Malware

Ursu.175795 removal tips

Malware Removal

The Ursu.175795 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ursu.175795 virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Ursu.175795?


File Info:

crc32: 30E5D68B
md5: b7feb2b93774c7748c12974df3b8921c
name: B7FEB2B93774C7748C12974DF3B8921C.mlw
sha1: 0f6cef84a1f12c61a8c00aee4b3aa948c4e9f278
sha256: e989972356bf6ab809f0171bd4bd9f9f65626bb5f47aae22cfab5f0020c2d7f3
sha512: dc7c5ae933d636365e8945939833de8645299fecf375a6750532311ae5e55959b7a11218e2b918883c9a6682346b2fe5a2d70dec8d4b6cccf3620f9d56b7adc8
ssdeep: 192:ZK+gbBa488B0xa52ozXAsw0oHsBRA9ugLmM/dRuTw:/4XB0xk2oAsw0Qs09ugCMq
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: (c) 1999-2006 Vista Software. All rights reserved.
Assembly Version: 0.0.0.0
InternalName: crypted.exe
FileVersion: 2.1.8.2
CompanyName: Vista Software
Comments: VistaDB Database Engine
ProductName: VistaDB
ProductVersion: 2.1.8.2
FileDescription:
OriginalFilename: crypted.exe

Ursu.175795 also known as:

K7AntiVirusTrojan ( 004dcb4e1 )
Elasticmalicious (high confidence)
ALYacGen:Variant.Ursu.175795
K7GWTrojan ( 004dcb4e1 )
Cybereasonmalicious.93774c
APEXMalicious
AvastFileRepMalware
KasperskyUDS:Trojan-PSW.MSIL.Agensla.gen
BitDefenderGen:Variant.Ursu.175795
MicroWorld-eScanGen:Variant.Ursu.175795
Ad-AwareGen:Variant.Ursu.175795
SophosMal/DotNet-C
BitDefenderThetaGen:NN.ZemsilF.34688.am0@a0BuCMf
FireEyeGeneric.mg.b7feb2b93774c774
EmsisoftGen:Variant.Ursu.175795 (B)
SentinelOneStatic AI – Malicious PE
MicrosoftTrojan:Win32/Woreflint.A!cl
GDataGen:Variant.Ursu.175795
MAXmalware (ai score=87)
FortinetMSIL/Agent.HUF!tr.dldr
AVGFileRepMalware

How to remove Ursu.175795?

Ursu.175795 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment