Malware

Ursu.595868 removal

Malware Removal

The Ursu.595868 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ursu.595868 virus can do?

  • Anomalous binary characteristics

How to determine Ursu.595868?


File Info:

crc32: 7841DF3D
md5: f9c0055f370d70e6d8b55d97fbe3bc7f
name: boster.exe
sha1: dc3bfd4c94c0a80b2397fd49864826f76ad06ef0
sha256: b24f5a502a9c02786d64e52f3979f1519128f116cf2ad49df4711ec7a50f8ed7
sha512: e6c7614deb5b1e1197f155d196ef86e1e4636ee16d39fe001016ae4dd4589b9882e44f0373d0fa5aa7d54a4aec3e9c7761dbb9db7c1e2704f21689d8c0a7e99d
ssdeep: 192:117lnCRHOzH9iAM0FE97z9fLe5Qo1VeTocVi2dEDj6fUFz:117lnhH96a4HVe5Qo1VszVZduj6f8z
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2020
Assembly Version: 1.0.0.0
InternalName: discord token grabber.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName: discord token grabber
ProductVersion: 1.0.0.0
FileDescription: discord token grabber
OriginalFilename: discord token grabber.exe

Ursu.595868 also known as:

MicroWorld-eScanGen:Variant.Ursu.595868
FireEyeGeneric.mg.f9c0055f370d70e6
CAT-QuickHealTrojanpws.Msil
McAfeePWS-FCOU!F9C0055F370D
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.MSIL.Agent.i!c
K7AntiVirusTrojan ( 700000121 )
BitDefenderGen:Variant.Ursu.595868
K7GWTrojan ( 700000121 )
Cybereasonmalicious.c94c0a
TrendMicroTrojanSpy.MSIL.ANARCHYGRAB.SMTH
F-ProtW32/MSIL_Agent.BKU.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
GDataGen:Variant.Ursu.595868
KasperskyHEUR:Trojan-PSW.MSIL.Agent.gen
AlibabaTrojanPSW:MSIL/Dcstl.dcee3c5f
RisingStealer.AnarchyGrabber!1.C254 (CLOUD)
Ad-AwareGen:Variant.Ursu.595868
EmsisoftGen:Variant.Ursu.595868 (B)
ComodoMalware@#2uf59q0ga3xpi
F-SecureHeuristic.HEUR/AGEN.1106613
DrWebTrojan.PWS.DiscordNET.2
ZillyaTrojan.Agent.Win32.1346536
SophosMal/Generic-S
IkarusTrojan-Spy.AnarchyGrabber
CyrenW32/MSIL_Agent.BKU.gen!Eldorado
AviraHEUR/AGEN.1106613
MAXmalware (ai score=81)
Antiy-AVLTrojan[PSW]/MSIL.Agent
ArcabitTrojan.Ursu.D9179C
ZoneAlarmHEUR:Trojan-PSW.MSIL.Agent.gen
MicrosoftPWS:MSIL/Dcstl.GG!MTB
BitDefenderThetaGen:NN.ZemsilF.34130.am0@aaPUXkp
ALYacGen:Variant.Ursu.595868
MalwarebytesSpyware.PasswordStealer
PandaTrj/GdSda.A
ESET-NOD32a variant of MSIL/PSW.Agent.RFZ
TrendMicro-HouseCallTrojanSpy.MSIL.ANARCHYGRAB.SMTH
TencentMsil.Trojan-qqpass.Qqrob.Egea
YandexTrojan.PWS.Agent!iLdhoGojbNY
FortinetMSIL/Agent.RFZ!tr
AVGWin32:Trojan-gen
AvastWin32:Trojan-gen
Qihoo-360Generic/Trojan.PSW.634

How to remove Ursu.595868?

Ursu.595868 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment