Ursu.158478 information

The Ursu.158478 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ursu.158478 virus can do?

Creates RWX memory
The binary likely contains encrypted or compressed data.
Generates some ICMP traffic

Related domains:

fouratlinks.com

boomboomrequest.com

How to determine Ursu.158478?


File Info:
crc32: 8571A343
md5: 2c175c596f60fca676e7c8e1a9c1e638
name: 2C175C596F60FCA676E7C8E1A9C1E638.mlw
sha1: d0f95cb7f22b781ca25554fdbe35b3ce1b4bf189
sha256: 3bc2a2aaf899ed766179252cf084f7bd40f1944c8a608d21527e9f6012cc5b8a
sha512: 53c1c650aa03004e4f6ad797fc0e2993023ff7fbdf2d82e5c9f71f7062a80f00d015595729ac1c551a4c7d5c99ef6a3f09f170f379af664a9cfe707111582fdc
ssdeep: 3072:nJPmU/QjrGcm6Tdhlk+T8f2WhPbPdQ9l9Di9Szl16cZ4QF:d4+cm6TdTkw8f2WhPklpiSv6+1
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2021
Assembly Version: 0.0.0.0
InternalName: Handler.exe
FileVersion: 0.0.0.0
CompanyName: cd_disc_install_setup_software
LegalTrademarks: 
Comments: cd_disc_install_setup_software
ProductName: cd_disc_install_setup_software
ProductVersion: 0.0.0.0
FileDescription: cd_disc_install_setup_software
OriginalFilename: Handler.exe

Ursu.158478 also known as:

K7AntiVirus	Trojan-Downloader ( 00588d741 )
Lionic	Trojan.MSIL.BaseLoader.a!c
DrWeb	Adware.WizzMonetize.1
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Ursu.158478
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	TrojanDownloader:MSIL/BaseLoader.3807555c
K7GW	Trojan-Downloader ( 00588d741 )
Cybereason	malicious.96f60f
ESET-NOD32	a variant of MSIL/Adware.CsdiMonetize.BG
APEX	Malicious
Avast	Win32:MalwareX-gen [Trj]
Kaspersky	HEUR:Trojan-Downloader.MSIL.BaseLoader.gen
BitDefender	Gen:Variant.Ursu.158478
MicroWorld-eScan	Gen:Variant.Ursu.158478
Tencent	Msil.Trojan-downloader.Baseloader.Hqvn
Ad-Aware	Gen:Variant.Ursu.158478
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34294.im0@aafmETh
McAfee-GW-Edition	BehavesLike.Win32.PUP.cc
FireEye	Generic.mg.2c175c596f60fca6
Emsisoft	Gen:Variant.Ursu.158478 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1146000
eGambit	Unsafe.AI_Score_99%
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Arcabit	Trojan.Ursu.D26B0E
GData	Win32.Trojan-Downloader.Generic.NY20MS
AhnLab-V3	Adware/Win.Generic.C4668709
McAfee	Artemis!2C175C596F60
MAX	malware (ai score=86)
Malwarebytes	MachineLearning/Anomalous.96%
TrendMicro-HouseCall	TROJ_GEN.R002H0CKJ21
Fortinet	Adware/CsdiMonetize
AVG	Win32:MalwareX-gen [Trj]

How to remove Ursu.158478?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.