Home Malware Programs Trojans Trojan.Spy.Ursnif.GU

Trojan.Spy.Ursnif.GU

Posted: November 8, 2012

Threat Metric

Threat Level: 8/10
Infected PCs: 290
First Seen: November 8, 2012
Last Seen: June 24, 2023
OS(es) Affected: Windows

Aliases

W32/Gimemo.ATPW!tr [Fortinet]Trojan-Ransom.Win32.Gimemo [Ikarus]Heuristic.BehavesLike.Win32.Downloader.D [McAfee-GW-Edition]TR/Dropper.Gen [AntiVir]Packed.Win32.MUPX.Gen [Comodo]Trojan-Ransom.Win32.Gimemo.atpw [Kaspersky]Suspicious file [Panda]VIPRE.Suspicious [Sunbelt]W32/Heuristic-210!Eldorado [F-Prot]W32/Mdrop.CE [Fortinet]TROJ_SPNR.03FG12 [TrendMicro]TR/Kazy.49415 [AntiVir]Mal/Mdrop-CE [Sophos]Win32.GenVariant.Kaz [eSafe]Trojan.ADH.2 [Symantec]
More aliases (120)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%ALLUSERSPROFILE%\nvwiz.exe File name: nvwiz.exe
Size: 498.68 KB (498688 bytes)
MD5: a5d8f4a683851cf4011fd0a17c816ab1
Detection count: 94
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: June 23, 2019
%TEMP%\KWvIAAS.exe File name: KWvIAAS.exe
Size: 46.5 KB (46505 bytes)
MD5: 94d84e50ba6c2adb645639773d92d451
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: November 13, 2012
%TEMP%\sdchSVCS.dll File name: sdchSVCS.dll
Size: 56.83 KB (56832 bytes)
MD5: 6349d9577495a897f40249ce7a77852e
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %TEMP%
Group: Malware file
Last Updated: November 8, 2012
%USERPROFILE%\AppData\modpro.exe File name: modpro.exe
Size: 391.68 KB (391680 bytes)
MD5: dab9d09a883116ed19a0f0e2a7e48132
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\AppData
Group: Malware file
Last Updated: November 9, 2012
Loading...