Ursu.146615 removal instruction

The Ursu.146615 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ursu.146615 virus can do?

• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid

How to determine Ursu.146615?

File Info:
name: 28A4609B28DAAF4E07F1.mlw
path: /opt/CAPEv2/storage/binaries/4d1761c3f554e2f2431da7bbd7d58aa606e951d9c09bbdd70721bafd5cb37bfa
crc32: E7491109
md5: 28a4609b28daaf4e07f140df2a7d2a67
sha1: e992cd0a538c3a0cd6c71365d48a9b7361f55787
sha256: 4d1761c3f554e2f2431da7bbd7d58aa606e951d9c09bbdd70721bafd5cb37bfa
sha512: 91934bf4dd641f07cb78e97952e8b8945aa4cddf52c2f74c01af3059d5818705d7e315b288026976de38c7ac1a44d6a92b36a8d74078c85615a8717758455c69
ssdeep: 49152:08OqliTjfySil/Sp3Y1EbuUeC8OqliTjfyC8OqliTjfye8OqliTjfy:08OqliTGBqhY1EbGC8OqliTGC8OqliTQ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12EA59D9265C8D3A2D094F6F63141A67300276F90B34AE9624074BEA73274D07EF977AF
sha3_384: 834bf982bba235f5cfaa4c4df43a25c2b08c07f932079e079827c7cfb512b9b03bc2106c3b93e1d32585034de8bde202
ep_bytes: ff250020400000000000000000000000
timestamp: 2014-07-18 23:22:35

Version Info:
CompanyName: Supercell
FileDescription: Clash Of Clans
FileVersion: 1.0.0.0
InternalName: Clash Of Clans.exe
LegalCopyright: Copyrigh Supercell
OriginalFilename: Clash Of Clans.exe
ProductName: Clahs Of Clans
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0
Translation: 0x0000 0x04b0

Ursu.146615 also known as:

How to remove Ursu.146615?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.