Categories: Ransom

Should I remove “Ransom:Win32/Urausy.E”?

The Ransom:Win32/Urausy.E is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ransom:Win32/Urausy.E virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Attempts to repeatedly call a single API many times in order to delay analysis time
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Ransom:Win32/Urausy.E?


File Info:
crc32: D3D471C0md5: bec8d3e3af2f910ff48d3f121eff19cdname: BEC8D3E3AF2F910FF48D3F121EFF19CD.mlwsha1: e5d2e87c4c8a375a978f5caaba171af12b03deecsha256: de9215da5fa14536cc11de65827019c809c7962d02dd1ca00a4bf9802aa4c1cesha512: c94a8a46dcf21332fd95cbbf18569f279560efa254072765c626590f1554f5ec0d11a05222fe3ad08c53db1cafebe048a4c1f7bd898745bf10e9bcaa26667bf3ssdeep: 1536:CCSqmOmDEUydLOqMd0vGm+HBZLM7EJ6TBEdPQS4veQ:Jnmv/ydsdBHLLM4F4veQtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Ransom:Win32/Urausy.E also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
ClamAV	Win.Packed.Zusy-9754221-0
CAT-QuickHeal	Trojan.Urausy.C
McAfee	Ransom-FAV!BEC8D3E3AF2F
Malwarebytes	Trojan.Agent
VIPRE	Trojan.Win32.FakeAV.seb (v)
AegisLab	Trojan.Win32.Foreign.lcTI
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0040f5ef1 )
BitDefender	Gen:Variant.Razy.316019
K7GW	Trojan ( 0040f5ef1 )
Cybereason	malicious.3af2f9
Cyren	W32/Ransom.AH.gen!Eldorado
Symantec	Trojan.Ransomlock!g55
ESET-NOD32	a variant of Win32/Kryptik.BIAN
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Ransom.Win32.Foreign.gvag
Alibaba	Ransom:Win32/Foreign.eb0555c0
NANO-Antivirus	Trojan.Win32.RiskGen.csfhis
SUPERAntiSpyware	Trojan.Agent/Gen-Kryptik
MicroWorld-eScan	Gen:Variant.Razy.316019
Rising	Ransom.Urausy!8.2B7 (CLOUD)
Ad-Aware	Gen:Variant.Razy.316019
Emsisoft	Gen:Variant.Razy.316019 (B)
Comodo	TrojWare.Win32.Kryptik.BIA@50q28g
F-Secure	Trojan.TR/Ransom.8601698
DrWeb	Trojan.Winlock.9260
TrendMicro	TROJ_RANSOM.SM07
McAfee-GW-Edition	Ransom-FAV!BEC8D3E3AF2F
FireEye	Generic.mg.bec8d3e3af2f910f
Sophos	ML/PE-A + Troj/Agent-ADFT
Ikarus	Trojan-Ransom.Foreign
Jiangmin	Trojan/Inject.aoyo
Webroot	W32.Rogue.Gen
Avira	TR/Ransom.8601698
Antiy-AVL	Trojan[Ransom]/Win32.Foreign
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Ransom:Win32/Urausy.E
Arcabit	Trojan.Razy.D4D273
ViRobot	Trojan.Win32.Ransom.86016.F
ZoneAlarm	Trojan-Ransom.Win32.Foreign.gvag
GData	Gen:Variant.Razy.316019
AhnLab-V3	Trojan/Win32.Foreign.R79087
Acronis	suspicious
VBA32	BScope.Malware-Cryptor.Hlux
ALYac	Gen:Variant.Razy.316019
TACHYON	Trojan/W32.Inject.86016.CZ
Cylance	Unsafe
Panda	Generic Malware
TrendMicro-HouseCall	TROJ_RANSOM.SM07
Yandex	Trojan.GenAsa!PClBH3/oolw
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Kryptik.BICW!tr
BitDefenderTheta	Gen:NN.ZexaF.34590.fqW@aWlFe9pi
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	HEUR/Malware.QVM20.Gen