Categories: Malware

Ursu.519232 malicious file

The Ursu.519232 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ursu.519232 virus can do?

Reads data out of its own binary image
Uses Windows utilities for basic functionality
Creates a hidden or system file

How to determine Ursu.519232?


File Info:
crc32: 0571CB32md5: 02631fa3a1994d9ff7966592c1647d51name: 02631FA3A1994D9FF7966592C1647D51.mlwsha1: 91c39b95b082b21fdd5b034010830f3dacf67f43sha256: 6a0672e313ab4093cc9525cae933eb6e02e32c42cecf30b1626165b9476b5386sha512: 489f4189ea82baa610e968d06b64ece0f4a573ea49328dc609519653d80e63a23647fd60c2d96baf09f71bb1d927c41bc8e4122baa31f7f51fcd26c0b5679a30ssdeep: 12288:JhkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcbNsKqhBkEFY9ddNdlYaTW3p:XRmJkcoQricOIQxiZY1WNsNkFjYaTtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
CompiledScript: AutoIt v3 Script: 3, 3, 8, 1FileVersion: 3, 3, 8, 1FileDescription: Translation: 0x0809 0x04b0

Ursu.519232 also known as:

K7AntiVirus	Trojan ( 700000111 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.24597
ClamAV	Win.Malware.Autoit-6992337-0
CAT-QuickHeal	Ransom.AutoIT.CryptorMicroP.A
ALYac	Gen:Variant.Ursu.519232
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Trojan ( 700000111 )
Cybereason	malicious.3a1994
Symantec	Ransom.Cryptolocker
ESET-NOD32	multiple detections
APEX	Malicious
Avast	AutoIt:Ransom-L [Trj]
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Banker.Win32.Agent.yhk
BitDefender	Generic.Ransom.Locked.3D08AF5C
NANO-Antivirus	Trojan.Win32.Bankfraud.efjtmx
MicroWorld-eScan	Generic.Ransom.Locked.3D08AF5C
Ad-Aware	Generic.Ransom.Locked.3D08AF5C
Sophos	ML/PE-A
BitDefenderTheta	AI:Packer.4A72867A16
TrendMicro	Ransom.AutoIt.CRYPTEIGHT.SMTH
McAfee-GW-Edition	BehavesLike.Win32.Dropper.bh
FireEye	Generic.mg.02631fa3a1994d9f
Emsisoft	Generic.Ransom.Locked.3D08AF5C (B)
Jiangmin	Trojan.Banker.Agent.cal
Avira	TR/Dropper.Gen
eGambit	Unsafe.AI_Score_83%
Kingsoft	Win32.Troj.Banker.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Ursu.519232 (2x)
AhnLab-V3	Trojan/Win32.Banki.R213572
Acronis	suspicious
McAfee	Dropper-AutoIt.o
MAX	malware (ai score=81)
Malwarebytes	Trojan.Agent.AI
TrendMicro-HouseCall	Ransom.AutoIt.CRYPTEIGHT.SMTH
Rising	Ransom.Lokmwiz!8.E16C (TFE:5:gtaUGYqxJ1I)
Yandex	Trojan.GenAsa!IZxoZO1iAfE
Ikarus	Trojan-Ransom.Crypt888
Fortinet	W32/Filecoder.DYB!tr
AVG	AutoIt:Ransom-L [Trj]
Qihoo-360	HEUR/QVM10.1.A417.Malware.Gen