How to remove “Ursu.179783”?

The Ursu.179783 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.179783 virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Ursu.179783?


File Info:
crc32: FFD3E4F5
md5: aee8ddd5d7c5d9231f6277172f529583
name: AEE8DDD5D7C5D9231F6277172F529583.mlw
sha1: a6a0c8d4af886e3bee42cb80b7ad84f4fcaec729
sha256: 3caf59e0d0d991f2f479af8a81ea5e45e31795de1ff0521ae39a388d1c48b1a4
sha512: cb3c5c2fae9f97d61d0f48fa5eeb17cd52f18824a07b292ca165d201621fc6ee7259111cacc065a49be3588f1faca1983f91ee9f40287ff06a8288f1354e3897
ssdeep: 3072:cN+JMc0hV2lYeqxs/zgz3S8SDKfwVn28UznCEHpo6g+s/Sv:Bh0nreqxs/zgz3S8SDKfwVnmzCEs+V
type: MS-DOS executable, MZ for MS-DOS

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2017
Assembly Version: 1.4.0.0
InternalName: Bosch ECU SW Number.exe
FileVersion: 1.4.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: Bosch Ecu SW Number
ProductVersion: 1.4.0.0
FileDescription: Bosch Ecu SW Number
OriginalFilename: Bosch ECU SW Number.exe

Ursu.179783 also known as:

CAT-QuickHeal	Trojan.Fuerboos
ALYac	Gen:Variant.Ursu.179783
Cylance	Unsafe
Zillya	Backdoor.Agent.Win32.65212
Sangfor	Malware
CrowdStrike	win/malicious_confidence_80% (D)
Cybereason	malicious.5d7c5d
TrendMicro	TROJ_GEN.R011C0PEB20
Cyren	W32/Trojan.CXF.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
GData	Gen:Variant.Ursu.179783
BitDefender	Gen:Variant.Ursu.179783
MicroWorld-eScan	Gen:Variant.Ursu.179783
Ad-Aware	Gen:Variant.Ursu.179783
BitDefenderTheta	Gen:NN.ZemsilF.34128.Bm3@aqsTrni
VIPRE	Trojan.Win32.Generic!BT
Invincea	heuristic
McAfee-GW-Edition	RDN/Generic.dx
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.aee8ddd5d7c5d923
Emsisoft	Gen:Variant.Ursu.179783 (B)
SentinelOne	DFI – Malicious PE
Endgame	malicious (high confidence)
Antiy-AVL	Trojan/Win32.Fuerboos
Microsoft	Trojan:Win32/Occamy.C
Arcabit	Trojan.Ursu.D2BE47
AegisLab	Trojan.Win32.Ursu.4!c
McAfee	RDN/Generic.dx
MAX	malware (ai score=85)
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R011C0PEB20
Rising	Trojan.Fuerboos!8.EFC8 (CLOUD)
eGambit	Unsafe.AI_Score_93%
Fortinet	PossibleThreat
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Generic/HEUR/QVM03.0.1C16.Malware.Gen

How to remove Ursu.179783?

Ursu.179783 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X