Should I remove “Ursu.460278”?

The Ursu.460278 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.460278 virus can do?

Behavioural detection: Executable code extraction – unpacking
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Ursu.460278?


File Info:
name: E2E8FF7EED60544A392B.mlw
path: /opt/CAPEv2/storage/binaries/283ca76c609981a055b0f44d1d776b1c5ae43f16a8d7b80138c2daab6b036e26
crc32: D4AF4EA4
md5: e2e8ff7eed60544a392bce1c5ce665be
sha1: 0a1e74892fa828a0a0696a1c4602b36e354f0853
sha256: 283ca76c609981a055b0f44d1d776b1c5ae43f16a8d7b80138c2daab6b036e26
sha512: 3cb54557700076c5f607dfed2799df54c53edd7325dd2e6af8a82b88c3dfd21b1073fb71ca37b21de98b8a14e46aa5517542a8aa9e560a126b4aee8a9b9f1fc3
ssdeep: 1536:ocllkOmz1asD4ir1p12Lf+eXfADmk9YUiPC1NqZcozjg3ZGiqav/38p3+quyXsAV:oYlkOmz1asD4ir1r2LVvADmk9YUiPC1e
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E163D517A6C4F53BD5804BF41B6686AC1262E83015A24C4BEA073B5F7B72ECBE166353
sha3_384: cfa596b5c5e377eebe264e504ac27432949b5adc2d1328c1d7ffbf19e8b14bf33f5976bfa5fa8b1302736aa05c99ec4e
ep_bytes: 68a0264000e8f0ffffff000000000000
timestamp: 2012-03-19 05:38:59

Version Info:
Translation: 0x0409 0x04b0
CompanyName: Copyright © 2011 Systems Incorporated
FileDescription: Adobe Auto Play
LegalCopyright: Copyright © 2011 Systems Incorporated
LegalTrademarks: Copyright © 2011 Systems Incorporated
ProductName: Adobe Auto Play
FileVersion: 1.05.0001
ProductVersion: 1.05.0001
InternalName: betad
OriginalFilename: betad.exe

Ursu.460278 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ursu.460278
FireEye	Generic.mg.e2e8ff7eed60544a
McAfee	GenericRXAA-AA!E2E8FF7EED60
Cylance	Unsafe
Sangfor	Trojan.Win32.62107.1
CrowdStrike	win/malicious_confidence_90% (W)
BitDefenderTheta	Gen:NN.ZevbaF.34592.em0@ai1APcji
VirIT	Trojan.Win32.Generic.AJNA
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
ClamAV	Win.Dropper.Poison-6823320-0
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Variant.Ursu.460278
NANO-Antivirus	Trojan.Win32.Anaptix.cqnmzg
SUPERAntiSpyware	Trojan.Agent/Gen-Vbkrypt
Avast	Win32:GenMalicious-KJT [Trj]
Tencent	Win32.Trojan.Kazy.Alim
Ad-Aware	Gen:Variant.Ursu.460278
Comodo	Malware@#bcmr79r4xy15
VIPRE	Gen:Variant.Ursu.460278
McAfee-GW-Edition	BehavesLike.Win32.Trojan.km
Emsisoft	Gen:Variant.Ursu.460278 (B)
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Ursu.460278
Google	Detected
Avira	TR/Kazy.62107.1
MAX	malware (ai score=83)
Antiy-AVL	Trojan/Generic.ASMalwS.2FED
Kingsoft	Win32.Hack.Anaptix.bo.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win.Jorik.R456073
VBA32	Backdoor.Anaptix
ALYac	Gen:Variant.Ursu.460278
Rising	Trojan.Win32.Generic.162974AC (C64:YzY0Ot3XZHoufIc2)
Yandex	Trojan.GenAsa!vhau1T5zdhU
Ikarus	Trojan.VB
Fortinet	W32/Jorik_Anaptix.AJ!tr
AVG	Win32:GenMalicious-KJT [Trj]
Cybereason	malicious.eed605
Panda	Generic Malware

How to remove Ursu.460278?

Ursu.460278 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X