Ursu.350187 removal guide

The Ursu.350187 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.350187 virus can do?

Anomalous binary characteristics

How to determine Ursu.350187?


File Info:
crc32: 40546015
md5: 11dd57302d5b35072da627d35d0058d7
name: 11DD57302D5B35072DA627D35D0058D7.mlw
sha1: fde39cbb1662ba48d88f675fca8e8e30fd1c9543
sha256: 0113a087c27c804b126b2441f94485117d0aa7a0e531cfec60030580d349ad88
sha512: e79dd31e889f7a78374fbb873ee16a1bd10560426102085e6c973e4ed13525a3f9174ef0544a74f3951047cec2f85911f0fc1584aa8eb25663645e199e575322
ssdeep: 192:EWA+Pf1Ojuz8hw5N9RGv2wZ1Tuztb80vjtibtH3Ho2avQZtkfUbOb6kxiY:i4fxUgNy2SYzKASd3Ho25z8AY
type: PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows

Version Info:
0: [No Data]

Ursu.350187 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ursu.350187
FireEye	Generic.mg.11dd57302d5b3507
ALYac	Gen:Variant.Ursu.350187
BitDefender	Gen:Variant.Ursu.350187
Invincea	Mal/Generic-S
Cyren	W64/Cobalt.A.gen!Eldorado
Symantec	Backdoor.Cobalt
APEX	Malicious
Avast	Win64:Evo-gen [Susp]
ClamAV	Win.Trojan.CobaltStrike-9044898-1
Kaspersky	Trojan.Win64.CozyDuke.yh
Rising	Trojan.Shelma!8.1A3D (TFE:5:Z6QXNl3JAcR)
Ad-Aware	Gen:Variant.Ursu.350187
Sophos	Mal/Generic-S
F-Secure	Heuristic.HEUR/AGEN.1139243
TrendMicro	Backdoor.Win64.COBEACON.SMA
McAfee-GW-Edition	Trojan-FSXF!11DD57302D5B
Emsisoft	Gen:Variant.Ursu.350187 (B)
Avira	HEUR/AGEN.1139243
MAX	malware (ai score=87)
Microsoft	Trojan:Win32/Cobaltstrike.MK!MTB
Arcabit	Trojan.Ursu.D557EB
ZoneAlarm	Trojan.Win64.CozyDuke.yh
GData	Gen:Variant.Ursu.350187
Cynet	Malicious (score: 100)
ESET-NOD32	a variant of Win64/RiskWare.CobaltStrike.Artifact.A
McAfee	Trojan-FSXF!11DD57302D5B
TrendMicro-HouseCall	Backdoor.Win64.COBEACON.SMA
Yandex	Trojan.GenAsa!ZICJWVi3Ujg
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.109567441.susgen
AVG	Win64:Evo-gen [Susp]
Cybereason	malicious.02d5b3

How to remove Ursu.350187?

Ursu.350187 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X