Threat Database Trojans Trojan.Spy.Ursnif.GT

Trojan.Spy.Ursnif.GT

By CagedTech in Trojans
Published:
Last updated:

Threat Scorecard

Threat Level: 80 % (High)
Infected Computers: 459
First Seen: December 7, 2012
Last Seen: June 24, 2023
OS(es) Affected: Windows

The detection of Trojan.Spy.Ursnif.GT on your system indicates a potential security threat. This detection name suggests that the malware may be related to spyware, which is designed to gather sensitive information from infected computers. In this report, we will provide general guidance on what this detection means, how it operates, and the steps you can take to remove it from your system.

What Is Trojan.Spy.Ursnif.GT?

Trojan.Spy.Ursnif.GT is a type of malware that is designed to spy on infected computers and gather sensitive information. The exact nature and capabilities of this specific malware are not known, but it is likely that it is designed to steal personal data, such as login credentials, credit card numbers, and other sensitive information. Malware like this can be spread through various means, including infected software downloads, phishing emails, and exploited vulnerabilities.

How Trojan.Spy.Ursnif.GT Operates

Malware like Trojan.Spy.Ursnif.GT typically operates by installing itself on a victim's computer and then communicating with its command and control servers to receive instructions and send stolen data. It may also attempt to evade detection by using various techniques, such as code obfuscation and anti-debugging methods. Once installed, the malware may monitor the victim's activity, such as keystrokes, browsing history, and other sensitive information, and transmit this data back to its creators.

Symptoms of Infection

There are several symptoms that may indicate that your computer is infected with Trojan.Spy.Ursnif.GT or similar malware. These can include slow system performance, unusual network activity, and suspicious pop-ups or ads. You may also notice that your browser is being redirected to unwanted websites or that your search results are being hijacked. In some cases, the malware may also cause system crashes or freezes.

  • Unexplained changes to your system settings or configuration
  • Appearance of unknown or suspicious programs or files
  • Increased CPU usage or disk activity
  • Difficulty accessing certain websites or online services

How to Remove Trojan.Spy.Ursnif.GT

  1. Boot your computer in Safe Mode with Networking to prevent the malware from loading and to allow you to download and install removal tools.
  2. Perform a full scan of your system using a reputable anti-malware tool, such as SpyHunter, to detect and remove the malware.
  3. Uninstall any suspicious programs or applications that you do not recognize or that were installed without your knowledge.
  4. Reset your web browsers, including Chrome, Firefox, and Edge, to their default settings to remove any malicious extensions or add-ons.
  5. Reboot your computer and perform another full scan to ensure that the malware has been completely removed.

Conclusion

Removing Trojan.Spy.Ursnif.GT from your system requires careful attention to detail and a thorough understanding of the malware removal process. By following the steps outlined in this report, you can help to ensure that your system is clean and free of malware. It is also important to take steps to prevent future infections, such as keeping your operating system and software up to date, using strong antivirus software, and being cautious when clicking on links or downloading attachments from unknown sources.

Aliases

15 security vendors flagged this file as malicious.

Antivirus Vendor Detection
Fortinet W32/FakeAlert.CN!tr
BitDefender Gen:Variant.Kazy.21593
NOD32 a variant of Win32/Kryptik.NGH
Fortinet W32/Poison.FCOL!tr.bdr
AhnLab-V3 Backdoor/Win32.Poison
McAfee-GW-Edition Heuristic.LooksLike.Win32.Suspicious.F!83
TrendMicro PAK_Generic.001
AntiVir TR/Agent.53248.26
Sophos Troj/Agent-ZEV
Kaspersky Backdoor.Win32.Poison.fcol
McAfee Trojan-FAQI!47BB3E2A1564
Fortinet W32/Vilsel.HZU!tr
McAfee-GW-Edition Heuristic.LooksLike.Win32.SuspiciousPE.F
Comodo TrojWare.Win32.Vilsel.hzu
Sophos Sus/ComPack

SpyHunter Detects & Remove Trojan.Spy.Ursnif.GT

File System Details

Trojan.Spy.Ursnif.GT may create the following file(s):
# File Name MD5 Detections
1. taskhost.rs fba97c4783551c68c6c72cc9581d0276 87
2. CCPClient.exe 8e28f442113eb6047010ed3274abc64d 86
3. dlbwy.dll 7d1c3164a6235fd417f28673703c4e7f 30
4. A0001183.exe f7745cd85f851448f19274aef0895715 25
5. wsearch.exe f5b7c53d66ed8a09126e212410f44070 25
6. session.exe 260f97d7e163846c14277671a01bef3a 22
7. PlayerPlusX.exe 2a9b5173a7eab753989ec537e2d7b7b5 15
8. YOUTUBE.PLAYER.exe 47bb3e2a156452c1088b65be3bc61046 11
9. adobeupdater.exe 9dd1bd4a805fe4e6dd04f66a4a64e5b9 3
10. qzgnqgei.exe 8793a11cacc74dd3857532a97d898bc5 2
11. zdcvctrk.exe edbd4bac79426ccf660092d5e8c4fa91 2
12. SiteClicker2.exe 6c4193a9afc872f894f4c96be1c922cc 2
13. swoom.exe 9da8f8e3c6121f24eeaead296916e46e 2
14. nku.exe 38ce20abe6c11812044c95f83af72e3b 1
15. findtray.dll 3e8d4d10f520819894a4bedb6c664bf3 1
16. 139bfe1a.dll 0cc5cfc70d85e2fb007e2584c72bf6c6 1