Skip to main content
Published Oct 09, 2014 | Updated Sep 15, 2017


Detected by Microsoft Defender Antivirus

Aliases: Trojan/Win32.Necurs (AhnLab) Win32/Cryptor (AVG) TR/Tracur.A.6170 (Avira) W32/Ransom.PMPQ-5161 (Command) Trojan.Asterope.4 (Dr.Web) Win32/Injector.BNUK trojan variant (ESET) W32/Yakes.GTBU!tr (Fortinet) Worm.Win32.Ngrbot (Ikarus) Trojan.Win32.Yakes.gtbu (Kaspersky) Ransom-FON!18082241DF24 (McAfee) BACKDOOR.Trojan (Symantec) TROJ_SPNR.38JQ14 (Trend Micro)


Windows Defender detects and removes this threat.

This threat can perform a number of actions of a malicious hacker's choice on your PC.

See the Win32/Chroject family description for more information.

Find out ways that malware can get on your PC.

To fully remove this threat you should run a full scan with your security product and then restart your PC.

You can use the following free Microsoft software to detect and remove this threat:

Get more help

You can also visit our advanced troubleshooting page or search the Microsoft virus and malware community for more help.

If you’re using Windows XP, see our Windows XP end of support page.

Follow us