Ursu.190241 removal

The Ursu.190241 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.190241 virus can do?

How to determine Ursu.190241?


File Info:
crc32: 45B47284
md5: 8806dfd2679a0e20a4d38eb409552a54
name: 8806DFD2679A0E20A4D38EB409552A54.mlw
sha1: 79547aa4edd0c7b4143c5fca141e2a3ec1f8e407
sha256: 91aa275bcdc90a597a9400fc32ffbe193becf89e5b65f74dd55a18d54d82268f
sha512: 8eee330ab797bb94d9c7297faf1e72f8ffd85516aa94ad413f8aca0688adb0134718e3e3d298954eed8972c4ffc076b0dc9375ae2eb12a87556fee786e3b1629
ssdeep: 384:ytzF0GaqOS5Et8p2HzjGfeZ5oR0h1belwjByNlnxr9OiCiIiZFgOfRMk:y2qyjZToRIbK+yzTZFgGMk
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2018
Assembly Version: 1.0.0.0
InternalName: Sh.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: Sh
ProductVersion: 1.0.0.0
FileDescription: Sh
OriginalFilename: Sh.exe

Ursu.190241 also known as:

K7AntiVirus	Trojan ( 0050dbf01 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Ursu.190241
Sangfor	Trojan.Win32.Save.a
K7GW	Trojan ( 0050dbf01 )
Cybereason	malicious.2679a0
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/TrojanDropper.Agent.CZW
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Kaspersky	Trojan-Ransom.Win32.Blocker.kyrn
BitDefender	Gen:Variant.Ursu.190241
NANO-Antivirus	Trojan.Win32.Blocker.fajkjw
MicroWorld-eScan	Gen:Variant.Ursu.190241
Tencent	Win32.Trojan.Blocker.Dypy
Ad-Aware	Gen:Variant.Ursu.190241
Sophos	Mal/Generic-S
Comodo	Malware@#323qv7kufwcg
BitDefenderTheta	Gen:NN.ZemsilF.34678.bm0@aCAFS4
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.8806dfd2679a0e20
Emsisoft	Gen:Variant.Ursu.190241 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Blocker.iin
Avira	HEUR/AGEN.1114159
Microsoft	Program:Win32/Wacapew.C!ml
GData	Gen:Variant.Ursu.190241
McAfee	Artemis!8806DFD2679A
MAX	malware (ai score=96)
Panda	Trj/GdSda.A
Rising	Dropper.Agent!8.2F (CLOUD)
Ikarus	Trojan-Dropper.MSIL.Binder
Fortinet	MSIL/Generic.AP.1881B4C!tr
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Blocker.HwMAEpsA

How to remove Ursu.190241?

Ursu.190241 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X