How to remove “Ursu.614232”?

The Ursu.614232 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.614232 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Ursu.614232?


File Info:
name: 4EE4F562F5C82FB29A69.mlw
path: /opt/CAPEv2/storage/binaries/aec3b3695e0e0ddf888f4dad977bfe01b0d11126fd4a6df096f6297cb4113046
crc32: 67244DF8
md5: 4ee4f562f5c82fb29a6912c7557d28a3
sha1: e61ca432fef67c19172d39a245886a91132cd18c
sha256: aec3b3695e0e0ddf888f4dad977bfe01b0d11126fd4a6df096f6297cb4113046
sha512: d4b03c370079da6eed2d449427de01357eb4fd4189ae6e20d7ba1f56c54f6b23fd3561e4f7899cb47e462890e7ce12aa9db63c566601ec477f42ef18d4b45cc6
ssdeep: 768:baFKHd+r0hiP4VWjs5nwNubkRS/oFGTcQaN751hDWmvd3D1KGcynj5e06EwQ/314:baM2jhDJV3Jkynj5f6Jynj5f6l
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18BF4FA5135A4CA11D02433F85822C6B402A2BDE45D70DA4639F97FAF7FB6A83ED1760E
sha3_384: 1c6bfed1bb0b2c6d42ca0658b944ff13b10b27230a464155ac6961a3167473841d742057a69d871fb5e3054350e68fd4
ep_bytes: ff250020400000000000000000000000
timestamp: 2016-09-08 20:23:50

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: Email Spammer
FileVersion: 1.0.0.0
InternalName: Email Spammer.exe
LegalCopyright: Copyright ©  2016
LegalTrademarks: 
OriginalFilename: Email Spammer.exe
ProductName: Email Spammer
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Ursu.614232 also known as:

MicroWorld-eScan	Gen:Variant.Ursu.614232
Skyhigh	Artemis
McAfee	Artemis!4EE4F562F5C8
BitDefender	Gen:Variant.Ursu.614232
Emsisoft	Gen:Variant.Ursu.614232 (B)
VIPRE	Gen:Variant.Ursu.614232
MAX	malware (ai score=83)
Antiy-AVL	Trojan/Win32.Agent
Arcabit	Trojan.Ursu.D95F58
GData	Gen:Variant.Ursu.614232
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H09JA23
Rising	Malware.Strealer!8.1EF (CLOUD)
DeepInstinct	MALICIOUS

How to remove Ursu.614232?

Ursu.614232 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X