Ursu.193703 removal tips

The Ursu.193703 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ursu.193703 virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it
Uses Windows utilities for basic functionality
Sniffs keystrokes
A process was set to shut the system down when terminated
Installs itself for autorun at Windows startup
Creates a copy of itself

Related domains:

z.whorecord.xyz

a.tomx.xyz

cfbr1234.ddns.net

How to determine Ursu.193703?


File Info:
crc32: CE8FBF4F
md5: b12f129a66064655d173600a48309773
name: B12F129A66064655D173600A48309773.mlw
sha1: 6ac9fcfd55b6da5ac98cb21b082c6fc5135db2aa
sha256: 2062e65255b17ca1bf97ad41711f62e2bcdb0b986e287554eeaef70e30ff49e4
sha512: 2e9cf8580d4263997d30791610d558aad17f79a1bc0d3efa9460f0dbed4d8e70c4c4f3d41a71fedeb8dc4c1ed37a7ebcdc1976cc0d6547bd9ebea2cbf55fe5a8
ssdeep: 1536:Xk2OlZNqDDcCx7tb+EK1EZihSWX+ST2NuOUD1hn9T0A:02WAj+EK10Sn17nJD
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2018
Assembly Version: 1.0.0.0
InternalName: Fuxc2b5xadf8Uxadf8xc744xc6b0Sxb798gdxb9acxb140xc990Nxace0rIk.exe
FileVersion: 1.0.0.0
ProductName: Fuxc2b5xadf8Uxadf8xc744xc6b0Sxb798gdxb9acxb140xc990Nxace0rIk
ProductVersion: 1.0.0.0
FileDescription: Fuxc2b5xadf8Uxadf8xc744xc6b0Sxb798gdxb9acxb140xc990Nxace0rIk
OriginalFilename: Fuxc2b5xadf8Uxadf8xc744xc6b0Sxb798gdxb9acxb140xc990Nxace0rIk.exe

Ursu.193703 also known as:

K7AntiVirus	Trojan ( 005224811 )
Lionic	Trojan.MSIL.Disfa.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader17.26820
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Ursu.193703
Cylance	Unsafe
Sangfor	Trojan.MSIL.Generic.ky
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Trojan ( 005224811 )
Cybereason	malicious.a66064
Symantec	Backdoor.Ratenjay
ESET-NOD32	a variant of MSIL/Kryptik.MDR
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Packed.Msilperseus-9802572-0
Kaspersky	HEUR:Trojan.MSIL.Generic
BitDefender	Gen:Variant.Ursu.193703
NANO-Antivirus	Trojan.Win32.Disfa.exfuex
MicroWorld-eScan	Gen:Variant.Ursu.193703
Tencent	Msil.Trojan.Generic.Pbox
Ad-Aware	Gen:Variant.Ursu.193703
Sophos	Mal/Generic-S
Comodo	Malware@#1vgr0jud78er3
BitDefenderTheta	Gen:NN.ZemsilF.34294.fq0@aW1inW
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Packed-XA!B12F129A6606
FireEye	Generic.mg.b12f129a66064655
Emsisoft	Gen:Variant.Ursu.193703 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.MSIL.ijkr
Avira	HEUR/AGEN.1108921
eGambit	Unsafe.AI_Score_98%
Antiy-AVL	Trojan/Generic.ASMalwS.24167A0
Microsoft	Backdoor:MSIL/Bladabindi!rfn
Arcabit	Trojan.Ursu.D2F4A7
GData	Gen:Variant.Ursu.193703
McAfee	Packed-XA!B12F129A6606
MAX	malware (ai score=96)
Malwarebytes	Malware.AI.4201811270
Panda	Trj/GdSda.A
Yandex	Trojan.Agent!j0XxygoqK8Y
Ikarus	Trojan-Spy.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Kryptik.GVM!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Ursu.193703?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.