Malware

Should I remove “Ursu.132464”?

Malware Removal

The Ursu.132464 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Ursu.132464 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • A process created a hidden window
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Collects information to fingerprint the system
  • Uses suspicious command line tools or Windows utilities

Related domains:

mopw.men

How to determine Ursu.132464?



File Info:

crc32: FC490E92
md5: a7394a7a8e5b1cca6a8c82483cbd5789
name: A7394A7A8E5B1CCA6A8C82483CBD5789.mlw
sha1: 13d353a6e1788fc501d419ce60b0fa799e62c964
sha256: 112f308f8c869f8d34a1c8ac58f7f9ae13cef3675d23be1a7c42900df07fff8b
sha512: ba437803523a9cb1b2dec70c3db982fd0065b3d2d0b75d4238eb0d33cd0a5eb463d5f49e1fc16b1963b73cefc1d64342394835363f18eafbf7fed39c1710c7e4
ssdeep: 12288:2Y+xa+0Looep5sEMkpLnUqVl5cJOsH7rQeVRRXY56Ts5U8Eg:kV6ooep+EMkpLUqVl0H7rQeZyPag
type: PE32 executable (GUI) Intel 80386, for MS Windows


Version Info:

LegalCopyright: 2006-2014 (c)
InternalName: Yeah
CompanyName: GlobalLogic
Comments: Scsi Composing Dowscurrent Workflows x95after Avatar
ProductName: Yeah
Languages: English
ProductVersion: 7.3.1.7
FileDescription: Scsi Composing Dowscurrent Workflows x95after Avatar
Translation: 0x0409 0x04b0

Ursu.132464 also known as:

Elasticmalicious (high confidence)
DrWebTrojan.Siggen7.35824
ALYacGen:Variant.Ursu.132464
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
K7GWPassword-Stealer ( 0050de561 )
K7AntiVirusPassword-Stealer ( 0050de561 )
CyrenW32/Trojan.KMAW-4931
SymantecTrojan.Gen.2
ESET-NOD32Win32/PSW.Delf.ORF
APEXMalicious
AvastWin32:Malware-gen
CynetMalicious (score: 100)
KasperskyTrojan-Spy.Win32.SpyEyes.belw
BitDefenderGen:Variant.Ursu.132464
NANO-AntivirusTrojan.Win32.SpyEyes.fffenm
MicroWorld-eScanGen:Variant.Ursu.132464
TencentWin32.Trojan-spy.Spyeyes.Llgz
Ad-AwareGen:Variant.Ursu.132464
SophosMal/Generic-S
ComodoMalware@#3nqyfk71nolj0
BitDefenderThetaGen:NN.ZexaF.34758.Ou0@aqUfmjei
VIPRETrojan.Win32.Generic!BT
TrendMicroTSPY_HPURSNIF.SMZD2
McAfee-GW-EditionGeneric.dqw
FireEyeGeneric.mg.a7394a7a8e5b1cca
EmsisoftGen:Variant.Ursu.132464 (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojanSpy.SpyEyes.npr
WebrootW32.Malware.Gen
AviraTR/Crypt.ZPACK.npjek
eGambitUnsafe.AI_Score_99%
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Win32/Skeeyah.A!bit
GDataGen:Variant.Ursu.132464
AhnLab-V3Win-Trojan/Sagecrypt.Gen
Acronissuspicious
McAfeeGeneric.dqw
MAXmalware (ai score=84)
VBA32BScope.Trojan.Yakes
PandaTrj/CI.A
TrendMicro-HouseCallTSPY_HPURSNIF.SMZD2
RisingTrojan.Generic@ML.86 (RDML:RB1Q/TTWTfSeX3g85AfoyA)
YandexTrojanSpy.SpyEyes!KEzX0OqYRgI
IkarusTrojan.Win32.PSW
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Hermes.L!tr.ransom
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Ursu.132464?

Ursu.132464 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment