Threat Database Trojans Trojan.Spy.Ursnif.gen!I

Trojan.Spy.Ursnif.gen!I

By CagedTech in Trojans
Published:
Last updated:

Threat Scorecard

Threat Level: 80 % (High)
Infected Computers: 199
First Seen: November 30, 2010
OS(es) Affected: Windows

The detection of Trojan.Spy.Ursnif.gen!I on your system indicates a potential security threat. This detection name suggests that the malware is a type of spyware, which is designed to gather sensitive information from the infected system without the user's knowledge or consent. It is essential to take immediate action to remove the malware and prevent further damage.

What Is Trojan.Spy.Ursnif.gen!I?

Trojan.Spy.Ursnif.gen!I is a type of malware that is designed to spy on the infected system and gather sensitive information. The exact nature and capabilities of this malware are not fully understood, but it is believed to be a type of trojan horse, which is a malicious program that disguises itself as a legitimate application. The "gen" suffix in the detection name suggests that it is a generic detection, which means that the malware may not have been specifically identified, but its behavior and characteristics are consistent with those of a known malware family.

How Trojan.Spy.Ursnif.gen!I Operates

Malware like Trojan.Spy.Ursnif.gen!I typically operates by exploiting vulnerabilities in the system or by using social engineering tactics to trick the user into installing it. Once installed, the malware can gather sensitive information such as login credentials, credit card numbers, and other personal data. It can also install additional malware, modify system settings, and disrupt system performance. The malware may communicate with its command and control servers to transmit the gathered information and receive further instructions.

Symptoms of Infection

The symptoms of infection with Trojan.Spy.Ursnif.gen!I may not be immediately apparent, but some common signs include slow system performance, unexpected pop-ups and advertisements, and unusual network activity. The malware may also cause system crashes, freezes, and other stability issues. In some cases, the malware may also intercept and modify sensitive information, such as login credentials and credit card numbers, which can lead to identity theft and financial loss.

How to Remove Trojan.Spy.Ursnif.gen!I

  1. Boot your system in Safe Mode with Networking to prevent the malware from loading and to allow for easier removal.
  2. Use a reputable anti-malware tool, such as SpyHunter, to perform a full scan of your system and detect and remove the malware.
  3. Uninstall any suspicious programs or applications that may be related to the malware.
  4. Reset your web browsers, such as Chrome, Firefox, and Edge, to their default settings to remove any malicious extensions or add-ons.
  5. Reboot your system and perform another full scan with the anti-malware tool to ensure that the malware has been completely removed.

Conclusion

The removal of Trojan.Spy.Ursnif.gen!I requires immediate attention to prevent further damage and protect sensitive information. By following the steps outlined above, you can remove the malware and restore your system to a safe and secure state. It is essential to remain vigilant and take proactive measures to prevent future infections, such as keeping your operating system and software up to date, using strong antivirus protection, and avoiding suspicious downloads and email attachments. Remember to always prioritize your system's security and take prompt action if you suspect any malicious activity.

Aliases

15 security vendors flagged this file as malicious.

Antivirus Vendor Detection
AVG BackDoor.Generic13.COS
Fortinet W32/Papras.AAH!tr.bdr
AntiVir TR/Kryptik.HB.1
F-Secure Packed:W32/MPack.A
Sophos Troj/Papras-B
BitDefender Backdoor.Generic.448605
Kaspersky Backdoor.Win32.Papras.sb
Avast Win32:Papras-T [Trj]
F-Prot W32/Agent.IV.gen!Eldorado
McAfee PWS-Ursnif
CAT-QuickHeal Backdoor.Papras.sb
AVG PSW.Generic7.CDKG
AhnLab-V3 Packed/Win32.Krap
a-squared Trojan.Win32.FakeAV!IK
McAfee-GW-Edition Artemis!7F404D0B6A9F

File System Details

Trojan.Spy.Ursnif.gen!I may create the following file(s):
# File Name MD5 Detections
1. conttend.dll 4df01c05c1a1eabaf102a7eebc59c8e0 131
2. ipcowdev.dll 1cc37235443940c812ce3cfcc528c8ae 9
3. dvduecab.dll 634ac509a84e01243132201de594d5bf 8
4. rundInit.dll e0811787713a01992791b8df4871d3b6 7
5. psrgmp2.dll de42fe90d876896d51aadccfd01fe4b5 7
6. atutil.dll 1d72714fe1e71ff5971d7064ba94309d 6
7. ntos_isv.dll b57317cf19882c34bdbcc640590a663f 5
8. consepad.dll 7ead82cf71b974afc5a538cf6e7ea2b7 3
9. atibTSON.dll 7f404d0b6a9f89258f63c2069deef327 2
10. djoitvdm.dll 1e5872273aee3634f293fea28eb95a78 2
11. bootview.dll 983f1a42b14f2d2a4a07b9c788217687 1
12. bthuasks.dll 36e31176a2cc30a8bcd8dc0d30d9a45d 1
13. regeperf.dll 97a6c8e3e63b071b867fc3738c3310a8 1
14. chkdonfg.dll 76967ca0ae42c2fa59c2193c726cb618 1
15. grpcjava.dll 9ef758df2cc2fa4ce3b6d4cb4a18657c 1
16. attrrver.dll 7dffecd27196ce79db0d4599d437eb8d 1
17. ACWover.dll e07f466c8e72d9b35a82b6c12f0c424e 1
18. icsuasrv.dll ff09aa9c6ea5e8dfb3c475a90708d531 1
19. Dismexnt.dll d5db54ed73ad084aab84e1d2b948197c 1
20. contrint.dll 9160f6ecf2c6247e88be749144106feb 1
21. poqediag.dll da75d9106f1447685ac39b8b051027d8 1
22. netbplUI.dll 850e70414e6fc2d78b235046d766c1f1 1
23. ciphcher.dll a7d2fd9c68e6a6688745687e3c250044 1
24. ieUnated.dll 326a02f44b69fe71e0d8524d7ad809ed 1
25. dfrglder.dll 0092c3a7513a0b3be44188ea051ad3aa 1
26. colohost.dll b0a50654301b34ae66d1c949be5a38f4 1