We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
TrojanSpy:Win32/Banker.SK
Detected by Microsoft Defender Antivirus
Aliases: TR/Agent.Delf.rov.98 (Avira) Trojan.MulDrop2.697 (Dr.Web) TSPY_BANCOS.PDS (Trend Micro)
Summary
TrojanSpy:Win32/Banker.SK is a trojan that deletes security-related files and services including GPPlugin, a component for an online financial security suite.
To detect and remove this threat and other malicious software that may be installed on your computer, run a full-system scan with an appropriate, up-to-date, security solution. The following Microsoft products detect and remove this threat:
For more information on antivirus software, see http://www.microsoft.com/windows/antivirus-partners/.
TrojanSpy:Win32/Banker is a family of trojans that attempt to capture online banking credentials. If you think you have been the victim of this malware and your banking details have been stolen, you can refer to Microsoft's advice on what to do if you are a victim of fraud.
Follow us
