Home Malware Programs Trojans Trojan.Spy.Ursnif.GT

Trojan.Spy.Ursnif.GT

Posted: December 7, 2012

Threat Metric

Threat Level: 8/10
Infected PCs: 1,073
First Seen: December 7, 2012
Last Seen: June 24, 2023
OS(es) Affected: Windows

Aliases

W32/FakeAlert.CN!tr [Fortinet]Gen:Variant.Kazy.21593 [BitDefender]a variant of Win32/Kryptik.NGH [NOD32]W32/Poison.FCOL!tr.bdr [Fortinet]Backdoor/Win32.Poison [AhnLab-V3]Heuristic.LooksLike.Win32.Suspicious.F!83 [McAfee-GW-Edition]PAK_Generic.001 [TrendMicro]TR/Agent.53248.26 [AntiVir]Troj/Agent-ZEV [Sophos]Backdoor.Win32.Poison.fcol [Kaspersky]Trojan-FAQI!47BB3E2A1564 [McAfee]W32/Vilsel.HZU!tr [Fortinet]Heuristic.LooksLike.Win32.SuspiciousPE.F [McAfee-GW-Edition]Trojan.PWS.Siggen.9386 [DrWeb]TrojWare.Win32.Vilsel.hzu [Comodo]
More aliases (174)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Program Files (x86)\CCP Client\CCPClient.exe File name: CCPClient.exe
Size: 991.74 KB (991744 bytes)
MD5: 8e28f442113eb6047010ed3274abc64d
Detection count: 201
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files (x86)\CCP Client\CCPClient.exe
Group: Malware file
Last Updated: June 24, 2023
C:\WINDOWS\System32\taskhost.rs File name: taskhost.rs
Size: 410.11 KB (410112 bytes)
MD5: fba97c4783551c68c6c72cc9581d0276
Detection count: 201
Mime Type: unknown/rs
Path: C:\WINDOWS\System32\taskhost.rs
Group: Malware file
Last Updated: January 13, 2025
%USERPROFILE%\Lokale indstillinger\Application Data\nku.exe File name: nku.exe
Size: 348.16 KB (348160 bytes)
MD5: 38ce20abe6c11812044c95f83af72e3b
Detection count: 96
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\Lokale indstillinger\Application Data
Group: Malware file
Last Updated: December 12, 2012
C:\System Volume Information\_restore{4A292230-51D0-4163-BA2A-D0BC8435F153}\RP4\A0001183.exe File name: A0001183.exe
Size: 4.77 MB (4775160 bytes)
MD5: f7745cd85f851448f19274aef0895715
Detection count: 59
File type: Executable File
Mime Type: unknown/exe
Path: C:\System Volume Information\_restore{4A292230-51D0-4163-BA2A-D0BC8435F153}\RP4\A0001183.exe
Group: Malware file
Last Updated: July 24, 2022
%LOCALAPPDATA%\WideSearch\wsearch.exe File name: wsearch.exe
Size: 441.85 KB (441856 bytes)
MD5: f5b7c53d66ed8a09126e212410f44070
Detection count: 59
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\WideSearch
Group: Malware file
Last Updated: December 11, 2012
%SystemDrive%\Documents and Settings\remco\Local Settings\Temp\findtray.dll File name: findtray.dll
Size: 57.34 KB (57344 bytes)
MD5: 3e8d4d10f520819894a4bedb6c664bf3
Detection count: 34
File type: Dynamic link library
Mime Type: unknown/dll
Path: %SystemDrive%\Documents and Settings\remco\Local Settings\Temp
Group: Malware file
Last Updated: December 7, 2012
%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\YOUTUBE.PLAYER.exe File name: YOUTUBE.PLAYER.exe
Size: 51.71 KB (51712 bytes)
MD5: 47bb3e2a156452c1088b65be3bc61046
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup
Group: Malware file
Last Updated: December 11, 2012
%WINDIR%\system32\139bfe1a.dll File name: 139bfe1a.dll
Size: 2.43 MB (2433536 bytes)
MD5: 0cc5cfc70d85e2fb007e2584c72bf6c6
Detection count: 12
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\system32
Group: Malware file
Last Updated: December 11, 2012
%APPDATA%\adobeupdater.exe File name: adobeupdater.exe
Size: 67.07 KB (67072 bytes)
MD5: 9dd1bd4a805fe4e6dd04f66a4a64e5b9
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: December 11, 2012
%USERPROFILE%\qzgnqgei.exe File name: qzgnqgei.exe
Size: 105.47 KB (105475 bytes)
MD5: 8793a11cacc74dd3857532a97d898bc5
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%
Group: Malware file
Last Updated: December 11, 2012
%WINDIR%\zdcvctrk.exe File name: zdcvctrk.exe
Size: 105.47 KB (105472 bytes)
MD5: edbd4bac79426ccf660092d5e8c4fa91
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%
Group: Malware file
Last Updated: December 11, 2012
%USERPROFILE%\??? ?????????\SiteClicker2.exe File name: SiteClicker2.exe
Size: 2.52 MB (2521088 bytes)
MD5: 6c4193a9afc872f894f4c96be1c922cc
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\??? ?????????
Group: Malware file
Last Updated: December 11, 2012
%APPDATA%\NikkonE\swoom.exe File name: swoom.exe
Size: 69.12 KB (69120 bytes)
MD5: 9da8f8e3c6121f24eeaead296916e46e
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\NikkonE
Group: Malware file
Last Updated: December 11, 2012
Loading...