Ursu.718539 removal tips

The Ursu.718539 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.718539 virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Ursu.718539?


File Info:
crc32: A1AB0969
md5: 6ee7e770a229c499efd38feb66d48115
name: update.exe
sha1: 445836b2466057483335ab7ee265d7ba4d71de19
sha256: f9cd419d9776a632651167fac13948286ed22ac52cf7e877218f7b6bbd80843d
sha512: 4ec6f5c50430f9e520a34c3172a45697eb0e09c5c280b065a3661c934ee6bc6fa3f076d85b2d17d3d760aa01c2674f1cd6baa5cea2036f820794f4c0d23c7349
ssdeep: 96:3K1acliAb+arC1fG/JJ732466zn+Rh8aE+N9uq4bFpUfG42vzNt:sacr+o6fGRB3IonYhS+N9utbUfGd5
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2019
Assembly Version: 1.0.0.0
InternalName: update.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: update
ProductVersion: 1.0.0.0
FileDescription: update
OriginalFilename: update.exe

Ursu.718539 also known as:

MicroWorld-eScan	Gen:Variant.Ursu.718539
FireEye	Gen:Variant.Ursu.718539
McAfee	Artemis!6EE7E770A229
AegisLab	Trojan.Win32.Ursu.4!c
BitDefender	Gen:Variant.Ursu.718539
CrowdStrike	win/malicious_confidence_60% (W)
BitDefenderTheta	Gen:NN.ZemsilCO.34108.am0@aGdhX0m
GData	Gen:Variant.Ursu.718539
McAfee-GW-Edition	Artemis
Emsisoft	Gen:Variant.Ursu.718539 (B)
Ikarus	Backdoor.MSIL.Cardinal
Microsoft	Trojan:Win32/Zpevdo.A
Arcabit	Trojan.Ursu.DAF6CB
AhnLab-V3	Malware/Win32.RL_Generic.C3646924
ALYac	Gen:Variant.Ursu.718539
MAX	malware (ai score=82)
Ad-Aware	Gen:Variant.Ursu.718539
APEX	Malicious
SentinelOne	DFI – Malicious PE
Paloalto	generic.ml
Qihoo-360	Generic/Trojan.970

How to remove Ursu.718539?

Ursu.718539 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X