Should I remove “Ursu.308353”?

The Ursu.308353 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.308353 virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Ursu.308353?


File Info:
crc32: 636B469E
md5: 69f73279944312bc8ca1c8dfb2e00b55
name: 69F73279944312BC8CA1C8DFB2E00B55.mlw
sha1: 1dbf16cdb78ed89903a3055d2b40f0eba3c123ba
sha256: 1df2e9b94ee7d458ac82f3e35438ede0b1265e014f257ea673c2d396c5f97eef
sha512: 3c01313fbeb40676854ca669069ed68709f3ef271054d2034c1449d0e6f78ea4b709e9ca889f0fb547f9c089b66d6cb8efa61cf6953fccb0c44658d853b26a7c
ssdeep: 196608:d7wTy0TChZLbgp9eWO89r0MiqfXyMsikKtS7:lzkwguWO1MiqPhi
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
ProductName: YoutubeDownloader
FileVersion: 1.2.3
Comments: YoutubeDownloader extensions installer
FileDescription: YoutubeDownloader extensions installer
Translation: 0x0409 0x04b0

Ursu.308353 also known as:

K7AntiVirus	Trojan ( 0053d8e21 )
Lionic	Adware.Python.PBot.2!c
Elastic	malicious (high confidence)
DrWeb	Python.Bot.98
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Ursu.308353
Cylance	Unsafe
Sangfor	Adware.Generic-JS.Save.cf3fc376
CrowdStrike	win/malicious_confidence_60% (D)
Alibaba	AdWare:Win32/Python.4748a667
K7GW	Trojan ( 0053d8e21 )
Cybereason	malicious.994431
Symantec	PUA.Gen.2
ESET-NOD32	Python/Adware.PBot.S
APEX	Malicious
Avast	Other:Malware-gen [Trj]
Kaspersky	not-a-virus:AdWare.Python.PBot.ao
BitDefender	Gen:Variant.Ursu.308353
NANO-Antivirus	Riskware.Win32.PBot.fjwxwm
MicroWorld-eScan	Gen:Variant.Ursu.308353
Tencent	Win32.Trojan.Generik.Wsuh
Ad-Aware	Gen:Variant.Ursu.308353
Sophos	Generic PUA BN (PUA)
Comodo	Malware@#mxo9ktz5x01q
McAfee-GW-Edition	BehavesLike.Win32.Generic.wc
FireEye	Generic.mg.69f73279944312bc
Emsisoft	Gen:Variant.Ursu.308353 (B)
Avira	HEUR/AGEN.1117986
Microsoft	Trojan:Win32/Occamy.C
GData	Gen:Variant.Ursu.308353
AhnLab-V3	PUP/Win32.Agent.R241656
McAfee	Artemis!69F732799443
MAX	malware (ai score=100)
VBA32	Adware.Python
Malwarebytes	PUP.Optional.YouTubeDownloader
Panda	Trj/CI.A
Yandex	PUA.Agent!bg7S65ctAKU
AVG	Other:Malware-gen [Trj]
Paloalto	generic.ml

How to remove Ursu.308353?

Ursu.308353 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X