Should I remove “Ursu.759117”?

The Ursu.759117 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.759117 virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Authenticode signature is invalid

How to determine Ursu.759117?


File Info:
name: FD2301406A62ED3415A0.mlw
path: /opt/CAPEv2/storage/binaries/962c30d90d93c46a128c3e99872e70e78b8242d73476e67363d5493dc6c4c8e7
crc32: 87E28624
md5: fd2301406a62ed3415a02e95b5c55e3a
sha1: 6b7416d6a6016567c0bbf32604edc09eae0a2514
sha256: 962c30d90d93c46a128c3e99872e70e78b8242d73476e67363d5493dc6c4c8e7
sha512: a7ba6c75a243cb1a30242102a9296faf27385bcbd6baf567abc660bbb60de1cda17fd6f1840504898427162e25fb7418228272e202063adc5ed669689cc85ce8
ssdeep: 12288:4c9t2SllILpqlG4PRaotu6gxSAAoFiasxA1Hvhw2K8RTwyZIJUDdNVFLdGgjwgXf:4cLEpqE4PRa76ZAATZxApfpRTwyZoUDf
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10FF42285BCC409E3C82B133554FBDC317BBF5E24CA26224667E9BB35297734A66631C2
sha3_384: 878c195dfd1d7e51380b0c5a0801d86a4db0a2722f35d8452a8e1cbc24c77e27f94ae5333f645822ab8255262f8982df
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-12-05 22:50:46

Version Info:
0: [No Data]

Ursu.759117 also known as:

Lionic	Virus.Win32.Generic.m2FO
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ursu.759117
FireEye	Gen:Variant.Ursu.759117
McAfee	Artemis!FD2301406A62
K7AntiVirus	Unwanted-Program ( 0052f55b1 )
K7GW	Unwanted-Program ( 0052f55b1 )
Cybereason	malicious.06a62e
Cyren	W32/Trojan.QRHR-1429
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Keygen.ACE potentially unsafe
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Ursu.759117
SUPERAntiSpyware	Hack.Tool/Gen-Keygen
Emsisoft	Gen:Variant.Ursu.759117 (B)
VIPRE	Gen:Variant.Ursu.759117
McAfee-GW-Edition	RDN/Generic.hbg
Trapmine	malicious.moderate.ml.score
Sophos	Generic ML PUA (PUA)
Avira	HEUR/AGEN.1255408
MAX	malware (ai score=89)
Antiy-AVL	Trojan/Win32.Wacatac
Arcabit	Trojan.Ursu.DB954D
GData	Gen:Variant.Ursu.759117
Google	Detected
Acronis	suspicious
ALYac	Gen:Variant.Ursu.759117
Fortinet	Riskware/KeyGen

How to remove Ursu.759117?

Ursu.759117 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X