Troj/Urausy-O

Category: Viruses and Spyware Protection available since:29 Apr 2013 06:53:04 (GMT)
Type: Trojan Last Updated:30 Apr 2013 09:27:14 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Examples of Troj/Urausy-O include:

Example 1

File Information

Size
385K
SHA-1
022c818bc99762d8a4c2b5bf8f75cdcc657c4751
MD5
cffdb5aaee13854022f1909320657a45
CRC-32
09959d0c
File type
Windows executable
First seen
2013-04-28

Example 2

File Information

Size
385K
SHA-1
025f9effcfe992dca86cff7d4b34486b0cdacdc3
MD5
89f98137a72bca661c14013e8027d939
CRC-32
e6fb9c65
File type
Windows executable
First seen
2013-04-28

Example 3

File Information

Size
58K
SHA-1
0b6bd81106c1d626a8baa69d68a37d365720090f
MD5
21fe23ae444078c4621234831ec90b0b
CRC-32
8bce88fd
File type
Windows executable
First seen
2013-04-27

Runtime Analysis

Copies Itself To
  • c:\Documents and Settings\test user\Application Data\skype.dat
Registry Keys Modified
  • HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
    Shell
    explorer.exe,c:\Documents and Settings\test user\Application Data\skype.dat
Processes Created
  • c:\windows\system32\svchost.exe

download Try Sophos products for free
Download now