Categories: Malware

Ursu.684232 (B) removal tips

The Ursu.684232 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ursu.684232 (B) virus can do?

Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Ursu.684232 (B)?


File Info:
crc32: A359AE7Amd5: f38a83f056f32a4cb46330f3d5677402name: F38A83F056F32A4CB46330F3D5677402.mlwsha1: fe88b51e620ae61dbb3ca8f7ac1f4218aaac073csha256: bb62e9a2096bac600aca92766dd565477eccc7418e85cf7a1d21e10000cc09dcsha512: 810fb4f6af8c6129ce5c2da280a470b940d7886443250fec1b5c974c31b15197e60b042c825c5b6f859ed4f058e8b1c021c985d6f203325bce60b641e7f487c8ssdeep: 1536:Q3O7iaZT+bkK/XdPs4ztACHA939vQwnjNoWSDXfq1LzcM:Q3UiDo2dPs4Xg91QgrSDXS1Lrtype: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
Translation: 0x0000 0x04b0LegalCopyright: Copyright xa9  2017Assembly Version: 1.0.0.0InternalName: Crypto.exeFileVersion: 1.0.0.0ProductName: CryptoProductVersion: 1.0.0.0FileDescription: CryptoOriginalFilename: Crypto.exe

Ursu.684232 (B) also known as:

K7AntiVirus	Trojan ( 00500fdf1 )
Lionic	Trojan.Win32.Gen.4!c
Cynet	Malicious (score: 99)
ALYac	Trojan.Ransom.Stupid
Cylance	Unsafe
Sangfor	Ransom.Win32.Gen.drp
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Ransom:Win32/Filecoder.4c2faeb1
K7GW	Trojan ( 00500fdf1 )
Cybereason	malicious.056f32
Symantec	Ransom.Cryptolocker
ESET-NOD32	a variant of MSIL/Filecoder.DP
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Ransom.Win32.Gen.drp
BitDefender	Gen:Variant.Ursu.684232
NANO-Antivirus	Trojan.Win32.FileCoder.eoglpy
MicroWorld-eScan	Gen:Variant.Ursu.684232
Tencent	Win32.Trojan.Gen.Ecjy
Ad-Aware	Gen:Variant.Ursu.684232
Sophos	Troj/FTSCoder-A
Comodo	Malware@#k0tkfzwm4vs6
BitDefenderTheta	Gen:NN.ZemsilF.34796.eq0@auV2mKi
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_STUPFTS.A
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.f38a83f056f32a4c
Emsisoft	Gen:Variant.Ursu.684232 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Gen.za
Webroot	W32.Ransom.Gen
Avira	TR/FileCoder.mdqcy
Microsoft	Ransom:MSIL/Cryptolocker.PDA!MTB
Arcabit	Trojan.Ursu.DA70C8
GData	MSIL.Trojan-Ransom.FTSCoder.A
AhnLab-V3	Trojan/Win32.Ransom.C1942593
McAfee	Artemis!F38A83F056F3
MAX	malware (ai score=100)
VBA32	Hoax.Gen
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom_STUPFTS.A
Yandex	Trojan.Filecoder!HPDeK+VvNcE
Ikarus	Trojan.MSIL.Filecoder
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Filecoder.FG!tr.ransom
AVG	Win32:Malware-gen
Qihoo-360	Win32/Ransom.Filecoder.HwMAdWMA