Ursu.350187 removal guide

Malware Removal

The Ursu.350187 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Ursu.350187 virus can do?

  • Anomalous binary characteristics

How to determine Ursu.350187?


File Info:

crc32: 40546015
md5: 11dd57302d5b35072da627d35d0058d7
name: 11DD57302D5B35072DA627D35D0058D7.mlw
sha1: fde39cbb1662ba48d88f675fca8e8e30fd1c9543
sha256: 0113a087c27c804b126b2441f94485117d0aa7a0e531cfec60030580d349ad88
sha512: e79dd31e889f7a78374fbb873ee16a1bd10560426102085e6c973e4ed13525a3f9174ef0544a74f3951047cec2f85911f0fc1584aa8eb25663645e199e575322
ssdeep: 192:EWA+Pf1Ojuz8hw5N9RGv2wZ1Tuztb80vjtibtH3Ho2avQZtkfUbOb6kxiY:i4fxUgNy2SYzKASd3Ho25z8AY
type: PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows

Version Info:

0: [No Data]

Ursu.350187 also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Ursu.350187
FireEyeGeneric.mg.11dd57302d5b3507
ALYacGen:Variant.Ursu.350187
BitDefenderGen:Variant.Ursu.350187
InvinceaMal/Generic-S
CyrenW64/Cobalt.A.gen!Eldorado
SymantecBackdoor.Cobalt
APEXMalicious
AvastWin64:Evo-gen [Susp]
ClamAVWin.Trojan.CobaltStrike-9044898-1
KasperskyTrojan.Win64.CozyDuke.yh
RisingTrojan.Shelma!8.1A3D (TFE:5:Z6QXNl3JAcR)
Ad-AwareGen:Variant.Ursu.350187
SophosMal/Generic-S
F-SecureHeuristic.HEUR/AGEN.1139243
TrendMicroBackdoor.Win64.COBEACON.SMA
McAfee-GW-EditionTrojan-FSXF!11DD57302D5B
EmsisoftGen:Variant.Ursu.350187 (B)
AviraHEUR/AGEN.1139243
MAXmalware (ai score=87)
MicrosoftTrojan:Win32/Cobaltstrike.MK!MTB
ArcabitTrojan.Ursu.D557EB
ZoneAlarmTrojan.Win64.CozyDuke.yh
GDataGen:Variant.Ursu.350187
CynetMalicious (score: 100)
ESET-NOD32a variant of Win64/RiskWare.CobaltStrike.Artifact.A
McAfeeTrojan-FSXF!11DD57302D5B
TrendMicro-HouseCallBackdoor.Win64.COBEACON.SMA
YandexTrojan.GenAsa!ZICJWVi3Ujg
SentinelOneStatic AI – Suspicious PE
MaxSecureTrojan.Malware.109567441.susgen
AVGWin64:Evo-gen [Susp]
Cybereasonmalicious.02d5b3

How to remove Ursu.350187?

Ursu.350187 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment