Malware

Ursu.826109 (file analysis)

Malware Removal

The Ursu.826109 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ursu.826109 virus can do?

  • The binary likely contains encrypted or compressed data.

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Ursu.826109?


File Info:

crc32: E695C675
md5: 0136d53f04da3f9fa467e527d7bd8afe
name: hikevin.exe
sha1: cc7aebd1ec488e4650a894c9030ce24345310121
sha256: e17137591d5ad7cb4ac591aff030092555704f8efb71492d93921f79242f7375
sha512: 3af9603b3b72684d2701ed19baaee6ee037436c6f7df8cb384a1d193d97b58468e4768489d56a9a7ea5e40be572560f41967a512e8c5ec6f9c6d05e0c0f65828
ssdeep: 24576:qo+7QFatmY579SANxUoQ0bRitZqxXhCmpQhnWyuNk4+e45El44ATJvuB8/kfDCQ:qod6Q0F+qxsGk4+e4Gl4ZTJWBukfDKr
type: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

0: [No Data]

Ursu.826109 also known as:

MicroWorld-eScanGen:Variant.Ursu.826109
FireEyeGen:Variant.Ursu.826109
CAT-QuickHealTrojanDownloader.Paph
Qihoo-360Win32/Trojan.Downloader.461
CylanceUnsafe
BitDefenderGen:Variant.Ursu.826109
K7GWRiskware ( 0040eff71 )
K7AntiVirusRiskware ( 0040eff71 )
TrendMicroTROJ_GEN.R002C0WEV20
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Malware-gen
GDataGen:Variant.Ursu.826109
KasperskyTrojan-Downloader.Win32.Paph.jtb
AlibabaTrojanDownloader:Win32/Generic.f28b8fee
AegisLabTrojan.Win32.Paph.a!c
TencentWin32.Trojan-downloader.Paph.Bnq
SophosMal/Generic-S
EmsisoftGen:Variant.Ursu.826109 (B)
IkarusTrojan.Crypt
JiangminTrojanDownloader.Paph.nx
ArcabitTrojan.Ursu.DC9AFD
ZoneAlarmTrojan-Downloader.Win32.Paph.jtb
MicrosoftTrojan:Win32/Wacatac.C!ml
Acronissuspicious
ALYacGen:Variant.Ursu.826109
MAXmalware (ai score=86)
Ad-AwareGen:Variant.Ursu.826109
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002C0WEV20
RisingDownloader.Paph!8.58D0 (CLOUD)
FortinetW32/Paph.JTB!tr.dldr
AVGWin32:Malware-gen

How to remove Ursu.826109?

Ursu.826109 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment