Ursu.784964 (B) malicious file

The Ursu.784964 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ursu.784964 (B) virus can do?

Executable code extraction
Unconventionial language used in binary resources: Korean
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Ursu.784964 (B)?


File Info:
crc32: 428F6DE7
md5: d754fefc226a4aa54c50707b91898ad5
name: hMenu.exe
sha1: fcb1bbeef1401936da8bf54b4f4b00f4046fd6b0
sha256: 3cedcb1b36d5c816ed5a66bef48a848084500f8756a037e7c926de64cced89f1
sha512: 635b9f31c50d62792930e5f35c992314e7ee39fc358e6cbb991eb4480955b3744ce4b90acba6cbe3c0f4cd43cea858e62cc009053af609fdb2f300f0010a5859
ssdeep: 12288:TVBV1V9Vif9/bV4fVmxQ3iV+FNR8t+xuCV:T/rboSfwQysNR8+7
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0412 0x04b0
LegalCopyright: ClikSoft Co.,Ltd
InternalName: hMenu
FileVersion: 1.00
CompanyName: xd074xb9adxc18cxd504xd2b8(xc8fc)
LegalTrademarks: Newxd074xb9ad
ProductName: Newxd074xb9ad
ProductVersion: 1.00
FileDescription: xd55cxbc29xba54xc778xba54xb274
OriginalFilename: hMenu.exe

Ursu.784964 (B) also known as:

MicroWorld-eScan	Gen:Variant.Ursu.784964
FireEye	Gen:Variant.Ursu.784964
McAfee	Artemis!D754FEFC226A
K7AntiVirus	NetWorm ( 700000151 )
BitDefender	Gen:Variant.Ursu.784964
K7GW	NetWorm ( 700000151 )
APEX	Malicious
ClamAV	Win.Worm.Generic-6842389-0
GData	Gen:Variant.Ursu.784964
Ad-Aware	Gen:Variant.Ursu.784964
Emsisoft	Gen:Variant.Ursu.784964 (B)
MAX	malware (ai score=83)
Arcabit	Trojan.Ursu.DBFA44
Microsoft	Trojan:Win32/Azden.B!cl
VBA32	BScope.Trojan.Bitrep
Ikarus	Virus.Win32.Virut

How to remove Ursu.784964 (B)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Ursu.784964 (B) malicious file