Ursu.857800 information

The Ursu.857800 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.857800 virus can do?

How to determine Ursu.857800?


File Info:
crc32: A40F38E9
md5: 96d0d03ad201495ee254743b80d81ac1
name: 96D0D03AD201495EE254743B80D81AC1.mlw
sha1: b1ec66c033bb174279940776e305bae7f944d533
sha256: 8c8a901bd970d10c65f41ed5e07be9c07750b704b3560ea228d95929bfcdc759
sha512: ff50fada7b1d29b7cb931f563e9c9d085f401a21b3a434a554c212ba57cd0da083ebed80a80909cbcf9bbb72f3da9925816ac5e15e374db06317ed77a371df68
ssdeep: 1536:EHXxIpI2Ki8aEjityOVM3NEn4EPKo5+5MfPaLfzL2dfCHEs:mXypI2z82S3NgXK94PaLfv2da7
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2016
Assembly Version: 1.0.0.0
InternalName: hallajrmdnewhost.exe
FileVersion: 1.0.0.0
ProductName: hallajrmdnewhost
ProductVersion: 1.0.0.0
FileDescription: hallajrmdnewhost
OriginalFilename: hallajrmdnewhost.exe

Ursu.857800 also known as:

K7AntiVirus	Trojan ( 700000121 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 85)
ALYac	Gen:Variant.Ursu.857800
Cylance	Unsafe
Zillya	Trojan.Blocker.Win32.37021
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Ransom:Win32/Blocker.462ef5d1
K7GW	Trojan ( 700000121 )
Cybereason	malicious.ad2014
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/Kryptik.GKV
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Ransom.Win32.Blocker.jhlq
BitDefender	Gen:Variant.Ursu.857800
NANO-Antivirus	Trojan.Win32.Kryptik.elgkab
MicroWorld-eScan	Gen:Variant.Ursu.857800
Tencent	Win32.Trojan.Blocker.Hvsq
Ad-Aware	Gen:Variant.Ursu.857800
Sophos	Mal/Generic-S
Comodo	Malware@#23tcxkrybmqx3
BitDefenderTheta	Gen:NN.ZemsilF.34608.eq0@aSGmntc
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.96d0d03ad201495e
Emsisoft	Gen:Variant.Ursu.857800 (B)
SentinelOne	Static AI – Malicious PE
Webroot	none
Avira	HEUR/AGEN.1130636
eGambit	Unsafe.AI_Score_99%
Kingsoft	Win32.Troj.GenericKD.v.(kcloud)
Microsoft	Backdoor:MSIL/Bladabindi
Arcabit	Trojan.Ursu.DD16C8
AegisLab	Trojan.Win32.Blocker.j!c
GData	Gen:Variant.Ursu.857800
TACHYON	Ransom/W32.DN-Blocker.78336.B
AhnLab-V3	Trojan/Win32.RL_Zapchast.C4092683
McAfee	Artemis!96D0D03AD201
MAX	malware (ai score=80)
VBA32	TScope.Trojan.MSIL
Panda	Trj/GdSda.A
Rising	Ransom.Blocker!8.12A (CLOUD)
Yandex	Trojan.Kryptik!+v+qkQh30HU
Ikarus	Trojan.MSIL.Crypt
Fortinet	MSIL/Kryptik.GVM!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Blocker.HwMA2JsA

How to remove Ursu.857800?

Ursu.857800 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X