How to remove “Ursu.210566”?

The Ursu.210566 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.210566 virus can do?

Network activity detected but not expressed in API logs

How to determine Ursu.210566?


File Info:
crc32: F9AE79C5
md5: ede0f8c341b1dbf4626dd5f292b091b6
name: EDE0F8C341B1DBF4626DD5F292B091B6.mlw
sha1: a53cb6016f260ef4348101d984dd70733b7731f9
sha256: 26fb46125ea0e76198acbf1a5e3585a8e0bba8f2dde5bc33c6a45101760161ec
sha512: fd5e8a5560ddb66a11837687412e55fa1ac724cde3cb6065416de9edbe59ff1361db7577a2da35c9a7cb1b065471ba38a1b409a7b74da528f6f0385aa80e99af
ssdeep: 1536:C7XMZppH7SNTlX7DNgbPrDVJvmdt49H3O2jLWn5:Cs6ZX9gbDpJvm32jLy
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2016
Assembly Version: 1.0.0.33
InternalName: PTS.exe
FileVersion: 1.0.0.33
CompanyName: Praxis EMR
LegalTrademarks: Praxis EMR
Comments: PTS
ProductName: PTS
ProductVersion: 1.0.0.33
FileDescription: PTS
OriginalFilename: PTS.exe

Ursu.210566 also known as:

Lionic	Trojan.Win32.Generic.4!c
ALYac	Gen:Variant.Ursu.210566
Cylance	Unsafe
Sangfor	Trojan.MSIL.Deepsea.C
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Generik.LUMXZMX
APEX	Malicious
Avast	Win32:Malware-gen
BitDefender	Gen:Variant.Ursu.210566
MicroWorld-eScan	Gen:Variant.Ursu.210566
Tencent	Win32.Trojan.Agent.Apmm
Ad-Aware	Gen:Variant.Ursu.210566
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34170.pq0@aanr7Uc
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis
FireEye	Generic.mg.ede0f8c341b1dbf4
Emsisoft	Gen:Variant.Ursu.210566 (B)
SentinelOne	Static AI – Malicious PE
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Ursu.210566
McAfee	Artemis!EDE0F8C341B1
MAX	malware (ai score=84)
Panda	Trj/GdSda.A
Ikarus	Trojan.SuspectCRC
AVG	Win32:Malware-gen

How to remove Ursu.210566?

Ursu.210566 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X