How to remove Bancos Spyware from PC?

In this article, I will inform you about the indications of Bancos spyware presence, and also how to erase Bancos spyware virus from your computer.

GridinSoft Anti-Malware
Editor's choice
GridinSoft Anti-Malware
Manual Bancos removal might be a lengthy and complicated process that requires expert skills. GridinSoft Anti-Malware is a professional antivirus tool that is recommended to get rid of this Bancos spyware trojan.
By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for GridinSoft Anti-Malware. 6 days free trial available.

Describing Bancos spyware

Bancos TrojanSpy as the computer virus is not a separate program, but a component of much more expansive and tricky malware – trojan-stealer. It’s a variety of trojan, which is targeted on your private information, and also accumulates totally every little thing concerning you and also your personal computer. Ordinarily, stealers have keylogger functionalities1, which empower them to gather your keystrokes. Besides that, this virus can gather your cookie files, your mobile number, location; it also can thieve all your passwords from the keychain within the web browser.

Name Bancos
Infection Type Spyware
  • Creates RWX memory;
  • Unconventionial language used in binary resources: Portuguese (Brazilian);
  • Anomalous binary characteristics;
Similar behavior Also, KeyLogger, Omaneat
Fix Tool

See If Your System Has Been Affected by Bancos spyware

However, the large share of Bancos spy are seeking for your banking data: credit card number, security codes as well as expiration date. For instance, if you make use of online banking, the Bancos stealer has the ability to compromise your login and password, so the thugs will definitely get access to your financial account. Different corporate data may also be a thing of interest of Bancos virus distributors, and an instance of huge business such information leak may trigger tragic effects.

Statistics of spyware activity in 2020
TrojanSpy activity in 2020, compared to backdoor viruses activity

The major dispersal ways of Bancos spyware are similar to other trojans. Nowadays, the majority of such programs are dispersed through email attachments. These attachments (. docx,. pdf documents) have contaminated macroses, which are utilized by Bancos spy to infect your computer. Sometimes, such letters have web links to the phishing clones of legit websites, like Facebook, Twitter, LinkedIn or so.

Related Articles
Rating of different spyware activity

Most popular spyware in 20202

It is essential to specify that there is a separate kind of spyware – for Android operating system. Such apps have the same functionalities as the computer edition does, but mobile malware is distributed as an official app for tracking the girlfriend’s or children’s place. Nonetheless, besides swiping different individual information, it can also display you a completely wrong location of the device you are attempting to track. Such scenarios might trigger beefs out of the blue.

How can I understand that my computer is infected with Bancos spyware?

Bancos spy is an incredibly stealth malware, simply because its effectiveness relies on how much time it will operate before being detected. So, Bancos spyware creators made everything to make their application presence as insensible as feasible. Obviously, you will see that your accounts in social networks are swiped, as well as money from your financial account is moving away, however it is too late.

Bancos also known as

MicroWorld-eScan Gen:Variant.Zusy.358067
FireEye Gen:Variant.Zusy.358067
ALYac Gen:Variant.Zusy.358067
Cylance Unsafe
VIPRE Trojan.Win32.Generic!BT
AegisLab Trojan.Win32.Banload.a!c
Sangfor Malware
K7AntiVirus Trojan-Downloader ( 005705e51 )
BitDefender Gen:Variant.Zusy.358067
K7GW Trojan-Downloader ( 005705e51 )
CrowdStrike win/malicious_confidence_100% (W)
BitDefenderTheta Gen:NN.ZelphiF.34804.EGW@am6@mQpG
Cyren W32/Trojan.DCA.gen!Eldorado
Symantec ML.Attribute.HighConfidence
APEX Malicious
Avast Win32:Banker-LDA [Trj]
ClamAV Win.Trojan.Banload-9382
Kaspersky Trojan-Downloader.Win32.Banload.btev
Alibaba TrojanDownloader:Win32/Banload.85e84616
NANO-Antivirus Trojan.Win32.Banload.tmlpy
ViRobot Trojan.Win32.A.Downloader.503296.DN
Rising Downloader.Banload!8.15B (TFE:5:ocWGsQVFBND)
Ad-Aware Gen:Variant.Zusy.358067
Emsisoft Gen:Variant.Zusy.358067 (B)
Comodo TrojWare.Win32.TrojanDownloader.DELF.BUWV@4pji33
F-Secure Trojan.TR/Dldr.Delphi.Gen
Zillya Downloader.Banload.Win32.44643
McAfee-GW-Edition BehavesLike.Win32.Dropper.gh
Sophos Mal/Generic-S + Mal/Generic-L
Jiangmin TrojanDownloader.Banload.azjy
Webroot W32.Malware.Heur
Avira TR/Dldr.Delphi.Gen
MAX malware (ai score=100)
Antiy-AVL Trojan[Downloader]/Win32.Banload
Microsoft TrojanSpy:Win32/Bancos.AFU
Arcabit Trojan.Zusy.D576B3
SUPERAntiSpyware Trojan.Agent/Gen-Banload
ZoneAlarm Trojan-Downloader.Win32.Banload.btev
GData Win32.Trojan.Delf.E
Cynet Malicious (score: 85)
AhnLab-V3 Trojan/Win32.Banload.R29410
McAfee Artemis!FECC6163D0CE
VBA32 TrojanDownloader.Banload
Malwarebytes Malware.AI.4185701797
Panda Generic Malware
Zoner Trojan.Win32.7547
ESET-NOD32 a variant of Win32/TrojanDownloader.Banload.QSG
TrendMicro-HouseCall TSPY_BANKER.SMUB
Tencent Win32.Trojan-downloader.Banload.Eibs
Yandex Trojan.GenAsa!9y9Wbu+rx3A
Ikarus Trojan-Downloader.Banload
eGambit Unsafe.AI_Score_97%
Fortinet W32/Banload.QNT!tr
MaxSecure Trojan.Malware.3772266.susgen
AVG Win32:Banker-LDA [Trj]
Cybereason malicious.3d0ce4
Paloalto generic.ml
Qihoo-360 Win32/Trojan.Downloader.eb4

Domains that associated with Bancos:

Domains that associated with Bancos:

0 ftp.eligomisplus.com

What are the symptoms of Bancos trojan?

  • Creates RWX memory;
  • Unconventionial language used in binary resources: Portuguese (Brazilian);
  • Anomalous binary characteristics;

To avoid infiltration of Bancos spyware, minimize opening any kind of attachments to the emails from unfamiliar addresses. These days, during the course of quarantine, email-distributed malware gets even more active. People (particularly ones that started purchasing everything on online-marketplaces) do not take note to the weird email addresses, and open whatever which reaches their email. And Bancos stealer is right in such messages.

How to remove Bancos spyware?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You can try to do it manually, however, like any other trojan, Bancos TrojanSpy puts into effect the changes pretty deep within the system. Hence, it’s extremely difficult to spot all these changes, and even harder to clean them out. To take care of this unsafe malware totally, I can recommend you to use GridinSoft Anti-Malware.


To detect and erase all unwanted applications on your PC with GridinSoft Anti-Malware, it’s better to use Standard or Full scan. Quick Scan is not able to find all malicious items, because it checks only the most popular registry entries and directories.

Scan types in Gridinsoft Anti-Malware

You can see the detected viruses sorted by their possible hazard till the scan process. But to perform any actions against malware, you need to hold on until the scan is finished, or to stop the scan.

GridinSoft Anti-Malware during the scan

To set the action for each spotted virus or unwanted program, click the arrow in front of the name of detected malicious app. By default, all malware will be moved to quarantine.

List of detected malware after the scan

How to remove Bancos Spyware?

Name: Bancos

Description: Bancos TrojanSpy is classified as a type of malware — malicious software designed to gain access to or damage your computer, often without your knowledge. The Bancos gathers your personal information and relays it to advertisers, data firms, or external users. The Bancos can install additional software and change the security settings on your PC.

Operating System: Windows

Application Category: Spyware

User Review
3.8 (10 votes)
Comments Rating 0 (0 reviews)
  1. What is Spyware: https://en.wikipedia.org/wiki/Spyware
  2. ESET quaterly report: ESET_Threat_Report_Q22020.pdf

William Reddy

I am from Ireland. My parents bought me a computer when I was 11, and several month after I have got a virus on this PC. I decided to enter the INSA Centre Val de Loire university after being graduated from the school. This French educational institution was offering a brand-new cybersecurity course. After getting the master degree in cybersecurity, I've started working in as virus analyst in a little anti-malware vendor. In 2018, I've decided to start Virus Removal project. The main target of this site is to help people to deal with PC viruses of any kind.

Leave a Reply

Your email address will not be published. Required fields are marked *


Back to top button