We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
TrojanSpy:Win32/Bancos.ADL
Aliases: PSW.Banker6.HKR (AVG) Win32/Qhost.Banker.KC trojan (ESET) Trojan.Win32.Jorik (Ikarus) Trojan.Win32.Jorik.Banker.jy (Kaspersky) PWS-Banker!gz3 (McAfee) TROJ_JORIK.AII (Trend Micro)
Summary
TrojanSpy:Win32/Bancos.ADL is a trojan that attempts to steal login information for various banking websites.
To detect and remove this threat and other malicious software that may be installed on your computer, run a full-system scan with an appropriate, up-to-date, security solution. The following Microsoft products detect and remove this threat:
- Microsoft Security Essentials
- Microsoft Safety Scanner
- Microsoft Windows Malicious Software Removal Tool
For more information on antivirus software, see http://www.microsoft.com/windows/antivirus-partners/.
This threat may replace the contents of your Hosts file. To restore your Hosts file, please follow the instructions in the following article:
- Recreating a clean Hosts file: http://support.microsoft.com/kb/972034
