About “Ursu.312440” infection

The Ursu.312440 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.312440 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Ursu.312440?


File Info:
name: CC1E949D5ECC4720BD38.mlw
path: /opt/CAPEv2/storage/binaries/4fac02f9262dc33ec935f3cbf04d8cb053bec81d76acf9e15eab057639ab5250
crc32: 82D1318C
md5: cc1e949d5ecc4720bd38fc6a9fe7734e
sha1: 519341cebd5d70a3090da06000e4f9feb30e0453
sha256: 4fac02f9262dc33ec935f3cbf04d8cb053bec81d76acf9e15eab057639ab5250
sha512: 6cc5b428f1221581b6773e4f74dfde397ef76f3f3e8c0631fc1aa5e559e13be64e1c71e33ddb430369138864d029d3767dc7a6529606d171ca3884bc067b06d2
ssdeep: 24576:ZBBoQuqInWDAKxNsRRK51iTeY0QQU+xCaUQVRajOTxe/:X1QG515Y0QUkjOTxe
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E8657C25B242D43BD5532638C80BC2F57425BF21EE24A9877BE93D4D7F3A7913828297
sha3_384: 01f95b9a87a5eba0270e385f0996895f67481490e840056670ce047508e4348c6861e3541234b6706f91cb4b62e5eb9b
ep_bytes: 558bec83c4f0b8206e5100e888efeeff
timestamp: 1992-06-19 22:22:17

Version Info:
CompanyName: 
FileDescription: 
FileVersion: 3.0.0.0
InternalName: 
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: 
ProductName: 
ProductVersion: 1.0.0.0
Comments: 
Translation: 0x0409 0x04e4

Ursu.312440 also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Ursu.312440
FireEye	Gen:Variant.Ursu.312440
BitDefenderTheta	AI:Packer.F19B5ABD17
APEX	Malicious
BitDefender	Gen:Variant.Ursu.312440
VIPRE	Gen:Variant.Ursu.312440
Trapmine	suspicious.low.ml.score
Emsisoft	Gen:Variant.Ursu.312440 (B)
Ikarus	Trojan-PWS.Win32.VKont
GData	Gen:Variant.Ursu.312440
Arcabit	Trojan.Ursu.D4C478
Google	Detected
ALYac	Gen:Variant.Ursu.312440
MAX	malware (ai score=82)
Rising	Trojan.Generic@AI.100 (RDML:oWTz1eBtzG653JS+WFT58g)
Cybereason	malicious.d5ecc4

How to remove Ursu.312440?

Ursu.312440 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X