Ursu.768572 removal tips

The Ursu.768572 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.768572 virus can do?

The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine Ursu.768572?


File Info:
crc32: 9A36004D
md5: a4cd01526d4524516cade3e955fb02d0
name: A4CD01526D4524516CADE3E955FB02D0.mlw
sha1: 1be9411d329bf238aed786aef21429e23f4a0c1a
sha256: 56f6e2146d6ef658b22fe1e7e9a879edc8f78be4dd6fdf97cc6daf72e119fff1
sha512: 71e39cf84c536ab00d3d89ac1fe97316859cacbfc83f9e2289a89048a9b364506746a5dcdfd730aadd8efd882006a27266b1713645f1372a9986069b02e36f6b
ssdeep: 3072:XD+WMg6SOIhbZ4bN9tQwaDPcBjPQUv/jKhld//osuRJlg:CWMjSOIhiJXTaDUBjPQUvMQBzS
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
LegalCopyright: (C) Miray Software AG
InternalName: applet.networkshares.
FileVersion: 45135
CompanyName: Miray Software AG
ProductName: Symobi 1.8.769
ProductVersion: R45869 (2019/10/21 14:07:28)
FileDescription: Network shares mounter/unmounter applet
OriginalFilename: applet.networkshares.exe
Translation: 0x0000 0x04b0

Ursu.768572 also known as:

Lionic	Trojan.Win32.Ursu.4!c
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Ursu.768572
Sangfor	Suspicious.Win32.Ursu.768572
K7GW	Hacktool ( 700007861 )
Cybereason	malicious.26d452
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:MalwareX-gen [Trj]
BitDefender	Gen:Variant.Ursu.768572
MicroWorld-eScan	Gen:Variant.Ursu.768572
Ad-Aware	Gen:Variant.Ursu.768572
McAfee-GW-Edition	BehavesLike.Win32.Drixed.cc
FireEye	Gen:Variant.Ursu.768572
Emsisoft	Gen:Variant.Ursu.768572 (B)
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Ursu.DBBA3C
GData	Gen:Variant.Ursu.768572
AhnLab-V3	Malware/Win32.Generic.C4180996
McAfee	RDN/Generic.dx
MAX	malware (ai score=81)
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R002H0CIS21
Fortinet	W32/PossibleThreat
AVG	Win32:MalwareX-gen [Trj]

How to remove Ursu.768572?

Ursu.768572 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X