Published Oct 19, 2015 | Updated Sep 15, 2017


Severe |Detected with Windows Defender Antivirus

Aliases: No associated aliases


Windows Defender detects and removes this threat.

This threat can download other malware onto your PC, such as variants of Win32/Zbot, Win32/Vawtrak, Win32/Evotob and Win32/Dyzap.

It can be installed by other malware. We have seen it arrive as an attachment to spam that is distributed by the Win32/Cutwail and Win32/Hedsen family.

See the Win32/Upatre family description for more information.

Use the following free Microsoft software detects and removes this threat:

Even if we've already detected and removed this particular threat, running a full scan might find other malware that are hiding on your PC.

Prevent malware infections from spam emails
Use cloud protection

The Microsoft Active Protection Service (MAPS) uses cloud protection to help guard against the latest malware threats. It’s turned on by default for Microsoft Security Essentials and Windows Defender for Windows 10. 

Get more help

You can also visit our advanced troubleshooting page or search the Microsoft virus and malware community for more help.

If you’re using Windows XP, see our Windows XP end of support page.

Follow us