Ursu.346170 removal tips

The Ursu.346170 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.346170 virus can do?

Network activity detected but not expressed in API logs

How to determine Ursu.346170?


File Info:
crc32: B1965047
md5: ba2be6d7317c188d6029899cdb419b96
name: BA2BE6D7317C188D6029899CDB419B96.mlw
sha1: 43ed8d2998d255de42622cba37733a2dbc898c46
sha256: ef2a15f6b8ccb195d4f9be0206ddf6cf6db68ea4e7d6d73cc09df10402d1e2c3
sha512: be6be19d9cfe7602ba0c1950e00be702031321e728de683141d4ae5018021b536dd08c17288d5d01b0aa19fd0349868be4c9d3399de95357403f6148ff51cf85
ssdeep: 6144:KcI/hZYEOzJ+qEqpshRbRxK4gTn4qvTx62Ryph6gp3MYP:3wEpsTbehnZTx6Vpfp3M
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 Drur 2011
Assembly Version: 1.1.0.0
InternalName: Fu.exe
FileVersion: 1.1.0.0
CompanyName: Drur
LegalTrademarks: 
Comments: 
ProductName: AppInForm
ProductVersion: 1.1.0.0
FileDescription: AppInForm
OriginalFilename: Fu.exe

Ursu.346170 also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen15.2008
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Ursu.346170
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_90% (W)
Cybereason	malicious.7317c1
Cyren	W32/MSIL_Troj.BKO.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.ACQA
APEX	Malicious
Avast	FileRepMetagen [Malware]
Kaspersky	UDS:Trojan-PSW.MSIL.Agensla.gen
BitDefender	Gen:Variant.Ursu.346170
MicroWorld-eScan	Gen:Variant.Ursu.346170
Ad-Aware	Gen:Variant.Ursu.346170
BitDefenderTheta	Gen:NN.ZemsilF.34110.Om0@a48sU9f
McAfee-GW-Edition	BehavesLike.Win32.Generic.jh
FireEye	Generic.mg.ba2be6d7317c188d
Emsisoft	Gen:Variant.Ursu.346170 (B)
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Gen:Variant.Ursu.346170
McAfee	Artemis!BA2BE6D7317C
MAX	malware (ai score=84)
Ikarus	Win32.Outbreak
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/GenKryptik.FJOK!tr
AVG	FileRepMetagen [Malware]
Paloalto	generic.ml

How to remove Ursu.346170?

Ursu.346170 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X