Ursu.909373 removal tips

The Ursu.909373 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.909373 virus can do?

Network activity detected but not expressed in API logs

How to determine Ursu.909373?


File Info:
crc32: AAB3E6FA
md5: b3f30d1cc81fa5596312bbef5586c360
name: B3F30D1CC81FA5596312BBEF5586C360.mlw
sha1: ede12a943a4cab1f3652c416645c1405fcec3fa9
sha256: f7a58b782b102c69dee0062f0e4850861e486cf47f9d879a954ac4e878997f66
sha512: cdef1ff204ef493017591339f2354649fb15d98f14e61df06f7ad1fd1377a0377ded286740cb3cfb9a60d839925325297403b877dc937e91f406a9f41fb675a2
ssdeep: 1536:81XpyZSHbOAglByPOaX/AVmFF0J5MxVoLIz:81XQASXli7AX0xVoLIz
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright:  
Assembly Version: 0.0.0.0
InternalName: bypass.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:  
OriginalFilename: bypass.exe

Ursu.909373 also known as:

Elastic	malicious (high confidence)
CAT-QuickHeal	Trojan.WacatacFC.S15903510
ALYac	Gen:Variant.Ursu.909373
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
BitDefender	Gen:Variant.Ursu.909373
Cybereason	malicious.cc81fa
Cyren	W32/MSIL_Kryptik.BWA.gen!Eldorado
ESET-NOD32	PowerShell/Rozena.FU
APEX	Malicious
MicroWorld-eScan	Gen:Variant.Ursu.909373
Ad-Aware	Gen:Variant.Ursu.909373
BitDefenderTheta	Gen:NN.ZemsilF.34236.dm0@ae1fa4e
McAfee-GW-Edition	GenericRXPV-EO!B3F30D1CC81F
FireEye	Generic.mg.b3f30d1cc81fa559
Emsisoft	Gen:Variant.Ursu.909373 (B)
SentinelOne	Static AI – Malicious PE
Arcabit	Trojan.Ursu.DDE03D
GData	Gen:Variant.Ursu.909373
AhnLab-V3	Trojan/Win32.Kryptik.C4247069
McAfee	GenericRXPV-EO!B3F30D1CC81F
MAX	malware (ai score=87)
Ikarus	Trojan.PowerShell.Agent
MaxSecure	Trojan.Malware.300983.susgen

How to remove Ursu.909373?

Ursu.909373 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X