How to remove “Ursu.78702”?

The Ursu.78702 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.78702 virus can do?

How to determine Ursu.78702?


File Info:
crc32: 09FFB323
md5: 2a3ef084f540a92a5dea210956c3850f
name: 2A3EF084F540A92A5DEA210956C3850F.mlw
sha1: a05c399aeaf364f83fe38d8125b520b588b39b42
sha256: fea0d7956b984f1fd17bbe31d0a5438053c527c42f087a312ffed976e261e3dc
sha512: c4ad37ce7c6969730002687ef429c3638f7348afdc41b240e1beb3463af7e2beca6d40948208eae93aab8448d4cc846203fbf0af768ab9f657a1e4b7c79b9a46
ssdeep: 768:Gm/bfBctRlmRVnjg0q7kGa3uBL+VxKSAsaTjy:t/bp1Lqkf+BLuYjy
type: PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 Microsoft 2018
Assembly Version: 1.0.0.0
InternalName: ConsoleApplication5.exe
FileVersion: 1.0.0.0
CompanyName: Microsoft
ProductName: ConsoleApplication5
ProductVersion: 1.0.0.0
FileDescription: ConsoleApplication5
OriginalFilename: ConsoleApplication5.exe

Ursu.78702 also known as:

K7AntiVirus	Trojan ( 0052376e1 )
Lionic	Trojan.MSIL.Generic.4!c
Elastic	malicious (high confidence)
DrWeb	BackDoor.RevetRat.2
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Ursu.78702
Cylance	Unsafe
Zillya	Trojan.Kryptik.Win32.1516614
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:MSIL/Kryptik.b92ca4cc
K7GW	Trojan ( 0052376e1 )
Cybereason	malicious.4f540a
Cyren	W32/MSIL_Bladabindi.AE.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.MNZ
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan.MSIL.Generic
BitDefender	Gen:Variant.Ursu.78702
NANO-Antivirus	Trojan.Win32.RevetRat.exkdas
MicroWorld-eScan	Gen:Variant.Ursu.78702
Tencent	Msil.Trojan.Generic.Hqvu
Ad-Aware	Gen:Variant.Ursu.78702
Sophos	Mal/Generic-S
Comodo	Malware@#2w2n1xb3mtdj4
BitDefenderTheta	Gen:NN.ZemsilF.34236.hq0@auX@Mcl
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0PJT21
McAfee-GW-Edition	GenericRXFF-FP!2A3EF084F540
FireEye	Generic.mg.2a3ef084f540a92a
Emsisoft	Gen:Variant.Ursu.78702 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1105800
Antiy-AVL	Trojan/Generic.ASMalwS.24141FD
Microsoft	Backdoor:Win32/Bladabindi!ml
GData	Gen:Variant.Ursu.78702
McAfee	GenericRXFF-FP!2A3EF084F540
MAX	malware (ai score=66)
VBA32	Backdoor.RevetRat
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0PJT21
Yandex	Trojan.Agent!PChUfsuTnWI
Ikarus	Trojan.MSIL.Crypt
Fortinet	MSIL/GenKryptik.BLMT!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Ursu.78702?

Ursu.78702 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X