Should I remove "Ursu.856557 (B)"?

The Ursu.856557 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ursu.856557 (B) virus can do?

Reads data out of its own binary image
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Ursu.856557 (B)?


File Info:
crc32: 662F6259
md5: b08496aca65fa8c58aedc08c480e1a5f
name: tmpj90kbsoh
sha1: 1ca4ad5c834db60740aef32fe5dc77772bc84d17
sha256: 28e2a9a29f7b81d622da63d7f8551aaa16a525e682c176246d8318eaac962d2d
sha512: 0e3a5f05ba3a1ececd517d465fd6c86affcb3a55856f541ba8d870b00731af272324ae3fcb65b535cce0b3506274643d003b3121b71ef6a81d7616c9ba805943
ssdeep: 49152:esK3+GmeFV/H4peIq3nF9n3HHBruqprj0tpWN/7yJgFavLJyGek0ZtGxjYe8:LzwF9n3HHxxqtps/7ewGzek0vBL
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: x53a6x95e8x83e9x63d0x5c71x7f51x7edcx79d1x6280x6709x9650x516cx53f8 Copyrightxff08cxff092019
InternalName: pdf2excel.exe
FileVersion: 1.0.0.0
CompanyName: x53a6x95e8x83e9x63d0x5c71x7f51x7edcx79d1x6280x6709x9650x516cx53f8
ProductName: PDFx732bPDFx8f6cEXCEL
ProductVersion: 1.0.0.0
FileDescription: PDFx732bPDFx8f6cEXCEL
Translation: 0x0804 0x03a8

Ursu.856557 (B) also known as:

MicroWorld-eScan	Gen:Variant.Ursu.856557
FireEye	Gen:Variant.Ursu.856557
ALYac	Gen:Variant.Ursu.856557
BitDefender	Gen:Variant.Ursu.856557
Avast	Win32:Malware-gen
GData	Gen:Variant.Ursu.856557
Ad-Aware	Gen:Variant.Ursu.856557
Emsisoft	Gen:Variant.Ursu.856557 (B)
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Generic.vc
Endgame	malicious (high confidence)
Arcabit	Trojan.Ursu.DD11ED
Microsoft	Trojan:Win32/Wacatac.C!ml
McAfee	Artemis!B08496ACA65F
MAX	malware (ai score=88)
Panda	Trj/Genetic.gen
SentinelOne	DFI – Suspicious PE
Fortinet	W32/GenericKD.33769903!tr
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_90% (D)

How to remove Ursu.856557 (B)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Should I remove “Ursu.856557 (B)”?