We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Trojan:DOS/Bancos.A
Aliases: TR/Bancos.A.3 (Avira) TROJ_BURG.BT (Trend Micro) Trojan.Boot.Burg (Ikarus) Trojan.Boot.Burg.a (Kaspersky) Win32/TrojanDownloader.Banload.RGF (ESET)
Summary
Trojan:DOS/Bancos.A is a trojan that disables Microsoft antivirus and banking security software. It is a component of the Win32/Bancos family of information-stealing trojans.
The trojan disables security software to allow other Win32/Bancos components to more easily infect your computer and steal your information.
The following free Microsoft software detects and removes this threat:
- Microsoft Security Essentials or, for Windows 8, Windows Defender
- Microsoft Safety Scanner
- Microsoft Windows Malicious Software Removal Tool
However, in some cases you may need to use the free tool Windows Defender Offline to fully clean your PC:
The following articles may help if you're having trouble getting the tool to work:
- Windows Defender Offline: frequently asked questions
- Microsoft's Free Security Tools - Windows Defender Offline
After you've used Windows Defender Offline, you should make sure your security software is up to date and run a full scan:
Even if we've already detected and removed this particular threat, running a full scan might find other malware that is hiding on your PC.
You can also visit the Microsoft virus and malware community for more help.
This threat tries to steal your sensitive and confidential information. If you think your information has been stolen, see:
You should change your passwords after you've removed this threat:
