We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
TrojanSpy:Win32/Banker.ANS
Aliases: Trojan-Dropper.Win32.Dapato.eybf (Kaspersky) Troj/Agent-ALPW (Sophos)
Summary
Windows Defender detects and removes this threat.
This threat is a member of the Win32/Banker family of data-stealing trojans. It can steal your online banking user names and passwords and send them to a malicious hacker.
They mostly target Brazilian bank customers.
Use the following free Microsoft software to detect and remove this threat:
- Microsoft Defender Antivirus for Windows 10 and Windows 8.1, or Microsoft Security Essentials for Windows 7 and Windows Vista
- Microsoft Safety Scanner
- Microsoft Windows Malicious Software Removal Tool
You should also run a full scan. A full scan might find hidden malware.
Change passwords
This threat tries to steal your sensitive and confidential information. If you think your information has been stolen, see:
You should change your passwords after you've removed this threat:
Get more help
You can also see our advanced troubleshooting page for more help.
If you’re using Windows XP, see our Windows XP end of support page.
