How to remove “Ursu.812863”?

The Ursu.812863 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.812863 virus can do?

Network activity detected but not expressed in API logs

How to determine Ursu.812863?


File Info:
crc32: 925A6FA1
md5: cfb394eec58cf263e700f5d8d9b726f8
name: __________________.exe
sha1: cf60d5c03558cfedaf8bd948bf3f81e0fda166c3
sha256: 11f7efbda41e7be851540555d0dc98b7eed3cb10639dc1a49a96c13834b39ad7
sha512: 13e1f4a5b00dbe595567d117755ecb3fa9a5b8400f33aca0af5be5aa025c837948fc209e10d9ca1b2530f490e93c03cd1ed1df71a3a14a732a1305dccef1b83c
ssdeep: 12288:OaMT55Fdgwz5cZQ4/eiqdZ5ayruecr7kTajwuh+3wbwI2Kyjxe4K2P6:OaMpzLayrvcr7kT4CI2Kyjx3K
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 GoStar 2016
Assembly Version: 2.5.7410.18002
InternalName: Ds.exe
FileVersion: 2.5.7410.18002
CompanyName: GoStar
LegalTrademarks: 
Comments: Ds
ProductName: x4e39x6731x8f6fx4ef6x7ba1x5bb6
ProductVersion: 2.5.7410.18002
FileDescription: x4e39x6731x8f6fx4ef6x7ba1x5bb6
OriginalFilename: Ds.exe

Ursu.812863 also known as:

MicroWorld-eScan	Gen:Variant.Ursu.812863
McAfee	Artemis!CFB394EEC58C
AegisLab	Trojan.Win32.Ursu.4!c
BitDefender	Gen:Variant.Ursu.812863
Arcabit	Trojan.Ursu.DC673F
Ad-Aware	Gen:Variant.Ursu.812863
McAfee-GW-Edition	Artemis
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Variant.Ursu.812863 (B)
MAX	malware (ai score=89)
Microsoft	Trojan:Win32/Wacatac.C!ml
ALYac	Gen:Variant.Ursu.812863
GData	Gen:Variant.Ursu.812863
Qihoo-360	Generic/Trojan.bc9

How to remove Ursu.812863?

Ursu.812863 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X