How to remove "Ursu.605678"?

The Ursu.605678 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ursu.605678 virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Ursu.605678?


File Info:
crc32: 0A592AE0
md5: 4efa6676766aaff639881bf9547dbe79
name: 4EFA6676766AAFF639881BF9547DBE79.mlw
sha1: 5512bc443f52e17541ae5c3f1ee688e422652924
sha256: 733f6836398b92077fba7ce94baed129880994513aaba796bedaf191864de6f3
sha512: 26243dfbb800ba61ab272a965ee80fdf430436e2c86546baa819b5ec8d581d4b8e1233174ba1f211e185cab71ba23ec067bb918626961c68aaef525cef64f8d7
ssdeep: 3072:3zEHTGPGcgaocvVFiRuEJy14DUEjRVhnIPE54h6xrab1qDO5LfJNRuq4CHYOOOM:3zEHTjZVF4hYSrJvV4k
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: andreas.dallmeier@gfk.com
Assembly Version: 1.0.0.0
InternalName: OneDrive.exe
FileVersion: 1.0.0
CompanyName: OneDrive
Comments: Report OneDrive Configuration for each user on each NGW device
ProductName: OneDrive Reporter
ProductVersion: 1.0
FileDescription: OneDrive
OriginalFilename: OneDrive.exe

Ursu.605678 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ursu.605678
ALYac	Gen:Variant.Ursu.605678
AegisLab	Trojan.Win32.Ursu.4!c
Sangfor	Suspicious.Win32.Ursu.605678
BitDefender	Gen:Variant.Ursu.605678
Cybereason	malicious.6766aa
APEX	Malicious
Ad-Aware	Gen:Variant.Ursu.605678
Emsisoft	Gen:Variant.Ursu.605678 (B)
McAfee-GW-Edition	RDN/Generic.dx
FireEye	Generic.mg.4efa6676766aaff6
MAX	malware (ai score=81)
Arcabit	Trojan.Ursu.D93DEE
GData	Gen:Variant.Ursu.605678
McAfee	RDN/Generic.dx
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002H09BN21
Fortinet	PossibleThreat.PALLAS.H
BitDefenderTheta	Gen:NN.ZemsilF.34590.Jm0@aySa7dl
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Generic.HgIASPkA

How to remove Ursu.605678?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

How to remove “Ursu.605678”?