Categories: Malware

Ursu.145716 removal tips

The Ursu.145716 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ursu.145716 virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Detects Avast Antivirus through the presence of a library
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Ursu.145716?


File Info:
crc32: FEE6E8EFmd5: 5a53eb80ad89184e498d606a2158aa0bname: upload_filesha1: 1e354563d69f9d996477deb6b2fd762986d78587sha256: a0f048ae11ac8f9e13c28687f60b680e4ab63bad48262ca99543e6a4a2471b0asha512: 66ef2e62bbbbf39d44c645535724a6cda94c605231e2dd1f47149a73ef1103ba45b8290cd1f02c82b32d50c8b345519b4144a69656c08c0fd465f2f91f7b0bdessdeep: 24576:uLCYANVZt4TwPYb5fk/EISvLxVi5wXVTtPq/hv8wnN2xCzRYRye7P11j44Xh:uLuuVy/hulTtIhv80KNIshtype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Ursu.145716 also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ursu.145716
FireEye	Generic.mg.5a53eb80ad89184e
McAfee	GenericR-ENQ!5A53EB80AD89
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Generic.4!c
Sangfor	Malware
BitDefender	Gen:Variant.Ursu.145716
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Kaspersky	Trojan-Banker.Win32.ChePro.mnwr
Alibaba	TrojanBanker:Win32/ChePro.adacda68
NANO-Antivirus	Trojan.Win32.ChePro.dycxij
ViRobot	Trojan.Win32.Z.Banker.1486336
Rising	Spyware.Banker!8.8D (CLOUD)
Ad-Aware	Gen:Variant.Ursu.145716
Comodo	Malware@#2dt3ok58h9l78
F-Secure	Heuristic.HEUR/AGEN.1122732
DrWeb	Trojan.PWS.Banker1.21424
Zillya	Trojan.Banker.Win32.95134
TrendMicro	TROJ_GEN.R002C0DE820
Ikarus	Trojan-Spy.Agent
Jiangmin	Trojan.Banker.ChePro.bbj
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1122732
MAX	malware (ai score=99)
Antiy-AVL	Trojan[Banker]/Win32.ChePro
Microsoft	TrojanSpy:Win32/Banker
Arcabit	Trojan.Ursu.D23934
ZoneAlarm	Trojan-Banker.Win32.ChePro.mnwr
GData	Gen:Variant.Ursu.145716
Cynet	Malicious (score: 90)
AhnLab-V3	Trojan/Win32.Banbra.C952466
ALYac	Gen:Variant.Ursu.145716
VBA32	BScope.TrojanBanker.ChePro
ESET-NOD32	a variant of Win32/Spy.Banker.ACAK
TrendMicro-HouseCall	TROJ_GEN.R002C0DE820
Tencent	Win32.Trojan.Spy.Swkx
Yandex	Trojan.PWS.ChePro!
eGambit	Generic.PSW
Fortinet	W32/Banker.ACAK!tr.spy
AVG	Win32:Malware-gen
Panda	Trj/Genetic.gen
Qihoo-360	HEUR/QVM25.0.Malware.Gen