Should I remove “Ursu.263137”?

The Ursu.263137 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.263137 virus can do?

Reads data out of its own binary image
Anomalous binary characteristics

How to determine Ursu.263137?


File Info:
crc32: ADB49AA3
md5: 765753663a0a3c19770646db736cbec2
name: 765753663A0A3C19770646DB736CBEC2.mlw
sha1: c2fdf1e669ead073c712bc42d3004b2dabcf5279
sha256: 519f03e0433aa071d95aacad28c0a49fad5f7a0c5cf875e4c0df835886aae729
sha512: 20f99fb52808ac3b7b264ac6458ca29a7e743c895f0b9997f1f2c7e09319183c6524d308bd0550a4e3375bba58637206882f3740553bb709510e35c15d94fe35
ssdeep: 12288:qfulyq4g6QhmmLYq/NrB+WdupTrdprjGMMQRp2gF5:WuJaQYmLYq/Nd+WdiTrdprjP2
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
internalname: Coruscate Squashy
fileversion: 14.67.58.794
companyname: Toadstools Arrival
comments: Saltbox
productname: Portents Hayloft
productversion: 70.81.53.918
filedescription: Endemics Beaucoup
originalfilename: Sprights
Translation: 0x0685 0x0735

Ursu.263137 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 005392931 )
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Stealer.24344
Cynet	Malicious (score: 90)
McAfee	GenericRXGI-YK!765753663A0A
Cylance	Unsafe
Zillya	Trojan.GenericKD.Win32.133882
Sangfor	Ransom.Win32.Blocker.ldnq
Alibaba	Ransom:Win32/Blocker.f53cb69d
K7GW	Trojan ( 005392931 )
Cybereason	malicious.63a0a3
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/GenKryptik.CGRX
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Ransom.Win32.Blocker.ldnq
BitDefender	Gen:Variant.Ursu.263137
NANO-Antivirus	Trojan.Win32.Blocker.fhwulj
MicroWorld-eScan	Gen:Variant.Ursu.263137
Tencent	Malware.Win32.Gencirc.114d23a3
Ad-Aware	Gen:Variant.Ursu.263137
Sophos	Mal/Generic-S
Comodo	Malware@#1rf2l4da0ektk
BitDefenderTheta	Gen:NN.ZexaF.34608.YuW@a4S!41di
McAfee-GW-Edition	BehavesLike.Win32.Worm.ch
FireEye	Generic.mg.765753663a0a3c19
Emsisoft	Gen:Variant.Ursu.263137 (B)
Avira	HEUR/AGEN.1112614
Microsoft	Trojan:Win32/Occamy.B
AegisLab	Trojan.Multi.Generic.4!c
GData	Gen:Variant.Ursu.263137
AhnLab-V3	Malware/Win32.Generic.C2641791
VBA32	BScope.TrojanRansom.Blocker
MAX	malware (ai score=100)
Malwarebytes	Malware.Heuristic.1008
Panda	Trj/GdSda.A
Rising	Ransom.Blocker!8.12A (CLOUD)
Ikarus	Trojan.Win32.Krypt
Fortinet	W32/Kryptik.GJIS!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Ransom.973

How to remove Ursu.263137?

Ursu.263137 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X