We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Trojan:Win32/Wysotot.C
Aliases: Trojan.Win32.Staser.tgg (Kaspersky) Bloodhound.MalPE (Symantec) Win32/ELEX.M (ESET) Trojan.Win32.Staser.fv (Kaspersky) Adware.Baidu.4781 (Dr.Web) Trojan.Win32.Staser.fv (Kaspersky)
Summary
Windows Defender detects and removes this threat.
This trojan can download other malware, including Trojan:Win32/Wysotot.A or Trojan:Win32/Wysotot.B. These threats can change your browser home page.
It is installed on your PC by software bundlers that advertise free software or games.
This trojan might create an uninstaller that can be accessed from the Control Panel. We have seen this uninstaller remove the files related to Trojan:Win32/Wysotot.C:
- For Windows 8, open the Start screen, type Uninstall and then go to Settings. In the search results, go to Uninstall a program.
- For Windows 7 and Vista, open the Start menu and navigate to Control Panel then Programs and then Uninstall a Program.
- For XP, open the Start menu and navigate to Control Panel then Add or Remove Programs.
- Choose the program you want to remove, and then click or tap Uninstall or Uninstall/Change and follow the prompts.
The entry for this program may be called "Wsys Control <version number>, "DProtect Control <version number>" or "eSafe Security Control <version number>".
If an uninstaller is not available, does not work properly, or you do not want to use it, you can use the following free tools to detect and remove this trojan and other malware from your PC:
Even if we've already detected and removed this particular threat, running a full scan might find other malware that is hiding on your PC.
You can also visit the Microsoft virus and malware community for more help.