Should I remove “Ursu.813457”?

The Ursu.813457 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.813457 virus can do?

The binary likely contains encrypted or compressed data.
The executable is likely packed with VMProtect
Network activity detected but not expressed in API logs

How to determine Ursu.813457?


File Info:
crc32: 3C7D1392
md5: cf744b240103a45edad006bcb15b5d1e
name: Hades.exe
sha1: ec62071862321834f0e82b301f9d847125fc4f76
sha256: 5903cf25e5d4e8518e1e2068cd53ae74e52c154ac2faa91be86e42f72024212d
sha512: 9ee764aadd6d0c14fbf71626cfdf85286868bd07543e282ef2cbdbf5d2b7274ee43642a0a362e18a17e2184ace11898eaad601071ebf6b3bcec26caaa2d268ba
ssdeep: 6144:1I2K1iVfmq8cU16idHiFcBmFRJWokoJLhaXtovWabdUunP6iR:+1Geq9U1RHInWo7LhJuaeunP6
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: 
Assembly Version: 1.0.0.0
InternalName: Hades.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: Hades
ProductVersion: 1.0.0.0
FileDescription: Hades
OriginalFilename: Hades.exe

Ursu.813457 also known as:

MicroWorld-eScan	Gen:Variant.Ursu.813457
FireEye	Generic.mg.cf744b240103a45e
CAT-QuickHeal	Trojan.Wacatac
McAfee	RDN/Generic.grp
ALYac	Gen:Variant.Ursu.813457
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan ( 00563cb01 )
BitDefender	Gen:Variant.Ursu.813457
K7GW	Trojan ( 00563cb01 )
Cybereason	malicious.862321
TrendMicro	TROJ_GEN.R002C0RG520
Symantec	ML.Attribute.HighConfidence
Avast	Win32:Malware-gen
GData	Gen:Variant.Ursu.813457
AegisLab	Trojan.Win32.Ursu.4!c
Endgame	malicious (high confidence)
Emsisoft	Gen:Variant.Ursu.813457 (B)
F-Secure	Heuristic.HEUR/AGEN.1134528
Invincea	heuristic
Sophos	Mal/VMProtBad-A
Ikarus	Trojan.MSIL.Vmprotect
Avira	HEUR/AGEN.1134528
MAX	malware (ai score=86)
Antiy-AVL	Trojan/Win32.Wacatac
Arcabit	Trojan.Ursu.DC6991
Microsoft	Trojan:Win32/Tiggre!rfn
Cynet	Malicious (score: 85)
Ad-Aware	Gen:Variant.Ursu.813457
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0RG520
SentinelOne	DFI – Malicious PE
Fortinet	W32/VMProtBad.A
BitDefenderTheta	Gen:NN.ZemsilF.34132.Bu0@a0xn8gg
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_90% (W)
Qihoo-360	Generic/Trojan.a16

How to remove Ursu.813457?

Ursu.813457 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X