Threat Search: 

ThreatExpert's Statistics for Win-Trojan/Banker.1888256.B [AhnLab]:

Win-Trojan/Banker.1888256.B [AhnLab] is also known as:
Threat AliasNumber of Incidents
Mal/Banspy-F [Sophos]4
Trojan-Banker.Win32.Banker.allb [Kaspersky Lab]4
TrojanSpy:Win32/Bancos.OI [Microsoft]4
Infostealer.Bancos [Symantec]2
Trojan-Spy.Banker.GEN [PC Tools]2

Win-Trojan/Banker.1888256.B [AhnLab] has the following possible country of origin:
OriginNumber of Incidents
Brazil2

Win-Trojan/Banker.1888256.B [AhnLab] is known to be created as:
%Temp%\winnt3.exe
Note: %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).