Published May 22, 2011 | Updated Sep 15, 2017


Severe |Detected with Windows Defender Antivirus

Aliases: No associated aliases


PWS:Win32/Sacanph.A is a trojan that steals URL history and user information from certain applications. It also modifies the Hosts file to prevent access to certain websites.

To detect and remove this threat and other malicious software that may be installed on your computer, run a full-system scan with an appropriate, up-to-date, security solution. The following Microsoft products detect and remove this threat:

For more information on antivirus software, see

This malware may make modifications to your Hosts file. To recreate a clean Hosts file, refer to the following article:

Follow us