Categories: Malware

How to remove “Ursu.8578”?

The Ursu.8578 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ursu.8578 virus can do?

Reads data out of its own binary image
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Ursu.8578?


File Info:
crc32: B0E8AA0Cmd5: 5477a54bd3636ac9d586d3346c5e1c28name: 5477A54BD3636AC9D586D3346C5E1C28.mlwsha1: 5b57fdd501a63c5f50c1268bfa645e475a7459a8sha256: 1df0175fc33a94efef739ad712e49417446fe98eb2848a6c60233c8e1e81db95sha512: 31ee05ad165c293bb1513512d7686ad63c7b94a02f1ec3a0baebc3121500ed80d279abab3a0553e045f70278769d4ddce60eaf9de0c1c39c0edbd2a30b2b3babssdeep: 768:n48Yrt9l9l7gubquo4DgKuChPiL6VYqJ/GDpsuGputlYVxouGjsylcON75b7avOa:jYrPlD71Ouo4B6JqUtsuGpjku+yONlitype: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Version Info:
LegalCopyright: ColdCreekProd. All rights reserved.InternalName: ColdCreekInstallerFileVersion: 3.1.0.1CompanyName: ColdCreekProdComments: Files installerProductName: Free files installerProductVersion: 3.1.0.1FileDescription: Free files installerTranslation: 0x0409 0x04b0

Ursu.8578 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan-Downloader ( 00518e881 )
Lionic	Trojan.Win32.Tovkater.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Ursu.8578
Cylance	Unsafe
Sangfor	Trojan.Win32.Tovkater.gen
Alibaba	TrojanDownloader:Win32/Tovkater.895f46dd
K7GW	Trojan-Downloader ( 00518e881 )
Cybereason	malicious.bd3636
Symantec	Trojan.Gen.2
ESET-NOD32	Win32/TrojanDownloader.Tovkater.EX
APEX	Malicious
Avast	Win32:Adware-gen [Adw]
Kaspersky	HEUR:Trojan-Downloader.Win32.Tovkater.gen
BitDefender	Gen:Variant.Ursu.8578
MicroWorld-eScan	Gen:Variant.Ursu.8578
Tencent	Win32.Trojan-downloader.Tovkater.Suxr
Ad-Aware	Gen:Variant.Ursu.8578
Sophos	Generic ML PUA (PUA)
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Downloader.kc
FireEye	Generic.mg.5477a54bd3636ac9
Emsisoft	Application.Downloader (A)
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Occamy.C
GData	Gen:Variant.Ursu.8578
AhnLab-V3	PUP/Win32.BundleInstaller.R209982
Acronis	suspicious
McAfee	Artemis!5477A54BD363
MAX	malware (ai score=95)
VBA32	TrojanDownloader.Tovkater
Malwarebytes	Adware.InstallMonster
Panda	Trj/Genetic.gen
Yandex	Trojan.DL.Tovkater!KcYoe/d37Tk
Ikarus	Trojan-Downloader.Win32.Tovkater
AVG	Win32:Adware-gen [Adw]
Paloalto	generic.ml