Malware

How to remove “Ser.Ursu.16511”?

Malware Removal

The Ser.Ursu.16511 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ser.Ursu.16511 virus can do?

  • Creates RWX memory
  • Sniffs keystrokes
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Ser.Ursu.16511?


File Info:

crc32: 9E05CA8C
md5: 2bb84cfe548fec7fb123d7e46cf67ff4
name: 2BB84CFE548FEC7FB123D7E46CF67FF4.mlw
sha1: 0757d573de3f69c5f4d5aca0dfa2915b8a126df6
sha256: 6e461a8430f251db38e8911dbacd1e72bce47a89c28956115b702d13ae2b8e3b
sha512: ceb37b78bcfc932de123e410a0b50eec5d055d94884b9c8116977b4087add733399824fb484f0c075c565ce858a178e98c7f8f17e91153b95a5536993f5c856b
ssdeep: 49152:rYjEydVe9gySIixG11t7QLfHgaxDlKdNJpH1hlxGBeY4UpTKPbkBYpozJc61QA9:rY4ydVGf1j/axBifYBe92ObktzJ81PN
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

FileVersion: 1.0.0.0
ProductVersion: 1.0.0.0
Translation: 0x0409 0x04e4

Ser.Ursu.16511 also known as:

K7AntiVirusRiskware ( 0040eff71 )
LionicTrojan.Win32.Agent.4!c
DrWebTrojan.PWS.Banker1.26804
CynetMalicious (score: 99)
ALYacGen:Variant.Ser.Ursu.16511
CylanceUnsafe
ZillyaTrojan.Agent.Win32.741984
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/BestaFera.9bfcf97b
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.e548fe
SymantecTrojan.Revokery
ESET-NOD32a variant of Win32/Revokery.A
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan.Win32.Agent.neypui
BitDefenderGen:Variant.Ser.Ursu.16511
NANO-AntivirusTrojan.Win32.Agent.ekpvbz
MicroWorld-eScanGen:Variant.Ser.Ursu.16511
TencentWin32.Trojan.Agent.Huge
Ad-AwareGen:Variant.Ser.Ursu.16511
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZelphiF.34266.@V0@aaRvwioi
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_MICROPSIA.ZGED-A
McAfee-GW-EditionBehavesLike.Win32.Dropper.th
FireEyeGeneric.mg.2bb84cfe548fec7f
EmsisoftGen:Variant.Ser.Ursu.16511 (B)
JiangminTrojan.Agent.djuu
WebrootW32.Malware.Gen
AviraTR/Agent.ykeuc
Antiy-AVLTrojan/Generic.ASMalwS.2AD955D
KingsoftWin32.Troj.Agent.(kcloud)
MicrosoftTrojan:Win32/Skeeyah.A!rfn
GDataGen:Variant.Ser.Ursu.16511
McAfeeArtemis!2BB84CFE548F
MAXmalware (ai score=100)
VBA32Trojan.Agent
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_MICROPSIA.ZGED-A
RisingTrojan.Generic@ML.89 (RDML:JJFhaZZgblK8owZFr4u9IA)
YandexTrojan.GenAsa!G8VIJ2mkOCE
IkarusTrojan-Spy.Micropsia
FortinetW32/Revokery.A!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Ser.Ursu.16511?

Ser.Ursu.16511 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment