Categories: Malware

Ursu.631620 removal

The Ursu.631620 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ursu.631620 virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Chinese
The binary likely contains encrypted or compressed data.
Checks for the presence of known windows from debuggers and forensic tools
Anomalous binary characteristics

How to determine Ursu.631620?


File Info:
crc32: EAC89EB6md5: 1de54533a8b2b76016b17afb5688d6dbname: pccc2015pjbd_ttrar.exesha1: 4a70bf06ba457244de5a7be98ae4ec4e9be5d9bbsha256: a0f801444b33d661cf69aab46948d7a3f64b0196882f63917d4e0bb0d4fbf92bsha512: 109131bf4ad230e716fa239483c46b17dbc5a4848843848a77b42b924ee06116b5c2b10d260d3b5e6590aa784ce52e6d7cd55980d2b06992a9ae22d3d7ffdae3ssdeep: 24576:UysbVD0d8fV1sMaL78PufhK/cRgOnmq9g67uMk:UyuXV1VaL7GuqcOU7m67Atype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: PainteRInternalName: Universal Adobe PatcherFileVersion: 1.5.0.0CompanyName: PainteRProductName: Universal Adobe PatcherProductVersion: 1.5.0.0FileDescription: Universal Adobe PatcherOriginalFilename: adobesnr.exeTranslation: 0x0004 0x03a8

Ursu.631620 also known as:

MicroWorld-eScan	Gen:Variant.Ursu.631620
CAT-QuickHeal	Trojan.IGENERIC
McAfee	Artemis!1DE54533A8B2
Cylance	Unsafe
AegisLab	Riskware.Win32.Ursu.1!c
Sangfor	Malware
BitDefender	Gen:Variant.Ursu.631620
K7GW	Unwanted-Program ( 004d8e041 )
K7AntiVirus	Unwanted-Program ( 004d8e041 )
Symantec	PUA.Keygen
ESET-NOD32	a variant of Win32/HackTool.Patcher.CH potentially unsafe
APEX	Malicious
Alibaba	HackTool:Win32/Patcher.f5cb3f1e
Ad-Aware	Gen:Variant.Ursu.631620
Emsisoft	Application.Keygen (A)
Zillya	Tool.Patcher.Win32.27612
McAfee-GW-Edition	BehavesLike.Win32.PUP.dc
Trapmine	suspicious.low.ml.score
FireEye	Gen:Variant.Ursu.631620
Sophos	Generic PUA EK (PUA)
Webroot	W32.Hack.Tool
MAX	malware (ai score=99)
Arcabit	Trojan.Ursu.D9A344
Microsoft	HackTool:Win32/Agent
BitDefenderTheta	Gen:NN.ZelphiF.34096.4O0aa47soxpG
ALYac	Gen:Variant.Ursu.631620
VBA32	TScope.Trojan.Delf
TrendMicro-HouseCall	TROJ_GEN.R002H09J119
Rising	Malware.Heuristic!ET#96% (CLOUD)
eGambit	Unsafe.AI_Score_99%
GData	Gen:Variant.Ursu.631620
MaxSecure	Trojan.Malware.74603625.susgen