We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
TrojanSpy:Win32/Banker.JV
Detected by Microsoft Defender Antivirus
Aliases: PWS-Banker.j (McAfee) Troj/BankAsh-A (Sophos) PWSteal.Trojan (Symantec) Win32/PSW.Bancos.163840!Trojan (CA)
Summary
TrojanSpy:Win32/Banker.JV is a Trojan that collects personal information when a user visits certain online banking sites and sends it to a remote server. This Trojan also ends processes associated with Microsoft Windows AntiSpyware (Beta) and prevents the user from accessing certain security Web sites.
To manually recover from infection by TrojanSpy:Win32/Banker.JV follow the recovery instructions for TojanSpy:Win32/Banker.JV.dll. No removal is required for this file because it deletes itself after installing the dll file.