Categories: Malware

Should I remove “Ser.Ursu.21729”?

The Ser.Ursu.21729 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ser.Ursu.21729 virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Ser.Ursu.21729?


File Info:
crc32: 33B333DCmd5: 95d33fa8a5499c8f8191313e5b3dad26name: 95D33FA8A5499C8F8191313E5B3DAD26.mlwsha1: 22c78e3d7b09b8c267a4744543bcbc5d9064afb0sha256: 8f12b040473833223152174aeaf99bd34330931a048b1788669559c3f56f2720sha512: a5091a3f795c369a4284ffb0d6fc9dc44dd2bda85a2a4120da17cce549c5023cb5e5b10fe1302e7f12444c12e6ebee9598db541d9133ee6c5f53b9c150be6343ssdeep: 192:do+3QaM+rO/GHmg5GJEIDfPf0D9/u//E89b0kKwJT7ZyBzu0gOMuMy:PrigmobIDfPMDQ//B9b0kvKBaztype: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
Translation: 0x0000 0x04b0LegalCopyright: Copyright xa9 1996-2018 VideoLAN and VLC AuthorAssembly Version: 3.0.3.0InternalName: grab.exeFileVersion: 3.0.3.0CompanyName: VLC media playerLegalTrademarks: VLC media player, VideoLAN and x264 are registered trademarks from VideoLANComments: VLC media playerProductName: VLC media playerProductVersion: 3.0.3.0FileDescription: VLC media playerOriginalFilename: grab.exe

Ser.Ursu.21729 also known as:

K7AntiVirus	Trojan ( 0056a61a1 )
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ser.Ursu.21729
CAT-QuickHeal	Trojan.OccamyFC.S8705613
ALYac	Gen:Variant.Ser.Ursu.21729
Malwarebytes	Spyware.ClipboardStealer.Generic
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:MSIL/ClipBanker.73ba0e46
K7GW	Trojan ( 0056a61a1 )
Cybereason	malicious.8a5499
BitDefenderTheta	Gen:NN.ZemsilF.34050.am0@aC7JD7g
Cyren	W32/ClipBanker.M.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/ClipBanker.LR
APEX	Malicious
Avast	Win32:DropperX-gen [Drp]
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Trojan.MSIL.Agent.gen
BitDefender	Gen:Variant.Ser.Ursu.21729
NANO-Antivirus	Trojan.Win32.ClipBanker.ieqqmb
Tencent	Msil.Trojan.Agent.Hvix
Ad-Aware	Gen:Variant.Ser.Ursu.21729
Sophos	Mal/Generic-S
DrWeb	Trojan.PWS.Siggen.31367
Zillya	Trojan.ClipBanker.Win32.4077
McAfee-GW-Edition	ClipBanker-FCNX!95D33FA8A549
FireEye	Generic.mg.95d33fa8a5499c8f
Emsisoft	Gen:Variant.Ser.Ursu.21729 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.MSIL.opzc
Avira	HEUR/AGEN.1136390
Antiy-AVL	Trojan/Generic.ASMalwS.3037FBF
Arcabit	Trojan.Ser.Ursu.D54E1
ZoneAlarm	HEUR:Trojan.MSIL.Agent.gen
GData	MSIL.Trojan.ClipBanker.F
AhnLab-V3	Malware/Win32.RL_Generic.C3622627
McAfee	ClipBanker-FCNX!95D33FA8A549
MAX	malware (ai score=89)
VBA32	TScope.Trojan.MSIL
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TrojanSpy.MSIL.CLIPBANKER.SM
Rising	Spyware.ClipBanker!1.D058 (CLASSIC)
Ikarus	Trojan.MSIL.ClipBanker
MaxSecure	Trojan.Malware.8703358.susgen
Fortinet	MSIL/ClipBanker.MZ!tr
AVG	Win32:DropperX-gen [Drp]
Paloalto	generic.ml
Qihoo-360	Win32/TrojanDropper.Generic.HgIASOgA