Malware

Ursu.239223 removal tips

Malware Removal

The Ursu.239223 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Ursu.239223 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine Ursu.239223?



File Info:

crc32: 7754F1F0
md5: 496b876590c9cdbda0cf8f0a7be108e2
name: 496B876590C9CDBDA0CF8F0A7BE108E2.mlw
sha1: 614375e55b5c62b34bc4c35e4d183c23d0759857
sha256: dae42da4f0ef746407a65afb659b15ae298d85bf5bf898af721ce31a5165c5d6
sha512: 6e75e8fa0ee7fd6a94329dcbca825368a8926065355b7a7083ef6c564393d92282a95e96d1d9918b851d65875c851550ebdbf6730f2ff9f159279aa51b09290c
ssdeep: 49152:dUnSsZs3YWDZ2t5xQnPQp9A+rBdd+WIXbrOZUEDX/hr:mnSFoWAqaVbkWIrKZPDvhr
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows


Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:  
Assembly Version: 0.0.0.0
InternalName: aaaa.Scr
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:  
OriginalFilename: aaaa.Scr

Ursu.239223 also known as:

LionicTrojan.MSIL.SpyGate.m!c
Elasticmalicious (high confidence)
DrWebTrojan.PackedNET.30
CynetMalicious (score: 100)
ALYacGen:Variant.Ursu.239223
CylanceUnsafe
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaBackdoor:MSIL/SpyGate.4b48d9da
Cybereasonmalicious.590c9c
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Malware.Zusy-6866357-0
KasperskyHEUR:Backdoor.MSIL.SpyGate.gen
BitDefenderGen:Variant.Ursu.239223
NANO-AntivirusTrojan.Win32.Mlw.femkmm
MicroWorld-eScanGen:Variant.Ursu.239223
TencentWin32.Trojan.Generic.Pdmp
Ad-AwareGen:Variant.Ursu.239223
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZemsilF.34170.Rn0@aamdSfb
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
FireEyeGeneric.mg.496b876590c9cdbd
EmsisoftGen:Variant.Ursu.239223 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Dropper.MSIL.Gen
Antiy-AVLTrojan/Win32.AGeneric
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataGen:Variant.Ursu.239223
AhnLab-V3Backdoor/Win32.Bladabindi.R151179
McAfeeArtemis!496B876590C9
MAXmalware (ai score=94)
VBA32TScope.Trojan.MSIL
MalwarebytesMachineLearning/Anomalous.97%
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002C0WJ221
YandexTrojan.Agent!vxbkmfei8t4
IkarusTrojan.Dropper
FortinetW32/Generic!tr
AVGWin32:Malware-gen

How to remove Ursu.239223?

Ursu.239223 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment