How to remove “Ursu.155841”?

The Ursu.155841 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.155841 virus can do?

The binary likely contains encrypted or compressed data.

How to determine Ursu.155841?


File Info:
crc32: 98C3919D
md5: 2cf05fbd9a7c2cce73f2203f3bd624ee
name: 2CF05FBD9A7C2CCE73F2203F3BD624EE.mlw
sha1: c1786bbd1391a87b2b5c1a7285c8ce4c8e5f724c
sha256: 5ebba4ecfa4b6f650d087799521a040ee50d8d770bed8e39de16e9b149923279
sha512: c3074318e0f8962131f4512d51fa5a6942a543e4a8d00e26e5c080f37e93f01d9645c09d0da4297bf7b7e8306249764b6ffdbedd835eb69a33698cd2024bce9f
ssdeep: 3072:Jgl2mX4oiX6WO6F61td7CX2pfNWaXdw+g8GxLHtS5ZBb6/79e3ANOyJmCMdswE8:JSz/tcaWLT6E9e3AnCswBKzdRdr3j
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright:  
Assembly Version: 0.0.0.0
InternalName: aaajjj.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:  
OriginalFilename: aaajjj.exe

Ursu.155841 also known as:

K7AntiVirus	Trojan ( 004df9061 )
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Ursu.155841
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Trojan:MSIL/Kryptik.cdbbb25b
K7GW	Trojan ( 004df9061 )
Cybereason	malicious.d9a7c2
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.LHD
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Variant.Ursu.155841
NANO-Antivirus	Trojan.Win32.Kryptik.fcehgs
MicroWorld-eScan	Gen:Variant.Ursu.155841
Tencent	Win32.Trojan.Generic.Hwdc
Ad-Aware	Gen:Variant.Ursu.155841
Sophos	Mal/Generic-S
Comodo	Malware@#5ggcwq7hz0md
BitDefenderTheta	Gen:NN.ZemsilF.34236.zm0@auVb0Zli
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0WJU21
McAfee-GW-Edition	Artemis
FireEye	Generic.mg.2cf05fbd9a7c2cce
Emsisoft	Gen:Variant.Ursu.155841 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Generic.cdcvg
Avira	TR/Dropper.MSIL.qlaee
Microsoft	Backdoor:Win32/Bladabindi!ml
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Ursu.155841
McAfee	Artemis!2CF05FBD9A7C
MAX	malware (ai score=97)
VBA32	TScope.Trojan.MSIL
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0WJU21
Yandex	Trojan.Agent!n3bKh4EBULs
Ikarus	Trojan.MSIL.SmartAssembly
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Kryptik.FJP!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Ursu.155841?

Ursu.155841 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X