Ursu.188572 removal

The Ursu.188572 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ursu.188572 virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Ursu.188572?


File Info:
crc32: 7ACC63A7
md5: 3c95d8ef16f30b0473316f65733a2810
name: 3C95D8EF16F30B0473316F65733A2810.mlw
sha1: ad2a66bd230bbb78b26edc034ff00d37cfd53025
sha256: 032d0e1e3fd1bc6a65216c2bd6a730aefe6f62737cb2c04e5895908c6ceaf463
sha512: 61500156a7cd6f29314cb19fdd73c04d47aa5570793a02ee89527b8fca7c56fb13e46bfe3b11df9bf392330a94c3427b89f50fac0a9db6289835ce5b8413ec3c
ssdeep: 384:3phOFUd1iOxuGjI1Ifrpuh/wd6wzXI+dCx+m2csvw7zfT+44aUZVG2qbmqJmWyF:5gkkIpuh1ThyZsLmDBFeqlQaUJJ
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation.  All rights reserved.
InternalName: MSVCM80.DLL
FileVersion: 8.00.50727.762
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Visual Studioxae 2005
ProductVersion: 8.00.50727.762
FileDescription: Microsoftxae C Runtime Library
OriginalFilename: MSVCM80.DLL
Translation: 0x0409 0x04b0

Ursu.188572 also known as:

K7AntiVirus	Trojan ( 00454e201 )
Lionic	Trojan.Win32.Generic.mzPP
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Ursu.188572
Cylance	Unsafe
Zillya	Trojan.Disfa.Win32.72249
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	Trojan:MSIL/Disfa.14d817bc
K7GW	Trojan ( 00454e201 )
Cybereason	malicious.f16f30
Cyren	W32/Ursu.AA.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Injector.BSL
APEX	Malicious
Avast	MSIL:GenMalicious-FJ [Trj]
Kaspersky	HEUR:Trojan.MSIL.Disfa.gen
BitDefender	Gen:Variant.Ursu.188572
NANO-Antivirus	Trojan.Win32.Disfa.fknjfx
MicroWorld-eScan	Gen:Variant.Ursu.188572
Tencent	Msil.Trojan.Disfa.Lmuv
Ad-Aware	Gen:Variant.Ursu.188572
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34294.cm0@aeBTZ3ji
McAfee-GW-Edition	Artemis
FireEye	Generic.mg.3c95d8ef16f30b04
Emsisoft	Gen:Variant.Ursu.188572 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Dropper.MSIL.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.299188D
Microsoft	Trojan:Win32/Occamy.C03
Arcabit	Trojan.Ursu.D2E09C
GData	Gen:Variant.Ursu.188572
Acronis	suspicious
McAfee	Artemis!3C95D8EF16F3
MAX	malware (ai score=100)
VBA32	TScope.Trojan.MSIL
Ikarus	Trojan.MSIL.Injector
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Injector.PEO!tr
AVG	MSIL:GenMalicious-FJ [Trj]
Paloalto	generic.ml

How to remove Ursu.188572?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.