Categories: Malware

Mal/Generic-S + Troj/Ursnif-EO removal tips

The Mal/Generic-S + Troj/Ursnif-EO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mal/Generic-S + Troj/Ursnif-EO virus can do?

Executable code extraction
Creates RWX memory
Uses Windows utilities for basic functionality
A process attempted to delay the analysis task by a long amount of time.
Exhibits possible ransomware file modification behavior
Creates a hidden or system file
Attempts to modify proxy settings
Anomalous binary characteristics

How to determine Mal/Generic-S + Troj/Ursnif-EO?


File Info:
crc32: 22D10113md5: bae60f2c8a14eb4bb86366508a86092fname: BAE60F2C8A14EB4BB86366508A86092F.mlwsha1: 8639495ce72130151b0fd2c56366de993015c09bsha256: a75252b275cb4e2aca95cb4e2d2b6bbb1f9bac373daf21724f0424026194e856sha512: 450950b54561f12b72e8172efc044330c5fdb17b111c3c9a26b07866b1caf7ec4cb9903f17f78145d62769ca819396db66d2f9078c2319f0891491ad0a9e6c56ssdeep: 12288:QxHGz7jrsxOZWGvw2uV+HZfyWdAHKHRfhtOJbIP5UsT9GdOxRCeg:jtWGvCV+5QoVhPNT961egtype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright xa9 Order 1995-2019FileVersion: 0.1.5.767CompanyName: OrderProductName: Race riseProductVersion: 0.1.5.767FileDescription: Race riseOriginalFilename: camp.dllTranslation: 0x0409 0x04e4

Mal/Generic-S + Troj/Ursnif-EO also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.Gozi.796
Cynet	Malicious (score: 90)
ALYac	Trojan.GenericKDZ.73567
Cylance	Unsafe
Sangfor	Trojan.Win32.Wacatac.B
Alibaba	TrojanSpy:Win32/Ursnif.817a8b50
K7GW	Spyware ( 0053a1971 )
K7AntiVirus	Spyware ( 0053a1971 )
Cyren	W32/Kryptik.DQI.gen!Eldorado
ESET-NOD32	Win32/Spy.Ursnif.BX
APEX	Malicious
Avast	Win32:BankerX-gen [Trj]
BitDefender	Trojan.GenericKDZ.73567
MicroWorld-eScan	Trojan.GenericKDZ.73567
Ad-Aware	Trojan.GenericKDZ.73567
Sophos	Mal/Generic-S + Troj/Ursnif-EO
Comodo	TrojWare.Win32.Agent.taczr@0
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_FRS.0NA103CI21
McAfee-GW-Edition	Trojan-FRGC!BAE60F2C8A14
FireEye	Trojan.GenericKDZ.73567
Emsisoft	Trojan.GenericKDZ.73567 (B)
Avira	TR/AD.UrsnifDropper.dqyyh
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Gozi.GT!MTB
Arcabit	Trojan.Generic.D11F5F
AegisLab	Trojan.Win32.Generic.4!c
GData	Trojan.GenericKDZ.73567
AhnLab-V3	Trojan/Win32.GenericKD.C4382849
McAfee	Trojan-FRGC!BAE60F2C8A14
MAX	malware (ai score=83)
Malwarebytes	Spyware.Ursnif
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_FRS.0NA103CI21
Rising	Spyware.Ursnif!8.1DEF (CLOUD)
Ikarus	Trojan-Spy.Agent
Fortinet	W32/Banker.X!tr
AVG	Win32:BankerX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/TrojanPSW.Gozi.HgkASRAA