Ursu.389066 removal instruction

The Ursu.389066 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.389066 virus can do?

The binary likely contains encrypted or compressed data.

How to determine Ursu.389066?


File Info:
crc32: DE2A4326
md5: e1add2689e2683dee8b52ca15822f7be
name: E1ADD2689E2683DEE8B52CA15822F7BE.mlw
sha1: bb0ddcc35b684b3e5de1d9049c18887908c4f8ad
sha256: cad05675559eb3e6fbd0197ff1596f7af29004067dbbb363308fcbd703bb9539
sha512: 217dcf8c3baf707409f132b9b80b4a1a7243b634dad3580e4ca380fbd9a58a80d4ecb0a51611e5fff0ffa208b8752daf2c356d440844fc89286a6f1496afa6ad
ssdeep: 24576:xA1XFheWdM8LjGmKBiejTeeDczzEbctkm:KAaSHB5TeAMzcctkm
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: White Hen Pantry (C) 2021
Assembly Version: 9.11.1.23
InternalName: x643x645lx6267.exe
FileVersion: 9.11.1.23
CompanyName: White Hen Pantry
LegalTrademarks: 
Comments: 
ProductName: Finast
ProductVersion: 9.11.1.23
FileDescription: Finast
OriginalFilename: x643x645lx6267.exe

Ursu.389066 also known as:

K7AntiVirus	Trojan ( 0057ab641 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Ursu.389066
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Alibaba	Trojan:Win32/starter.ali1000139
K7GW	Trojan ( 0057ab641 )
Cybereason	malicious.89e268
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of MSIL/GenKryptik.FDZW
APEX	Malicious
Avast	Win32:MalwareX-gen [Trj]
Kaspersky	HEUR:Trojan-PSW.MSIL.Agensla.gen
BitDefender	Trojan.GenericKDZ.74128
MicroWorld-eScan	Trojan.GenericKDZ.74128
Tencent	Win32.Trojan.Inject.Auto
Ad-Aware	Trojan.GenericKDZ.74128
Sophos	Generic PUA LL (PUA)
BitDefenderTheta	Gen:NN.ZemsilF.34670.9m0@ae3MJS
McAfee-GW-Edition	BehavesLike.Win32.Generic.dc
FireEye	Generic.mg.e1add2689e2683de
Emsisoft	Trojan.Agent (A)
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Ursu.D5EFCA
AegisLab	Trojan.Win32.Ursu.4!c
GData	Trojan.GenericKDZ.74128
McAfee	RDN/Generic.dx
MAX	malware (ai score=81)
Malwarebytes	Malware.AI.1418741313
TrendMicro-HouseCall	TROJ_GEN.R002H09DD21
Yandex	Trojan.AvsArher.bTJEKx
Ikarus	Trojan.MSIL.Inject
Fortinet	W32/Agensla.FDZW!tr.pws
AVG	Win32:MalwareX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Generic.HgIASSoA

How to remove Ursu.389066?

Ursu.389066 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X