Malware

What is “Ursu.110791”?

Malware Removal

The Ursu.110791 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ursu.110791 virus can do?

  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

How to determine Ursu.110791?


File Info:

crc32: 812F6CD2
md5: ffb2c59ffd8520b18d32cffdd153f79b
name: FFB2C59FFD8520B18D32CFFDD153F79B.mlw
sha1: 205c9d5b52596f43d5b8b85dc19e759aae57a522
sha256: 195729642700d76e367171ccda7bc93eb62a99aaca3dfb532ffe5be9ec7fcdd2
sha512: aa68fd4c4866c2bf46149786b24e8fb308bb13c91bea2a23a462187451a64f7c11cf4b49a754c088455b61edc010d47ae2bde2bacfd5d5fbc8a1d2cd3286aea4
ssdeep: 6144:g4KsYKZL9LxN9u9/A00hDABxDUANlkZ8Ce9sSRZDT0:9LdM9+mBxDUANoexRZ
type: PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 Microsoft 2017
Assembly Version: 1.0.6595.31632
InternalName: silvaBR.exe
FileVersion: 1.0.*
CompanyName: Microsoft
LegalTrademarks:
Comments:
ProductName: Externalio
ProductVersion: 1.0.*
FileDescription: Externalio
OriginalFilename: silvaBR.exe

Ursu.110791 also known as:

K7AntiVirusTrojan ( 00519a711 )
CAT-QuickHealTrojan.YakbeexMSIL.ZZ4
ALYacGen:Variant.Ursu.110791
MalwarebytesGeneric.Malware/Suspicious
ZillyaTrojan.Inject.Win32.244766
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_60% (W)
AlibabaTrojan:MSIL/Kryptik.feb4ed25
K7GWTrojan ( 00519a711 )
Cybereasonmalicious.ffd852
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Kryptik.MPL
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan.MSIL.Inject.abxhi
BitDefenderGen:Variant.Ursu.110791
NANO-AntivirusTrojan.Win32.Inject.eygeio
MicroWorld-eScanGen:Variant.Ursu.110791
TencentMsil.Trojan.Inject.Eibi
Ad-AwareGen:Variant.Ursu.110791
SophosMal/Generic-S
ComodoMalware@#14wn6cgz95s7n
F-SecureHeuristic.HEUR/AGEN.1109638
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0PJV21
McAfee-GW-EditionTrojan-FPBZ!FFB2C59FFD85
FireEyeGeneric.mg.ffb2c59ffd8520b1
EmsisoftGen:Variant.Ursu.110791 (B)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1109638
Antiy-AVLTrojan/MSIL.Inject
MicrosoftTrojan:Win32/Wacatac.B!ml
ZoneAlarmTrojan.MSIL.Inject.abxhi
GDataGen:Variant.Ursu.110791
AhnLab-V3Trojan/Win32.Kryptik.C2442265
McAfeeTrojan-FPBZ!FFB2C59FFD85
MAXmalware (ai score=83)
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002C0PJV21
YandexTrojan.Inject!3CycAhjHT2s
IkarusTrojan.MSIL.Crypt
FortinetMSIL/Generic.AP.1170EDE!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Ursu.110791?

Ursu.110791 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment