Categories: Spy

Should I remove “Win32:Usteal [Spy]”?

The Win32:Usteal [Spy] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32:Usteal [Spy] virus can do?

Authenticode signature is invalid
Checks the CPU name from registry, possibly for anti-virtualization
Harvests credentials from local FTP client softwares
Harvests information related to installed instant messenger clients
Collects information to fingerprint the system
Binary compilation timestomping detected

How to determine Win32:Usteal [Spy]?


File Info:
name: B9D5FDD5B34DCA4DA76E.mlwpath: /opt/CAPEv2/storage/binaries/239952488b2897e88fcf5f3022299250726a0b3244b76067d532e00741ff1e99crc32: 9FB8098Emd5: b9d5fdd5b34dca4da76eabc21b6ac9c1sha1: 0a2bb04b720f3dce17f0e708f06de313bc12ac5dsha256: 239952488b2897e88fcf5f3022299250726a0b3244b76067d532e00741ff1e99sha512: c6915303092f7e6c50e4bc33452d876bab2bace901b9d6e530e60d675ab4ce1be97d0838b8725e227c072c90ec44f86704997ef2dc638855ec166b9cab24cbf6ssdeep: 1536:NQ56/eLLlTV/mGLfK+P/Rrh0anLF4vqUtrq+CbVj/kITvoN3NVNFcRbsENDYEQ24:NsDNK4VJ5q0Gtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1874382B31B6792C6D41CBA3D7DCAFAD632E8710932B7E0DD9B261102CE272CF55511A8sha3_384: 7cb80e5d96d5784cb898df7fe4a060bf3d8d7fea42513b88f3e951c1274526c3c09013536a77ec6e60b040ea035edcbbep_bytes: eb0681dee320a4000fabfa4ec7042400timestamp: 2092-03-10 04:40:09
Version Info:
0: [No Data]

Win32:Usteal [Spy] also known as:

Bkav	W32.AIDetect.malware1
Lionic	Heuristic.File.Generic.00×1!p
tehtris	Generic.Malware
MicroWorld-eScan	Trojan.Peed.Gen
FireEye	Generic.mg.b9d5fdd5b34dca4d
CAT-QuickHeal	Trojan.Usteal.D
McAfee	PWS-Zbot.gen.ahk
Cylance	Unsafe
VIPRE	Trojan.Peed.Gen
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 0040f52b1 )
BitDefender	Trojan.Peed.Gen
K7GW	Trojan ( 0040f52b1 )
Cybereason	malicious.5b34dc
VirIT	Trojan.Win32.Generic.BSMV
Cyren	W32/Usteal.A.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Spy.Usteal.C
Cynet	Malicious (score: 100)
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Trojan.Usteal-3502
Kaspersky	HEUR:Trojan.Win32.Generic
Alibaba	TrojanSpy:Win32/Usteal.a421b78e
NANO-Antivirus	Trojan.Win32.UFR.fkhchz
ViRobot	Trojan.Win32.Z.Usteal.56832
Rising	Malware.Usteal!8.E984 (TFE:2:tEnUyocQJKI)
Ad-Aware	Trojan.Peed.Gen
Sophos	Mal/Generic-R + Troj/PWS-BYL
Comodo	MalCrypt.Indus!@1qrzi1
DrWeb	Trojan.PWS.UFR.2334
Zillya	Dropper.Generic.Win32.306
TrendMicro	TSPY_USTEAL.SMA
McAfee-GW-Edition	BehavesLike.Win32.Dropper.qh
Trapmine	malicious.high.ml.score
Emsisoft	Trojan.Peed.Gen (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/Generic.ykkg
Webroot	W32.Malware.Gen
Avira	TR/Dropper.Gen
MAX	malware (ai score=85)
Antiy-AVL	Trojan/Generic.ASMalwS.9D
Microsoft	TrojanSpy:Win32/Usteal.D
SUPERAntiSpyware	Trojan.Agent/Gen-Spy
GData	Trojan.Peed.Gen
Google	Detected
AhnLab-V3	Trojan/Win32.Ruftar.R36598
BitDefenderTheta	AI:Packer.556CE04C1F
ALYac	Trojan.Peed.Gen
TACHYON	Worm/W32.Nuwar.56832.D
VBA32	BScope.TrojanPSW.UFR
Malwarebytes	Malware.AI.3957876612
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TSPY_USTEAL.SMA
Tencent	Trojan.Win32.Ruftar.aaa
Yandex	Trojan.GenAsa!04h8xC+n4xY
Ikarus	Virus.Win32.Heur
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/ZBOT.CDL!tr
AVG	Win32:Usteal [Spy]
Avast	Win32:Usteal [Spy]
CrowdStrike	win/malicious_confidence_100% (W)