Backdoor.Ursap!rts

By ESGI Advisor in Backdoors

Threat Scorecard

Threat Level:	60 % (Medium)
Infected Computers:	167

First Seen:	December 1, 2010
Last Seen:	January 17, 2021
OS(es) Affected:	Windows

Backdoor.Ursap!rts is a backdoor Trojan is created to infiltrate into a compromised PC and open a back door for cyber-criminals who aim at stealing computer user's personal information for illegitimate activities. Backdoor.Ursap!rts spreads via existing network vulnerability or security program exploits. Backdoor.Ursap!rts runs in the background and tries to slow down your PC system by consuming a large amount of system resources. Backdoor.Ursap!rts has to removed as quickly as possible.

Table of Contents

Aliases

15 security vendors flagged this file as malicious.

Anti-Virus Software	Detection
AVG	BackDoor.Generic_r.LG
Fortinet	W32/Jorik_Lolbot.AOP!tr
McAfee-GW-Edition	Heuristic.LooksLike.Win32.Suspicious.F
AntiVir	TR/Spy.907776.5
DrWeb	Trojan.DownLoader6.12833
BitDefender	Trojan.Generic.KDV.696237
Kaspersky	Trojan.Win32.Jorik.Lolbot.aop
eSafe	Win32.Fakealert.Sesh
McAfee	Generic BackDoor!fq3
CAT-QuickHeal	Trojan.Jorik.Lolbot.aop
Panda	Trj/OCJ.A
AVG	Generic30.AFJ
Fortinet	W32/VB.BXSP!tr
AhnLab-V3	Dropper/Win32.VB
AntiVir	TR/StartPage.ald.1

