How to remove “Ursu.671415”?

The Ursu.671415 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.671415 virus can do?

Reads data out of its own binary image
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs

How to determine Ursu.671415?


File Info:
crc32: C004131B
md5: c181f1a9a5012e92b7c408dfa18a2a05
name: C181F1A9A5012E92B7C408DFA18A2A05.mlw
sha1: b6e00ee1e2defaa96203c56f5d724cccb99a7c3a
sha256: 053173d76ba2d999b4c720de9b733e867c39880bd09e5fad08abbe8346c72812
sha512: 035e1179652dd1fbc404b0a78ceceab455362f99b113b8a419c5c07d4e470bebcbc855d59197dffd14822ab889a048808d079f704130261b0d22b04f6091d1e1
ssdeep: 6144:Vc0h522p3l04ZMSmIp3Uy28uhyXiHIg/PoPm35G3G3NEXyq+ZCYxr9:5hxp3lZnT9bDeHZ/KmpG3G3NWmCYL
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Ursu.671415 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Malicious.4!e
DrWeb	BackDoor.IRC.Bot.3252
ALYac	Gen:Variant.Ursu.671415
Malwarebytes	Generic.Malware/Suspicious
BitDefender	Gen:Variant.Ursu.671415
Cybereason	malicious.9a5012
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/GameHack.BYR potentially unsafe
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Ransom.Win32.Foreign.nxti
NANO-Antivirus	Trojan.Win32.Graftor.evqzsi
MicroWorld-eScan	Gen:Variant.Ursu.671415
Tencent	Win32.Trojan.Foreign.Swub
Sophos	Generic PUA FK (PUA)
Comodo	Malware@#1ry7dbx2a8uhk
BitDefenderTheta	Gen:NN.ZedlaF.34110.gu5@aKsHKJni
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.gc
FireEye	Generic.mg.c181f1a9a5012e92
Emsisoft	Gen:Variant.Ursu.671415 (B)
SentinelOne	Static AI – Malicious PE
Antiy-AVL	Trojan[Ransom]/Win32.Foreign
ZoneAlarm	Trojan-Ransom.Win32.Foreign.nxti
GData	Gen:Variant.Ursu.671415
McAfee	Artemis!C181F1A9A501
MAX	malware (ai score=98)
VBA32	TrojanRansom.Foreign
Ikarus	Trojan-Ransom.Foreign
Fortinet	W32/GameHack.BYR

How to remove Ursu.671415?

Ursu.671415 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X