About “Ursu.145395” infection

The Ursu.145395 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ursu.145395 virus can do?

• Executable code extraction
• Creates RWX memory
• Network activity detected but not expressed in API logs
• Anomalous binary characteristics

How to determine Ursu.145395?

File Info:
crc32: 4A96E1C2
md5: e56defe3884e0cab240edef4f9ae8237
name: E56DEFE3884E0CAB240EDEF4F9AE8237.mlw
sha1: 9cae1c528d4cc01777f205ef13abce48dad6fa27
sha256: d823be7dcf0a0a9b5dfe71e5450e0dcae985aa2e5db17d54688afe1a9b6b7fc0
sha512: b7c43dbb16970e0fac0ada34487fe167bb14c69124110a1d061775bf4aa6f6acd426fe6b13e5e15ebc257fee11f2c428c0ae4621a0b88b47ab5a15dd787e0090
ssdeep: 384:2KsVPtjWOBY5pUvlJ1stkjZ7hKWPAoWFZDxfhNQ/e13X2kt5rRbH9StwYGc5:2KgBY5pUv6qjZNnJyZDlMyj5JIt2c5
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright:  
Assembly Version: 0.0.0.0
InternalName: j.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:  
OriginalFilename: j.exe

Ursu.145395 also known as:

How to remove Ursu.145395?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.