W64/Ursnif.AF!tr.spy

description-logoAnalysis

W64/Ursnif.AF!tr.spy is classified as a spy trojan.
A spy trojan is a type of malware that has the capability to gather information from the infected system without consent from the user. This information is then sent to a remote attacker.
The Fortinet Antivirus Analyst Team is constantly updating our descriptions. Please check the FortiGuard Encyclopedia regularly for updates.

recommended-action-logoRecommended Action

  • Make sure that your FortiGate/FortiClient system is using the latest AV database.
  • Quarantine/delete files that are detected and replace infected files with clean backup copies.

Telemetry logoTelemetry

Detection Availability

FortiGate
Extreme
FortiClient
Extended
FortiMail
Extended
FortiSandbox
Extended
FortiWeb
Extended
Web Application Firewall
Extended
FortiIsolator
Extended
FortiDeceptor
Extended
FortiEDR

Version Updates

Date Version Detail
2022-07-12 90.04092
2022-05-21 90.02485
2019-12-02 73.50300 Sig Updated
2019-11-18 73.17300 Sig Updated
2019-10-06 72.13800 Sig Updated
2019-10-06 72.12700 Sig Updated
2019-10-05 72.11000 Sig Updated
2019-10-05 72.10800 Sig Added
2018-12-25 65.15600 Sig Updated
2018-12-04 64.66200 Sig Added