TrojanSpy:Win64/Ursnif.AE
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Popularity Rank: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Threat Level: | 80 % (High) |
| Infected Computers: | 4 |
| First Seen: | February 22, 2013 |
| OS(es) Affected: | Windows |
The detection of TrojanSpy:Win64/Ursnif.AE on your system indicates a potential threat to your privacy and security. This detection name suggests that the malware is a type of spyware, designed to gather sensitive information from infected computers. It is essential to understand the nature of this threat and take immediate action to remove it and prevent further damage.
Table of Contents
What Is TrojanSpy:Win64/Ursnif.AE?
TrojanSpy:Win64/Ursnif.AE is a type of malware that is designed to spy on infected computers, gathering sensitive information such as login credentials, browsing history, and other personal data. The exact capabilities and intentions of this specific malware are not known, but its classification as a spyware suggests that it is designed to steal sensitive information. It is crucial to remove this malware as soon as possible to prevent further damage and protect your personal data.
How TrojanSpy:Win64/Ursnif.AE Operates
Malware like TrojanSpy:Win64/Ursnif.AE typically operates by exploiting vulnerabilities in software or tricking users into installing it. Once installed, it can run in the background, gathering information and sending it back to its creators. It may also install additional malware or create backdoors to allow remote access to the infected computer. The exact methods used by this malware are not known, but it is likely to use common spyware tactics to evade detection and gather sensitive information.
Symptoms of Infection
The symptoms of a TrojanSpy:Win64/Ursnif.AE infection can vary, but common signs include slow computer performance, unexpected pop-ups or ads, and unfamiliar programs or icons on your desktop. You may also notice that your browser settings have changed or that you are being redirected to unfamiliar websites. In some cases, the malware may not display any obvious symptoms, making it difficult to detect without the use of anti-malware software.
How to Remove TrojanSpy:Win64/Ursnif.AE
- Boot your computer in Safe Mode with Networking to prevent the malware from loading and to allow you to download and install anti-malware software.
- Perform a full scan of your computer using a reputable anti-malware tool, such as SpyHunter, to detect and remove the malware.
- Uninstall any suspicious programs or applications that you do not recognize or that were installed without your knowledge.
- Reset your web browsers, including Chrome, Firefox, and Edge, to their default settings to remove any malicious extensions or add-ons.
- Reboot your computer and perform another full scan to ensure that the malware has been completely removed.
Conclusion
Removing TrojanSpy:Win64/Ursnif.AE from your computer requires immediate attention to prevent further damage and protect your personal data. By following the steps outlined above and using reputable anti-malware software, you can help ensure that your computer is clean and secure. It is also essential to practice good computer hygiene, including regularly updating your operating system and software, using strong passwords, and being cautious when clicking on links or downloading attachments from unknown sources. By taking these steps, you can help protect your computer and personal data from malware and other online threats.
Aliases
15 security vendors flagged this file as malicious.
| Antivirus Vendor | Detection |
|---|---|
| AVG | Dropper.Generic6.AHZQ |
| Ikarus | Trojan.Win32.VB |
| GData | Win32:VB-ADQI |
| AhnLab-V3 | Trojan/Win32.Gimemo |
| McAfee-GW-Edition | Heuristic.LooksLike.Win32.Suspicious.B |
| Kaspersky | HEUR:Trojan.Win32.Generic |
| Avast | Win32:VB-ADQI [Trj] |
| Symantec | Trojan.Gen |
| McAfee | Artemis!1D21F85FBE22 |
| AVG | Dropper.Generic6.BEFE |
| Fortinet | W32/VB.BTFE!tr |
| Ikarus | Trojan.Win32.Jorik |
| McAfee-GW-Edition | Heuristic.BehavesLike.Win32.Suspicious-DTR.G |
| AntiVir | TR/Kazy.87367.1 |
| BitDefender | Gen:Variant.Kazy.87367 |
SpyHunter Detects & Remove TrojanSpy:Win64/Ursnif.AE
File System Details
| # | File Name | MD5 |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|---|
| 1. | ANAMARIA-PCth.exe | 1d21f85fbe222daf803af49986dc5dbc | 2 |
| 2. | mshtdctr64.dll | b3e896e01b328da1cd4ebe3c7907f57d | 1 |
| 3. | 99BF.exe | d425d8cc3a294f9f944297ddcd770b9a | 1 |
