It is designed to steal users' banking details belonging to a certain Brazilian banking entity. It reaches the computer in an email message which seems to have been sent by such banking entity.

Windows 2003/XP/2000/NT/ME/98/95

Banbra.GII is a Trojan designed to steal users' banking details belonging to a certain Brazilian banking entity. In order to do so, it passes itself off as a legitimate program of such banking entity which offers more security when making Internet banking movements.

Banbra.GII reaches the computer in an email message which seems to have been sent by such Brazilian banking entity.

Banbra.GII is easy to recognize, as it passes itself off as a legitimate program of a certain Brazilian banking entity which asks users to enter certain data regarding their banking account. Once the process is finished, the program window is closed and it seems that nothing else happens.

When it is run, a window is displayed recommending users to install a program which offers more security when making Internet banking movements:



If users decide to install it, the following window indicates that several files are being installed in the computer: