Malware

Ursu.385362 information

Malware Removal

The Ursu.385362 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ursu.385362 virus can do?

  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Ursu.385362?


File Info:

crc32: 9AA872A4
md5: bce04384f19ef9873f94ad7a74bddb9b
name: The-Escapists-2-V1.1.7-Trainer-9-MrAntiFun.exe
sha1: f6e652380ee22662611efab304788c25d20313ef
sha256: c863d87b96c35b0b7b26770213ba860b995caf7a5056cdf252ec2198d216fad5
sha512: 0c9c0e2a74819243d2c4d14232ad432da2d4f9c45d5d08a630b0d0effa1ed4a4447a2e023b8334e5bb6573478aa5554a2ef921e16b1ecc12223ce89a2224d2e4
ssdeep: 12288:tlm15jLjqux1ANozInNcOOjCHieL1Gb0LAng/IOp03Vng/6Bl5JX5VV9:tk11n1A+NnWH7xGb00WIo0ZFlfX5D9
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

LegalCopyright: Copyrights MrAntiFun.net xa9 2013-2018
InternalName: MrAntiFun
FileVersion: 1.02
CompanyName: MrAntiFun.net
LegalTrademarks1: MrAntiFun
LegalTrademarks2: MrAntiFun.net
ProductName: MrAntiFun Trainer Engine
ProductVersion: 1.02
FileDescription: MrAntiFun Trainer Engine
OriginalFilename: Trainer.exe
Translation: 0x0409 0x04e4

Ursu.385362 also known as:

MicroWorld-eScanGen:Variant.Ursu.385362
FireEyeGeneric.mg.bce04384f19ef987
CAT-QuickHealTrojan.IGENERIC
McAfeeRDN/Generic.hbg
CylanceUnsafe
AlibabaPUA:Win32/Generic.30f95f2a
Invinceaheuristic
SymantecML.Attribute.HighConfidence
TrendMicro-HouseCallTROJ_GEN.R002C0OIR18
Paloaltogeneric.ml
BitDefenderGen:Variant.Ursu.385362
AegisLabTrojan.Win32.Mikey.4!c
AvastWin32:Malware-gen
Ad-AwareGen:Variant.Ursu.385362
ComodoMalware@#wiwm2gnew91w
TrendMicroTROJ_GEN.R002C0OIR18
McAfee-GW-EditionRDN/Generic.hbg
EmsisoftGen:Variant.Ursu.385362 (B)
SentinelOneDFI – Malicious PE
CyrenW32/Trojan.LJCH-1420
WebrootW32.Malware.Gen
FortinetPossibleThreat
Endgamemalicious (high confidence)
ArcabitTrojan.Ursu.D5E152
MicrosoftTrojan:Win32/Occamy.C
Acronissuspicious
ALYacGen:Variant.Ursu.385362
MAXmalware (ai score=99)
GDataGen:Variant.Ursu.385362
AVGWin32:Malware-gen
Cybereasonmalicious.4f19ef
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Ursu.385362?

Ursu.385362 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment