We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
TrojanDropper:Win32/Prefsap.gen
Detected by Microsoft Defender Antivirus
Aliases: Win32/Prefsap.A (CA) Trojan-Downloader.Win32.Agent.abxj (Kaspersky) Generic PWS.o (McAfee) Win32/Spy.Webmoner.NAV (ESET) Trojan.Win32.Agent.ywy (Kaspersky) Generic Dropper.p (McAfee)
Summary
Win32/Prefsap is a family of trojans that attempts to steal users’ FTP account details and sends this information to a remote server. It has been observed being downloaded by variants of the TrojanDownloader:Win32/Cbeplay family.
Manual removal is not recommended for this threat. Use Microsoft Security Essentials or another up-to-date scanning and removal tool to detect and remove this threat and other unwanted software from your computer. For more information on Microsoft security products, see http://www.microsoft.com/protect/products/computer/default.mspx.
Follow us
