Ursu.152373 removal guide

The Ursu.152373 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ursu.152373 virus can do?

Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Ursu.152373?


File Info:
crc32: DBFDF385
md5: 33678fe720b6cc0e0e5e14258cec2c58
name: 33678FE720B6CC0E0E5E14258CEC2C58.mlw
sha1: 379c9f8130bf85f657a596550286574200690d52
sha256: 46568124b141754b54f3718aa5d1b62731de251b3d4979af6bfd56e1868310dd
sha512: c3cdda36e15e48f8b9e6f1cf2bb12dec3f8a1dcb91e008092548c5d5b5a9a7b3b61d5518317a0afaf23b19ea1ceb2ab5acb39ec0cbd89379555ea51d9826abd1
ssdeep: 3072:v/Nb80c0KQHGv9uMC+n97SXHc0KzHGZ9unC9Y:XNb80ci29uCn97SXcRY9uC9
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2017 Ian Nieuwoudt
Assembly Version: 0.0.0.0
InternalName: Crypton.exe
FileVersion: 1.2.6
CompanyName: 
LegalTrademarks: 
Comments: Crypton is designed to encrypt/decrypt any file in the specified folder and it's subfolders.
ProductName: Crypton
ProductVersion: 1.2.6
FileDescription: Crypton
OriginalFilename: Crypton.exe

Ursu.152373 also known as:

McAfee	Artemis!33678FE720B6
Cylance	Unsafe
Sangfor	PUP.Win32.Ursu.152373
BitDefender	Gen:Variant.Ursu.152373
Cybereason	malicious.720b6c
Symantec	Ransom.Crypton
ESET-NOD32	a variant of Generik.HWMPTCA
APEX	Malicious
Alibaba	Trojan:Application/SuspectCRC.1d0378e4
ViRobot	Trojan.Win32.S.Crypton.412160
MicroWorld-eScan	Gen:Variant.Ursu.152373
Ad-Aware	Gen:Variant.Ursu.152373
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34738.zm0@amlC5Qj
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!Trojan
FireEye	Gen:Variant.Ursu.152373
Emsisoft	Trojan.Ransom (A)
Microsoft	Trojan:Win32/Zpevdo.B
AegisLab	Trojan.Win32.Generic.4!c
GData	Gen:Variant.Ursu.152373
Panda	Trj/GdSda.A
Yandex	Trojan.Agent!NIT2R976/gU
Ikarus	Trojan.SuspectCRC
MaxSecure	Trojan.Malware.300983.susgen

How to remove Ursu.152373?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.