SpyHunter Detects & Remove Backdoor.Ursap!rts

File System Details

Backdoor.Ursap!rts may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	jusched.exe	1be65c0597137d85879259696adbd166	59
Name: jusched.exe MD5: 1be65c0597137d85879259696adbd166 Size: 103.42 KB (103424 bytes) Detections: 59 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: December 1, 2010
2.	msnd.exe	d58a327bb21c7d324c1e1a106288bd1b	46
Name: msnd.exe MD5: d58a327bb21c7d324c1e1a106288bd1b Size: 155.64 KB (155648 bytes) Detections: 46 Type: Executable File Path: %PUBLIC% Group: Malware file Last Updated: December 6, 2010
3.	wscntfy.exe	491d9c472a82a92ecbb22470814cec63	16
Name: wscntfy.exe MD5: 491d9c472a82a92ecbb22470814cec63 Size: 40.96 KB (40960 bytes) Detections: 16 Type: Executable File Path: %COMMONPROGRAMFILES%\MSSecurity Group: Malware file Last Updated: June 21, 2011
4.	A-1503314171.exe	90a783bcb202174d96e0dbabba0262c7	5
Name: A-1503314171.exe MD5: 90a783bcb202174d96e0dbabba0262c7 Size: 34.81 KB (34816 bytes) Detections: 5 Type: Executable File Path: %ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Startup Group: Malware file Last Updated: February 6, 2013
5.	msdubmnax.pif	66b2d27683c41b280613e712a8e8da0f	3
Name: msdubmnax.pif MD5: 66b2d27683c41b280613e712a8e8da0f Size: 63.52 KB (63527 bytes) Detections: 3 Path: %ALLUSERSPROFILE%\Local Settings\Temp Group: Malware file Last Updated: October 22, 2012
6.	svchost.exe	e821fd5263c3cbfaefde266704dcd45e	3
Name: svchost.exe MD5: e821fd5263c3cbfaefde266704dcd45e Size: 907.77 KB (907776 bytes) Detections: 3 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: April 10, 2013
7.	A0043668.exe	7cb01fcaa9c7e2edae02e5956c61e54a	3
Name: A0043668.exe MD5: 7cb01fcaa9c7e2edae02e5956c61e54a Size: 48.64 KB (48640 bytes) Detections: 3 Type: Executable File Path: C:\System Volume Information\_restore{D091101E-81B5-4853-B62B-740F89044E0E}\RP122\A0043668.exe Group: Malware file Last Updated: January 17, 2021
8.	winmap.exe	2bcf812ad0a67a869a22784cee68da96	2
Name: winmap.exe MD5: 2bcf812ad0a67a869a22784cee68da96 Size: 208.39 KB (208391 bytes) Detections: 2 Type: Executable File Path: C:\RECYCLER\S-1-5-21-0221221080-0036487367-414311101-0342 Group: Malware file Last Updated: December 8, 2010
9.	scvhosts.exe	7801445b809b932a429f9387853caf81	2
Name: scvhosts.exe MD5: 7801445b809b932a429f9387853caf81 Size: 79.87 KB (79872 bytes) Detections: 2 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: May 8, 2020
10.	o0mf45nj.exe	e2668b12c194c2ed2b02171b02ec0070	2
Name: o0mf45nj.exe MD5: e2668b12c194c2ed2b02171b02ec0070 Size: 103.42 KB (103424 bytes) Detections: 2 Type: Executable File Path: %ALLUSERSPROFILE% Group: Malware file Last Updated: August 16, 2012
11.	CMOInstaller.exe	b23c48472de65d83b2b62619ae084157	2
Name: CMOInstaller.exe MD5: b23c48472de65d83b2b62619ae084157 Size: 14.5 MB (14508841 bytes) Detections: 2 Type: Executable File Path: %USERPROFILE%\My Documents\Downloads2 Group: Malware file Last Updated: March 21, 2013
12.	server.exe	8110abff754d48cee6d666d26c8173c0	1
Name: server.exe MD5: 8110abff754d48cee6d666d26c8173c0 Size: 705.1 KB (705101 bytes) Detections: 1 Type: Executable File Path: %WINDIR%\system32\install Group: Malware file Last Updated: November 19, 2012
13.	memchecker.exe	97ac3b65db258eb4f607a098f7b203a9	1
Name: memchecker.exe MD5: 97ac3b65db258eb4f607a098f7b203a9 Size: 358.4 KB (358400 bytes) Detections: 1 Type: Executable File Path: %APPDATA%\memchecker Group: Malware file Last Updated: February 8, 2011
14.	MediaCatalogMergedDBProvider.exe	0240316967cadee54a6f345fea1d27cf	1
Name: MediaCatalogMergedDBProvider.exe MD5: 0240316967cadee54a6f345fea1d27cf Size: 41.56 KB (41568 bytes) Detections: 1 Type: Executable File Path: %COMMONPROGRAMFILES%\MediaCatalogMergedDB Group: Malware file Last Updated: July 23, 2012
15.	tofitugikloq.exe	e00f89b960bfde2c239c428bcb6bf73f	1
Name: tofitugikloq.exe MD5: e00f89b960bfde2c239c428bcb6bf73f Size: 90.58 KB (90584 bytes) Detections: 1 Type: Executable File Path: %USERPROFILE% Group: Malware file Last Updated: December 3, 2012
16.	DB41.exe	6fd3767ce3f7b1feff120f9157afcde6	1
Name: DB41.exe MD5: 6fd3767ce3f7b1feff120f9157afcde6 Size: 46.59 KB (46592 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Users\<username>\AppData\Roaming Group: Malware file Last Updated: April 8, 2013
17.	wsnKBD.exe	7581b628c7c8de3c632158d505cbb8f5	1
Name: wsnKBD.exe MD5: 7581b628c7c8de3c632158d505cbb8f5 Size: 198.65 KB (198656 bytes) Detections: 1 Type: Executable File Path: %USERPROFILE% Group: Malware file Last Updated: December 17, 2012
18.	jusched.exe
Name: jusched.exe Type: Executable File Group: Malware file

Registry Details

Backdoor.Ursap!rts may create the following registry entry or registry entries:

HKEY..\..\..\..{RegistryKeys}

HKEY_LOCAL_MACHINE\Software\ Backdoor.Ursap!rts

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Backdoor.Ursap!rts

Threat Scorecard

EnigmaSoft Threat Scorecard

Aliases

SpyHunter Detects & Remove Backdoor.Ursap!rts

File System Details

Registry Details

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen