Ursu.331827 removal instruction

The Ursu.331827 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.331827 virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Ursu.331827?


File Info:
crc32: 8AC6D7FC
md5: 899854e39b475e5ad877547c53586056
name: 899854E39B475E5AD877547C53586056.mlw
sha1: a595d1e97205d2141086de1c01dff5095b914d28
sha256: 875d06b0ad2d2e632f3ea342e6f82ed0ff2e8dada3eafe2c49ed917a1647fb4d
sha512: 6afa30093f975aebf8877a2e49e07255efadec05067150043cc8363749b1b123ca60ae9389e1b6eb924172a56291257a35cce10cae084b87a89884dd55a1df6f
ssdeep: 1536:ksEYV/3jL071us7VcS5JO2+OHz78zDEAIbn6BbdCQg:xEYl3jar7SOHH8zDEzwC9
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, PECompact2 compressed

Version Info:
LegalCopyright: author By am2002
InternalName: 
FileVersion: 1.0.1.41
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: 
ProductVersion: 1.0.0.0
FileDescription: SimpLauncher For WOW v2.4.2
OriginalFilename: 
Translation: 0x0804 0x03a8

Ursu.331827 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Aocmbgnj.4!c
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Ursu.331827
Zillya	Trojan.GenericKD.Win32.213435
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (D)
Alibaba	TrojanDropper:Win32/Generic.380b1e78
Cybereason	malicious.39b475
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	FileRepMalware
BitDefender	Gen:Variant.Ursu.331827
MicroWorld-eScan	Gen:Variant.Ursu.331827
Ad-Aware	Gen:Variant.Ursu.331827
Sophos	ML/PE-A
Comodo	Malware@#hrqpmtdengor
BitDefenderTheta	AI:Packer.58CA6D7217
McAfee-GW-Edition	BehavesLike.Win32.Generic.ct
FireEye	Generic.mg.899854e39b475e5a
Emsisoft	Gen:Variant.Ursu.331827 (B)
SentinelOne	Static AI – Suspicious PE
Avira	TR/Patched.Ren.Gen
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Ursu.D51033
GData	Gen:Variant.Ursu.331827
AhnLab-V3	Malware/Gen.Generic.C2802370
Acronis	suspicious
McAfee	Artemis!899854E39B47
MAX	malware (ai score=86)
Rising	Trojan.Generic@ML.89 (RDML:lZIZNw844DwcY70mxErrYg)
Ikarus	Trojan-Dropper.Delf
AVG	FileRepMalware
Paloalto	generic.ml

How to remove Ursu.331827?

Ursu.331827 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X