Categories: Spy

Spyware.USteal removal

The Spyware.USteal is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Spyware.USteal virus can do?

At least one IP Address, Domain, or File Name was found in a crypto call
The binary likely contains encrypted or compressed data.
Collects information about installed applications
Creates a hidden or system file
Checks the CPU name from registry, possibly for anti-virtualization
Harvests credentials from local FTP client softwares
Harvests information related to installed instant messenger clients
Collects information to fingerprint the system
Anomalous binary characteristics

Related domains:

smtp.mail.ru

How to determine Spyware.USteal?


File Info:
crc32: 27B5F2AAmd5: 1729769f0f7cd842a9853f684564464ename: mslin.exesha1: fc97ed948f1c961eee712e9688c0538c7f1333b2sha256: a3a1fdfe4e44eeb14994d42a3acd806df24b1205a83ad333270c57ccdd98450fsha512: b935ab2f443d8ef50afca3bdad074d2166c5a4bd7cf23e4434dab17f758dc4718be383ba16953a923f8dbacf87fafc979155bd8fb9f39ba082401264954d4da7ssdeep: 768:vWsYq/YJzibDXizH8SXNczPI9L9Jk2a64d2nAYGOvDLL6Yre9DfBE07:vdYJJmPyzH8r8LPRLRe9t7type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright xa9 2009-2018 Alexey Nicolaychuk aka Unwinder, developed special for Micro-Star Intx2019l Co., Ltd.InternalName: MSIAfterburnerFileVersion: 4, 5, 0, 12819ProductName: MSIAfterburnerProductVersion: 4, 5, 0, 12819FileDescription: MSIAfterburnerOriginalFilename: MSIAfterburner.EXETranslation: 0x0409 0x04b0

Spyware.USteal also known as:

MicroWorld-eScan	DeepScan:Generic.MSIL.PasswordStealerA.22AA6281
CAT-QuickHeal	TrojanSpy.Usteal.D.mue
McAfee	Trojan-FBXH!1729769F0F7C
Cylance	Unsafe
VIPRE	Trojan-Spy.Win32.Usteal.da (v)
K7AntiVirus	Trojan ( 00012a951 )
BitDefender	DeepScan:Generic.MSIL.PasswordStealerA.22AA6281
K7GW	Trojan ( 00012a951 )
Cybereason	malicious.f0f7cd
TrendMicro	TrojanSpy.Win32.USTEAL.SMTH
F-Prot	W32/Usteal.A.gen!Eldorado
Symantec	Infostealer.Ldpinch!g2
APEX	Malicious
Avast	Win32:Evo-gen [Susp]
ClamAV	Win.Trojan.Usteal-1
GData	DeepScan:Generic.MSIL.PasswordStealerA.22AA6281
Kaspersky	HEUR:Trojan.Win32.Generic
Alibaba	TrojanSpy:Win32/Usteal.e41f1a64
NANO-Antivirus	Trojan.Win32.Usteal.eriozk
AegisLab	Trojan.Win32.Generic.ltoQ
Tencent	Win32.Trojan.Generic.Dwjp
Ad-Aware	DeepScan:Generic.MSIL.PasswordStealerA.22AA6281
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Crypt.ULPM.Gen
DrWeb	Trojan.PWS.UFR.3724
Zillya	Trojan.Generic.Win32.142771
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Generic.qc
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.1729769f0f7cd842
Emsisoft	DeepScan:Generic.MSIL.PasswordStealerA.22AA6281 (B)
Ikarus	Trojan-Spy.Win32.Usteal
Cyren	W32/Usteal.A.gen!Eldorado
Webroot	W32.Malware.Gen
Avira	TR/Crypt.ULPM.Gen
eGambit	Unsafe.AI_Score_74%
Endgame	malicious (high confidence)
Arcabit	DeepScan:Generic.MSIL.PasswordStealerA.22AA6281
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	TrojanSpy:Win32/Usteal.D
AhnLab-V3	Trojan/Win32.Ruftar.R22332
Acronis	suspicious
VBA32	TrojanPSW.UFR
ALYac	DeepScan:Generic.MSIL.PasswordStealerA.22AA6281
MAX	malware (ai score=100)
Malwarebytes	Spyware.USteal
Panda	Trj/CI.A
ESET-NOD32	a variant of Win32/Spy.Usteal.C
TrendMicro-HouseCall	TrojanSpy.Win32.USTEAL.SMTH
Rising	Spyware.Usteal!8.307 (CLOUD)
Yandex	Trojan.FruStealer.Gen.LG
MaxSecure	Trojan.Malware.7164915.susgen
Fortinet	W32/Krypt.DDS!tr
BitDefenderTheta	AI:Packer.FCC0A37F1E
AVG	Win32:Evo-gen [Susp]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	HEUR/QVM11.1.431F.Malware.Gen