users when they access the website belonging to a certain Portuguese banking entity. It reaches the computer in an email message that contains an attached file with the name COMPROVANTE.

Windows 2003/XP/2000/NT/ME/98/95

Banker.LZK is a Trojan designed to steal the banking details that users enter when they access the website belonging to a certain Portuguese banking entity.

Additionally, it connects to a certain website where it stores several information like the country, name of the network to which the computer belongs and time of the infection.

Banker.LZK does not spread automatically using its own means. It needs an attacking user's intervention in order to reach the affected computer.

Banker.LZK is easy to recognize, as it reaches the computer in en email message which seems to have been sent by a certain banking entity. This message contains an attached file called COMPROVANTE that passes itself off as a text file. However, it is actually an executable file.

The file has the following icon: