Threat Database Trojans Trojan:Win32/Urausy.C

Trojan:Win32/Urausy.C

By ZulaZuza in Trojans

Trojan:Win32/Urausy.C is a ransomware Trojan that is included in an online scam known as ransomware. Trojan:Win32/Urausy.C blocks the corrupted PC and shows a bogus pop-up image/alert by covering the full screen of the infected computer. The phony notification delivered by Trojan:Win32/Urausy.C supposedly comes from the Federal Bureau of Investigation - United States Department of Justice; the FBI. The scary warning message of Trojan:Win32/Urausy.C blames PC users for illicit online activities and asks victims to pay a ransom to restore access to the computer and avoid arrest. Trojan:Win32/Urausy.C may make modifications to the compromised PC that make it hard for computer users to download, install, launch, or update security programs. Trojan:Win32/Urausy.C may be installed on the affected computer system by other malware infections or via drive-by downloads from a hijacked website. Trojan:Win32/Urausy.C downloads infected files on the victimized PC. Trojan:Win32/Urausy.C modifies the registry entry so that it can load its copy whenever you start Windows.

SpyHunter Detects & Remove Trojan:Win32/Urausy.C

File System Details

Trojan:Win32/Urausy.C may create the following file(s):
# File Name MD5 Detections
1. skype.ini
2. skype.dat
3. 4447d962f93a4bb6c49062f05ccccba9 4447d962f93a4bb6c49062f05ccccba9 0
4. 3d58ebdabf762d81701805ba0f361c2f 3d58ebdabf762d81701805ba0f361c2f 0
5. f0581c508f752b0ae3ce683d0e6a7282 f0581c508f752b0ae3ce683d0e6a7282 0
6. 3e909142ab6cf27628b9561debb0fccd 3e909142ab6cf27628b9561debb0fccd 0

Registry Details

Trojan:Win32/Urausy.C may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon "Shell" = "explorer.exe,%AppData%\skype.dat"

Trending

Most Viewed

Loading...