We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
VirTool:WinNT/Vanti.gen!A
Detected by Microsoft Defender Antivirus
Aliases: Rootkit.Win32.Vanti.df (Kaspersky) Mal/RootKit-A (Sophos) VAnti.sys (McAfee) Trojan.Packed.NsAnti (Symantec) Win32/Vanti!generic (CA)
Summary
VirTool:Win32/Vanti.gen!A is Microsoft's detection for a packer often used by certain trojan password stealers and rootkits.
Manual removal is not recommended for this threat. Use Microsoft Security Essentials or another up-to-date scanning and removal tool to detect and remove this threat and other unwanted software from your computer. For more information on Microsoft security products, see http://www.microsoft.com/protect/products/computer/default.mspx.
Follow us
