Ursu.238307 malicious file

The Ursu.238307 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.238307 virus can do?

Network activity detected but not expressed in API logs

How to determine Ursu.238307?


File Info:
crc32: 408C4F2B
md5: b207287e985717ff40eb39a2a953c479
name: B207287E985717FF40EB39A2A953C479.mlw
sha1: 933043eb1011ad686434641e66cf3a791f2c21e5
sha256: 23815cd8a55758600246a48df4437be25a8d5297fa137c78e81494b8a1a34416
sha512: 67f44c9b93bc45f627fc60334d632181259dee906f93da965a7dc4a9acc555d6ff1d02a6cbf75b67bbba3c645a9669152437283d8a784f2817b728178514b742
ssdeep: 1536:iGDhJvTx1lXyTWUb91f9sebbc6/OekRtCvTx1lXyTWUb91f9sebbc6/:RDhJwlseFO9CwlseF
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 Microsoft 2018
Assembly Version: 1.0.0.0
InternalName: njrt01.exe
FileVersion: 1.0.0.0
CompanyName: Microsoft
ProductName: njrt01
ProductVersion: 1.0.0.0
FileDescription: njrt01
OriginalFilename: njrt01.exe

Ursu.238307 also known as:

K7AntiVirus	Trojan ( 0052915c1 )
Elastic	malicious (high confidence)
ALYac	Gen:Variant.Ursu.238307
Cylance	Unsafe
Alibaba	TrojanDownloader:MSIL/Kryptik.77a23bea
K7GW	Trojan ( 0052915c1 )
Cybereason	malicious.e98571
BitDefenderTheta	Gen:NN.ZemsilF.34294.Um0@aO6FwNj
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.NBN
APEX	Malicious
Avast	Win32:MalwareX-gen [Trj]
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Trojan-Downloader.Win32.Agent.gen
BitDefender	Gen:Variant.Ursu.238307
NANO-Antivirus	Trojan.Win32.Kryptik.fenjsp
MicroWorld-eScan	Gen:Variant.Ursu.238307
Tencent	Win32.Trojan-downloader.Agent.Pbet
Ad-Aware	Gen:Variant.Ursu.238307
Sophos	Mal/Generic-S
Comodo	Malware@#2jmtjge7vlczk
DrWeb	Trojan.PWS.Banker1.28354
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Packed-FJW!B207287E9857
FireEye	Generic.mg.b207287e985717ff
Emsisoft	Gen:Variant.Ursu.238307 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1130173
Antiy-AVL	Trojan/Generic.ASMalwS.26C2CB9
Microsoft	Trojan:Win32/Occamy.C
GData	Gen:Variant.Ursu.238307
AhnLab-V3	Downloader/Win32.Agent.C2579013
McAfee	Packed-FJW!B207287E9857
MAX	malware (ai score=97)
Panda	Trj/GdSda.A
Yandex	Trojan.Kryptik!X/iTYgnOekg
Ikarus	Trojan-Downloader.Banker
Fortinet	MSIL/Kryptik.NBN!tr
AVG	Win32:MalwareX-gen [Trj]
Paloalto	generic.ml

How to remove Ursu.238307?

Ursu.238307 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X