Ursu.375411 removal instruction

The Ursu.375411 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ursu.375411 virus can do?

• Executable code extraction
• Creates RWX memory
• A process attempted to delay the analysis task.
• Reads data out of its own binary image
• Drops a binary and executes it
• HTTP traffic contains suspicious features which may be indicative of malware related traffic
• Performs some HTTP requests
• Installs itself for autorun at Windows startup
• Harvests information related to installed instant messenger clients
• Makes SMTP requests, possibly sending spam or exfiltrating data.
• Anomalous binary characteristics

Related domains:

How to determine Ursu.375411?

File Info:
crc32: 81E0E5B2
md5: 774bfd6122f6fb914859ad3cf93ca233
name: 774BFD6122F6FB914859AD3CF93CA233.mlw
sha1: 990cc8b74da2bd9ffee86cc89f8927f9ed642fb2
sha256: 2cdf50eb103013ac071c258532f1813676045e4a28e9db9666726bf8feaea5b6
sha512: 46c05d186525c3215a8ea73a9a73d057e40a2756a91ce6fc82dbe54bc3ecfcb568c4c0b6325f0263bfb43585ffbc310140e19e62977d2a6493cdc43433730d82
ssdeep: 12288:xq+g88qNxbgs5dXOaaNGjrsNmp7tkkRJe5Lo2ynt/lrgDjKNLS1w541rAMpmVGD:49Ys6OaaMssppTRJ6LofeDjD1wLq
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Ursu.375411 also known as:

How to remove Ursu.375411?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.