Categories: Malware

How to remove “Ursu.263052”?

The Ursu.263052 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ursu.263052 virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
A process attempted to delay the analysis task.
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Unconventionial language used in binary resources: Chinese (Simplified)
Queries information on disks, possibly for anti-virtualization
Exhibits possible ransomware file modification behavior
Creates a hidden or system file
Attempts to modify proxy settings

Related domains:

csdw.jia-si.cn

downdcdn.jia-si.cn

www.jia-si.cn

How to determine Ursu.263052?


File Info:
crc32: 4EC2FB4Emd5: ee1c5bcb78663ece8bdb81e114910f3fname: EE1C5BCB78663ECE8BDB81E114910F3F.mlwsha1: f3254446f3304609cac61deeaa09edb9f25c0d96sha256: 1ddfd66eabba4352801e361005b3f507f0bb22e0158eb4983a58fa52a880a771sha512: da7e8e452b5355dbd2987f367def0ce028613572c53d224741b45de2185e16d52c074989e12b35e376ab7d07d3c643697e4b4a46bf54b7359fee3eb6508949a9ssdeep: 49152:N8jRQUjwdnqFV8Xfzu7NIUbEobKjz4ZZDCv:NCRTj2qFCXfzu2QCtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Ursu.263052 also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Adware ( 00535f0d1 )
Lionic	Trojan.Win32.Adload.a!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ursu.263052
CAT-QuickHeal	PUA.Softcnapp.S3237895
ALYac	Gen:Variant.Ursu.263052
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_60% (D)
K7GW	Adware ( 00535f0d1 )
Cybereason	malicious.b78663
Cyren	W32/S-e2d95ee6!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Softcnapp.BC potentially unwanted
APEX	Malicious
Avast	Win32:MalwareX-gen [Trj]
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Ursu.263052
NANO-Antivirus	Trojan.Win32.Softcnapp.fhmjfw
Tencent	Trojan.Win32.Generic.h
Ad-Aware	Gen:Variant.Ursu.263052
Sophos	Generic PUA PD (PUA)
Comodo	Application.Win32.AdWare.Softcnapp.G@7x13gz
DrWeb	Adware.Softcnapp.92
McAfee-GW-Edition	BehavesLike.Win32.Softcnapp.vh
FireEye	Generic.mg.ee1c5bcb78663ece
Emsisoft	Gen:Variant.Ursu.263052 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanDownloader.Adload.vpm
Avira	HEUR/AGEN.1142834
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASMalwS.2722CCE
Microsoft	Trojan:Win32/Skeeyah.A!rfn
GData	Gen:Variant.Ursu.263052
AhnLab-V3	Malware/Win32.Generic.C2641346
Acronis	suspicious
McAfee	Artemis!EE1C5BCB7866
MAX	malware (ai score=85)
VBA32	BScope.Adware.Puwaders
Malwarebytes	Malware.AI.4241390579
Panda	Trj/Genetic.gen
Rising	Adware.Downloader!1.BBEC (CLASSIC)
Yandex	Trojan.GenAsa!EWCHOFyUmVA
Ikarus	PUA.Softcnapp
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Adload.J!tr.dldr
AVG	Win32:MalwareX-gen [Trj]
Paloalto	generic.ml