We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
TrojanSpy:Win32/Ursnif.gen!D
Detected by Microsoft Defender Antivirus
Aliases: Win32/Ursnif.CS (CA) Trojan.PWS.Games.C (BitDefender) Trojan-PSW.Win32.Papras.gw (Kaspersky) Generic PWS.y (McAfee) Mal/Heuri-E (Sophos) Obama trojan (other)
Summary
TrojanSpy:Win32/Ursnif.gen!D is a generic detection for a family of trojans that attempts to steal sensitive data, monitor network traffic and download additional malware. Win32/Ursnif.gen!D attempts to send the collected data to a remote server and disables several services, such as the system firewall.
Manual removal is not recommended for this threat. Use Microsoft Security Essentials or another up-to-date scanning and removal tool to detect and remove this threat and other unwanted software from your computer. For more information on Microsoft security products, see http://www.microsoft.com/protect/products/computer/default.mspx.