Malware

Should I remove “Ursu.224574”?

Malware Removal

The Ursu.224574 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ursu.224574 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Ursu.224574?


File Info:

crc32: 78122A17
md5: 8f2461f0bec405785ad665a7c72a95e6
name: 8F2461F0BEC405785AD665A7C72A95E6.mlw
sha1: bab36d4bf51bc376344c679b1085e3b75deac74d
sha256: b7f1c11cd4aeacf6d89482b7cba236c7e1c76418ae36041d7ff6b0e98e0f519a
sha512: e06ade45e3fe0a1f2765e6655a564993963aa1532f8c5400fa1f4ad8d929d3240f8a222129ca1174044ab459c4fa58c13d9ea744d90e5b3843262d3178eb4de9
ssdeep: 6144:AkoAGTzNh1Vhtuktz5Gm/+dKezynUX2xeKbKDtMExXZk3TP+al3tUc6nZ1mTrI5:AkJGT5LXztzBKbG/BtUc4orI
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 0.0.0.0
InternalName: 0.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:
OriginalFilename: 0.exe

Ursu.224574 also known as:

LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
ALYacGen:Variant.Ursu.224574
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojan:MSIL/Kryptik.306ec86e
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Kryptik.EKU
APEXMalicious
AvastWin32:Malware-gen
CynetMalicious (score: 99)
KasperskyVHO:Trojan-Ransom.Win32.Blocker.gen
BitDefenderGen:Variant.Ursu.224574
NANO-AntivirusTrojan.Win32.Zusy.fbqddq
MicroWorld-eScanGen:Variant.Ursu.224574
TencentWin32.Trojan.Dropper.Ecam
Ad-AwareGen:Variant.Ursu.224574
SophosMal/Generic-S
ComodoMalware@#3vr52bhyn8cah
BitDefenderThetaGen:NN.ZemsilF.34796.ym0@aWNnWWe
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_Blocker.R002C0GGD21
McAfee-GW-EditionBehavesLike.Win32.Generic.fc
FireEyeGeneric.mg.8f2461f0bec40578
EmsisoftGen:Variant.Ursu.224574 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Dropper.Gen
MicrosoftBackdoor:Win32/Bladabindi!ml
ArcabitTrojan.Ursu.D36D3E
GDataGen:Variant.Ursu.224574
AhnLab-V3Win-Trojan/MSILKrypt14.Exp
McAfeeArtemis!8F2461F0BEC4
MAXmalware (ai score=97)
PandaTrj/GdSda.A
TrendMicro-HouseCallRansom_Blocker.R002C0GGD21
YandexTrojan.DR.Agent!cW/9Gk2YnGg
IkarusTrojan.SuspectCRC
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Kryptik.HXZ!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win32/TrojanDropper.Generic.HgAASRQA

How to remove Ursu.224574?

Ursu.224574 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment