Ursu.815014 information

The Ursu.815014 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.815014 virus can do?

Unconventionial language used in binary resources: Russian
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs

How to determine Ursu.815014?


File Info:
crc32: E033E34D
md5: 130548590aa0ff031c9383c7b027d3c1
name: 130548590AA0FF031C9383C7B027D3C1.mlw
sha1: ec294a8ab96f30efa3a9b5d5251c580484918d77
sha256: 04ceb9f0191de488a81fd88e40f191aa611d21a9fab946aac38e7aeb7e8a472d
sha512: cf5dc1b9a0968b2f510c92f681235e896c8ab21287d351c3ba474359043e27e7e2dda9ee40b668eb58452479978660b101fdfe5463402cad2295bcee69c50d80
ssdeep: 3072:vqnS+A0t9tryfQQC2mCZMTJtPkmwO3EdKrmXs4mnV/xg/q:yrltr1TLca3Ed1S
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Ursu.815014 also known as:

ALYac	Gen:Variant.Ursu.815014
Sangfor	Suspicious.Win32.Ursu.815014
CrowdStrike	win/malicious_confidence_60% (W)
Symantec	Ransom.GlobeImposter
APEX	Malicious
Avast	Win32:Malware-gen
BitDefender	Gen:Variant.Ursu.815014
MicroWorld-eScan	Gen:Variant.Ursu.815014
BitDefenderTheta	Gen:NN.ZexaF.34692.kuW@auIrgunk
McAfee-GW-Edition	Artemis
FireEye	Gen:Variant.Ursu.815014
Emsisoft	Gen:Variant.Ursu.815014 (B)
Webroot	W32.Trojan.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.300DAC4
AegisLab	Trojan.Win32.Ursu.4!c
GData	Gen:Variant.Ursu.815014
McAfee	Artemis!130548590AA0
MAX	malware (ai score=84)
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002H09F121
Rising	Trojan.Generic@ML.81 (RDML:++oClrHuh4JjwMW/Ke/3tQ)
MaxSecure	Trojan.Malware.103941756.susgen
AVG	Win32:Malware-gen

How to remove Ursu.815014?

Ursu.815014 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X