Malware

Ursu.554020 malicious file

Malware Removal

The Ursu.554020 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ursu.554020 virus can do?

    Related domains:

    z.whorecord.xyz
    a.tomx.xyz

    How to determine Ursu.554020?

    
    

    File Info:

    crc32: B465A4F9
    md5: 627224f34bc1194330c5d667fa2b6c5f
    name: 627224F34BC1194330C5D667FA2B6C5F.mlw
    sha1: 4a74374b9db9955a1d9b9d2fd2ff96fae608bcc8
    sha256: 40817295475c05df27a119b96aef9488c92d8992e434748b8771dad079f6f28f
    sha512: 50fbe69c474907057e5cb2a2a8b8ce3999d603f979f194223389e284144809935dbbe4bc535c4e6f6481c4163240198cde8241e955973ad5867e6b946c2b30cc
    ssdeep: 6144:fAoVrVufZCfde16lzuwRS0lt/coecDYSVg2t8R+bBHXiFOHkNPJG:IovWwde1OV/LDYH2Tb8ckn
    type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

    Version Info:

    0: [No Data]

    Ursu.554020 also known as:

    LionicTrojan.Win32.Generic.lDMp
    Elasticmalicious (high confidence)
    DrWebWin32.HLLW.Autoruner.25074
    CynetMalicious (score: 100)
    ALYacGen:Variant.Ursu.554020
    CylanceUnsafe
    SangforTrojan.Win32.Save.a
    CrowdStrikewin/malicious_confidence_100% (D)
    AlibabaRansom:Win32/Blocker.117d30aa
    Cybereasonmalicious.34bc11
    SymantecML.Attribute.HighConfidence
    ESET-NOD32a variant of MSIL/Injector.AOI
    APEXMalicious
    AvastWin32:Malware-gen
    ClamAVWin.Trojan.Delf-6748643-0
    KasperskyTrojan-Ransom.Win32.Blocker.bayk
    BitDefenderGen:Variant.Ursu.554020
    NANO-AntivirusTrojan.Win32.Blocker.btlipu
    MicroWorld-eScanGen:Variant.Ursu.554020
    TencentWin32.Trojan.Blocker.blhi
    Ad-AwareGen:Variant.Ursu.554020
    SophosMal/Generic-S
    ComodoMalware@#2bz3tl651u9ng
    BitDefenderThetaGen:NN.ZemsilF.34790.!mW@ayx7udl
    VIPRETrojan.Win32.Generic!BT
    McAfee-GW-EditionBehavesLike.Win32.Generic.dm
    FireEyeGeneric.mg.627224f34bc11943
    EmsisoftGen:Variant.Ursu.554020 (B)
    SentinelOneStatic AI – Malicious PE
    AviraTR/Barys.7356.173
    eGambitUnsafe.AI_Score_98%
    Antiy-AVLTrojan/Generic.ASMalwS.1673F5
    MicrosoftTrojanDropper:O97M/GraceWire.BK!MTB
    GDataGen:Variant.Ursu.554020
    TACHYONTrojan/W32.DN-Blocker.1020928
    McAfeeArtemis!627224F34BC1
    MAXmalware (ai score=99)
    VBA32Hoax.Blocker
    PandaGeneric Malware
    YandexTrojan.Blocker!tJvryd8mRTs
    IkarusTrojan.MSIL.Injector
    FortinetMSIL/Injector.AOI
    AVGWin32:Malware-gen
    Qihoo-360Win32/Ransom.Blocker.HgIASOcA

    How to remove Ursu.554020?

    Ursu.554020 removal tool
    • Download and install GridinSoft Anti-Malware.
    • Open GridinSoft Anti-Malware and perform a “Standard scan“.
    • Move to quarantine” all items.
    • Open “Tools” tab – Press “Reset Browser Settings“.
    • Select proper browser and options – Click “Reset”.
    • Restart your computer.

    About the author

    Paul Valéry

    I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

    Leave a Comment