Win32/Sinowal threat description - Microsoft Security Intelligence

Summary

Windows Defender Antivirus detects and removes this threat.

This family of password-stealing and backdoor trojans can steal your sensitive informations, such as your user names and passwords for banking websites.

Find out ways that malware can get on your PC.

Use the following free Microsoft software to detect and remove this threat:

Microsoft Defender Antivirus for Windows 10 and Windows 8.1, or Microsoft Security Essentials for Windows 7 and Windows Vista
Microsoft Safety Scanner
Microsoft Windows Malicious Software Removal Tool

You should also run a full scan. A full scan might find other, hidden malware.

Advanced troubleshooting

To restore your PC, you might need to download and run Windows Defender Offline. See our advanced troubleshooting page for more help.

Protect your sensitive information

This threat tries to steal your sensitive and confidential information. If you think your information has been stolen, see:

What to do if you are a victim of fraud

You should change your passwords after you've removed this threat:

Create strong passwords

Get more help

You can also ask for help from other PC users at the Microsoft virus and malware community.

If you’re using Windows XP, see our Windows XP end of support page.

Win32/Sinowal

Summary

What to do now

Advanced troubleshooting

Protect your sensitive information

Get more help

Technical information

Threat behavior

Prevention

Symptoms