How to remove "Ursu.341962"?

The Ursu.341962 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ursu.341962 virus can do?

Presents an Authenticode digital signature
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Ursu.341962?


File Info:
crc32: A8003328
md5: 69665205bb55412b6363bb7cce31f579
name: 69665205BB55412B6363BB7CCE31F579.mlw
sha1: 871531c7f169f7465340dd99240e51f8ac2d2ed0
sha256: 37d5e9cb815df8524cb436cd8b51a466e2e829931da2e3fabc0fec61d65bcb44
sha512: afc4f39b0102ac3aae0a12667bf5db35c0e8b711baad8459ac1b71f8efe9fc94fa4e3cd0b5a5c76482ec2f798c58e3ba6c001b51a74e78b65282140986de2f46
ssdeep: 384:xVYC34XLTvfPf8apV6TBZkNjFQ14ItbAdHajIZnYPL1R:xVpIbTP+h4ItbIHakZA
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2018
Assembly Version: 1.0.0.0
InternalName: Epoblockl.exe
FileVersion: 1.0.0.0
CompanyName: Rectyk
LegalTrademarks: Rectyk
Comments: Rectyk
ProductName: Rectyk
ProductVersion: 1.0.0.0
FileDescription: Rectyk
OriginalFilename: Epoblockl.exe

Ursu.341962 also known as:

Lionic	Trojan.MSIL.Agent.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.26694
ALYac	Trojan.Ransom.Filecoder
Cylance	Unsafe
Zillya	Trojan.Agent.Win32.1020412
Alibaba	Ransom:MSIL/HiddenTear.abe4fc96
K7GW	Trojan ( 0052dbd31 )
K7AntiVirus	Trojan ( 0052dbd31 )
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/Filecoder.IX
Avast	MSIL:Filecoder-AC [Trj]
Cynet	Malicious (score: 99)
Kaspersky	Trojan-Ransom.MSIL.Agent.fqou
BitDefender	Gen:Variant.Ursu.341962
NANO-Antivirus	Trojan.Win32.Ransom.fkgdsz
ViRobot	Trojan.Win32.S.Agent.21032
MicroWorld-eScan	Gen:Variant.Ursu.341962
Tencent	Msil.Trojan.Agent.Wpjq
Ad-Aware	Gen:Variant.Ursu.341962
Sophos	Mal/Generic-S
Comodo	Malware@#2rquume95cho0
BitDefenderTheta	Gen:NN.ZemsilF.34058.bm1@aC@jgHf
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	RDN/Ransom
FireEye	Gen:Variant.Ursu.341962
Emsisoft	Gen:Variant.Ursu.341962 (B)
Jiangmin	Trojan.MSIL.kojq
Avira	TR/Ransom.kabsb
Antiy-AVL	Trojan/Generic.ASMalwS.2962F9B
Microsoft	Ransom:Win32/HiddenTear.gen
GData	Gen:Variant.Ursu.341962
AhnLab-V3	Trojan/Win32.Ransom.C2878011
McAfee	RDN/Ransom
MAX	malware (ai score=99)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Ransom.HiddenTear
Panda	Trj/GdSda.A
Ikarus	Trojan-Ransom.FileCrypter
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Filecoder.IX!tr
AVG	MSIL:Filecoder-AC [Trj]
Qihoo-360	Win32/Ransom.HiddenTear.HgIASOcA

How to remove Ursu.341962?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

How to remove “Ursu.341962”?