Categories: Malware

Should I remove “Ursu.814143”?

The Ursu.814143 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ursu.814143 virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Dynamic (imported) function loading detected
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Ursu.814143?


File Info:
name: BE6F42EFB805D06A0BDC.mlwpath: /opt/CAPEv2/storage/binaries/d64e5aeefc739c8872fcbc336b2bec96abec637bac441ba95cdb9e7aeeba16a8crc32: E4AE90D8md5: be6f42efb805d06a0bdc90d53df1d535sha1: 30e79711a9901c8969e8fff2314c9da7a66fdbddsha256: d64e5aeefc739c8872fcbc336b2bec96abec637bac441ba95cdb9e7aeeba16a8sha512: 4f3de20ee5990d4f98d49b4708f00b57b6adfabf1071a3c86c34e975fcfd45910da7c1be4428be8ff68b420a6836758002a6d755691165ca87caae9137712a7bssdeep: 12288:puxmG0dLfIT54Q8ItRsp5bu9TlLfUTdwq1CXow:pusGgLo4Q88svbuhZUTdwYwtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T13BE402217A9C7E5DC0ED2F790435052CAF3DA1DE7403AACB158C52CE6EF67304992B9Asha3_384: 199e8d87fc4106a8a2933ea5212e201cb16c19c0c77a60a16a6c442dfd9777422103aacd9c44f5814643c9f139df3699ep_bytes: ff250020400000000000000000000000timestamp: 2020-04-15 12:28:08
Version Info:
Translation: 0x0000 0x04b0Comments:  CompanyName:  FileDescription:  FileVersion: 1.0.5.3InternalName: IG Stories Downloader.exeLegalCopyright: Copyright ©  2020LegalTrademarks:  OriginalFilename: IG Stories Downloader.exeProductName:  ProductVersion: 1.0.5.3Assembly Version: 1.0.5.3

Ursu.814143 also known as:

Bkav	W32.AIDetectNet.01
MicroWorld-eScan	Gen:Variant.Ursu.814143
FireEye	Generic.mg.be6f42efb805d06a
CAT-QuickHeal	Trojan.MsilFC.S17872331
ALYac	Gen:Variant.Ursu.814143
VIPRE	Gen:Variant.Ursu.814143
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
Cyren	W32/Trojan.FBF.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.HEF
APEX	Malicious
Kaspersky	HEUR:Trojan.MSIL.Bsymem.gen
BitDefender	Gen:Variant.Ursu.814143
SUPERAntiSpyware	Trojan.Agent/Gen-Bsymem
Avast	Win32:DangerousSig [Trj]
Tencent	Malware.Win32.Gencirc.10ce04d0
Ad-Aware	Gen:Variant.Ursu.814143
TACHYON	Trojan/W32.DN-Bsymem.695824
Emsisoft	Application.Downloader (A)
Zillya	Trojan.Bsymem.Win32.1697
McAfee-GW-Edition	GenericRXKZ-JT!BE6F42EFB805
Sophos	Troj/DwnLd-AEK
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Ursu.814143
Jiangmin	Downloader.MSIL.oxt
Avira	TR/Downloader.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.5152
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 99)
McAfee	GenericRXKZ-JT!BE6F42EFB805
MAX	malware (ai score=86)
Malwarebytes	Trojan.Downloader
Rising	Trojan.Generic/MSIL@AI.95 (RDM.MSIL:6Y0wI1RBfeWA1Y+GZS60MA)
Ikarus	PUA.Downloader.InstaCom
MaxSecure	Trojan.Trojan.MSILPerseus.200157_169823
Fortinet	MSIL/Ursu.4143!tr
AVG	Win32:DangerousSig [Trj]
Cybereason	malicious.fb805d