What is “Ursu.184634”?

The Ursu.184634 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.184634 virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Ursu.184634?


File Info:
crc32: D03D1A2E
md5: b482b2fee6ade0021613cc2f385d3333
name: B482B2FEE6ADE0021613CC2F385D3333.mlw
sha1: c0326f95a9ca2fcecc866deda315405e7f6551ea
sha256: 15f07720b89e713100178af23e82081fb6168dcc7bdad2d78a91d3be1a835b96
sha512: 0a93673b13c1903fcb42827a317e62eab93438adef832ce0a3ae739fac4748335e5aa330ab6552774d4834beb3e2c67e876b80cdfcb2efe4362d78cb4b1da116
ssdeep: 6144:aRrONdxqYA+5q1n0nAlivNZMnXm0ohqvkTAh9RvcFv2cBCx/9VW1GX1CXrbjDMu:asL7Atn0t1ZIXGEcTAaFvQ/PpCM
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 Synapse Technologies 2018
Assembly Version: 1.0.0.0
InternalName: SynapseLauncher.exe
FileVersion: 1.0.0.0
CompanyName: Synapse
LegalTrademarks: 
Comments: 
ProductName: Synapse Launcher
ProductVersion: 1.0.0.0
FileDescription: Synapse
OriginalFilename: SynapseLauncher.exe

Ursu.184634 also known as:

Lionic	Trojan.MSIL.Generic.4!c
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Ursu.184634
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (D)
Cybereason	malicious.ee6ade
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Generik.JXMASVJ
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan.MSIL.Generic
BitDefender	Gen:Variant.Ursu.184634
MicroWorld-eScan	Gen:Variant.Ursu.184634
Tencent	Msil.Trojan.Generic.Peza
Ad-Aware	Gen:Variant.Ursu.184634
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34170.0m0@ayFhyfd
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.ch
FireEye	Generic.mg.b482b2fee6ade002
Emsisoft	Gen:Variant.Ursu.184634 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.MSIL.mcga
Avira	TR/Crypt.XPACK.Gen7
eGambit	Unsafe.AI_Score_90%
Antiy-AVL	Trojan/Generic.ASMalwS.24C54AF
Microsoft	Trojan:Win32/Wacatac.B!ml
SUPERAntiSpyware	Trojan.Agent/Gen-Downloader
GData	Gen:Variant.Ursu.184634
McAfee	GenericRXEJ-AU!B482B2FEE6AD
MAX	malware (ai score=98)
Malwarebytes	Trojan.Agent
Panda	Trj/GdSda.A
Fortinet	PossibleThreat
AVG	Win32:Malware-gen

How to remove Ursu.184634?

Ursu.184634 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X