Ursu.862799 removal

The Ursu.862799 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.862799 virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

How to determine Ursu.862799?


File Info:
crc32: E4937B39
md5: 66739fd59b3437ea29bb1e5d31d6cbac
name: antilag_discord.exe
sha1: b8882a9b1f869948c7c321a9743ecd63fba136fb
sha256: 262a4dd0875b66f7e114bd5c5a7d9fa32b919a00c18c79a9e007c2e57a6e3aa7
sha512: b4889d78fa8f23ddffcda7b4c7c9124caa5da0297f20c01ba0fbc6e75205f6dfd2a28016f9dec400cda8ddd64a1376d53f2b437df67e41959db9d1f22102eff8
ssdeep: 384:9mlDGd0/cSD3u44lsNu2asOWJ3tBEjyFaAAhCrDbCVPINE2nEUi:UlS/lqu2p9IJQ62nEV
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2020
Assembly Version: 1.0.0.0
InternalName: StealerBin.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: StealerBin
ProductVersion: 1.0.0.0
FileDescription: StealerBin
OriginalFilename: StealerBin.exe

Ursu.862799 also known as:

MicroWorld-eScan	Gen:Variant.Ursu.862799
FireEye	Generic.mg.66739fd59b3437ea
McAfee	Artemis!66739FD59B34
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Password-Stealer ( 0055d1771 )
BitDefender	Gen:Variant.Ursu.862799
K7GW	Password-Stealer ( 0055d1771 )
Cybereason	malicious.b1f869
BitDefenderTheta	Gen:NN.ZemsilF.34108.bm0@aOmuHUb
F-Prot	W32/MSIL_Agent.BIL.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/PSW.Agent.RMF
APEX	Malicious
GData	Gen:Variant.Ursu.862799
Kaspersky	HEUR:Trojan-PSW.MSIL.Stealer.gen
Rising	Stealer.Agent!8.C2 (TFE:dGZlOgwjcBlMk9FZ0w)
Endgame	malicious (high confidence)
Emsisoft	Gen:Variant.Ursu.862799 (B)
F-Secure	Trojan.TR/PSW.Agent.ghwrc
Invincea	heuristic
McAfee-GW-Edition	Artemis!Trojan
Cyren	W32/MSIL_Agent.BIL.gen!Eldorado
Avira	TR/PSW.Agent.ghwrc
MAX	malware (ai score=86)
Antiy-AVL	Trojan[PSW]/MSIL.Stealer
Microsoft	PWS:MSIL/Discord.GA!MTB
Arcabit	Trojan.Ursu.DD2A4F
AhnLab-V3	Trojan/Win32.Stealer.C4089074
ZoneAlarm	HEUR:Trojan-PSW.MSIL.Stealer.gen
VBA32	TScope.Trojan.MSIL
ALYac	Gen:Variant.Ursu.862799
Ad-Aware	Gen:Variant.Ursu.862799
Malwarebytes	Spyware.PasswordStealer
Panda	Trj/GdSda.A
SentinelOne	DFI – Malicious PE
Fortinet	MSIL/Agent.RMF!tr
AVG	FileRepMalware
CrowdStrike	win/malicious_confidence_70% (D)

How to remove Ursu.862799?

Ursu.862799 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X