About “Ursu.289132” infection

The Ursu.289132 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.289132 virus can do?

Anomalous binary characteristics

How to determine Ursu.289132?


File Info:
crc32: 33DB5835
md5: 91fca2035f95fe2d404779888b25852d
name: 91FCA2035F95FE2D404779888B25852D.mlw
sha1: 8d91215041bbaefb12e084805ae9a441f16f1a03
sha256: b54db076b12fe4966b629139ff461f79effa0ed71adee214a4c0ce36845aaefb
sha512: 6c577192b41b4a6f9b75060405fb70fe9e2fed3f3c2fd5907ad0312697b63781c26d71fc00a7aecf92a1771bccd80c80fad29f11a7d451d4dd5022f0f1a256da
ssdeep: 48:a4RVyvQDrVupkPOhRMHuB4DU4L0HuFhEjLjLjLjLjLjLjLjLjLjLjLjLjLjLjLj:LCQlrLDuaQx
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Ursu.289132 also known as:

CyrenCloud	W32/Trojan.TJSS-9110.B54DB076!Threatlookup
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Ursu.289132
Sangfor	PUP.Win32.Ursu.289132
Alibaba	Trojan:Win32/Shelma.797df613
Cybereason	malicious.35f95f
APEX	Malicious
Avast	FileRepMalware
Kaspersky	Trojan.Win32.Shelma.acyb
BitDefender	Gen:Variant.Ursu.289132
MicroWorld-eScan	Gen:Variant.Ursu.289132
Tencent	Win32.Trojan.Shelma.Hupo
Sophos	Mal/Generic-S
Comodo	Malware@#15f324och87rd
BitDefenderTheta	Gen:NN.ZexaF.34790.ayW@aWO4rWci
McAfee-GW-Edition	BehavesLike.Win32.Infected.xz
FireEye	Generic.mg.91fca2035f95fe2d
Emsisoft	Gen:Variant.Ursu.289132 (B)
Avira	TR/Crypt.XPACK.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.28030AB
ZoneAlarm	Trojan.Win32.Shelma.acyb
Microsoft	Program:Win32/Wacapew.C!ml
AhnLab-V3	Malware/Win32.Generic.C2745676
Malwarebytes	Malware.Heuristic.1003
Panda	Trj/CI.A
Rising	Trojan.Generic@ML.86 (RDML:Mh4OQ/i+6VdTq1sAq+oK+Q)
Yandex	Trojan.Shelma!cTctZQgY72M
Ikarus	Trojan.Crypt
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Shelma.ACYB!tr
AVG	FileRepMalware
Qihoo-360	Win32/Ransom.DogHousePower.HgIASOMA

How to remove Ursu.289132?

Ursu.289132 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X