Application.Ursu.324311 (B) removal

The Application.Ursu.324311 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Application.Ursu.324311 (B) virus can do?

Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine Application.Ursu.324311 (B)?


File Info:
crc32: AE1B8D5F
md5: 753cffb59fd67226f0bc67f07f39a722
name: 753CFFB59FD67226F0BC67F07F39A722.mlw
sha1: 9ff428579a835c3723fd96dd8fc96eb730fdd3b5
sha256: 803c51730a4cfef480d3d8b1a859a3efb8dd4b87850910fdfada55cbef2e61f4
sha512: a75db793ce67b131edbae8f6e913f0eb22dc68a39794ff10e5223d9d897c4365e72b62359a205b903b41bda40a91402bd5c40e3f92a47945fa4d3c0f3c0161a8
ssdeep: 3072:FAe+3aJpgWXTBuundILLBR1oEuU2psHh5TpbNSF8Zvl9934EVj96thQctL+lKreb:CB+pgUDuSEIOHh1X9934i96tRaUfg6ap
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
LegalCopyright: (c) 2018 Springtech Ltd
FileVersion: 2.29.0.28
CompanyName: Springtech Ltd
ProductName: Desktop Search Bar
ProductVersion: 2.29.0.28
FileDescription: Desktop web search
OriginalFilename: SBInstaller
Translation: 0x0409 0x0000

Application.Ursu.324311 (B) also known as:

K7AntiVirus	Riskware ( 0040eff71 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Application.Ursu.324311
Cylance	Unsafe
Zillya	Adware.WebSearch.Win32.276
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	Ransom:Win32/Blocker.18faa6d1
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.59fd67
Symantec	PUA.BrowserIO
APEX	Malicious
Avast	Win32:Adware-gen [Adw]
ClamAV	Win.Trojan.Generic-6931301-0
Kaspersky	HEUR:Trojan-Ransom.Win32.Blocker.gen
BitDefender	Gen:Variant.Application.Ursu.324311
SUPERAntiSpyware	PUP.SpringTechWebBar/Variant
MicroWorld-eScan	Gen:Variant.Application.Ursu.324311
Tencent	Win32.Trojan.Blocker.Afro
Ad-Aware	Gen:Variant.Application.Ursu.324311
Sophos	BrowserIO (PUA)
Comodo	Application.Win32.BrowserIO.CA@7vd4ia
McAfee-GW-Edition	BehavesLike.Win32.Browser.dc
FireEye	Generic.mg.753cffb59fd67226
Emsisoft	Gen:Variant.Application.Ursu.324311 (B)
Microsoft	Program:Win32/Wacapew.C!ml
Arcabit	Trojan.Application.Ursu.D4F2D7
ZoneAlarm	HEUR:Trojan-Ransom.Win32.Blocker.gen
GData	Gen:Variant.Application.Ursu.324311
AhnLab-V3	PUP/Win32.WebToolbar.R237738
Acronis	suspicious
McAfee	Artemis!753CFFB59FD6
MAX	malware (ai score=100)
VBA32	TrojanRansom.Blocker
Malwarebytes	PUP.Optional.Spigot
Panda	Trj/CI.A
Yandex	PUA.Spigot!aUasPA1KISQ
AVG	Win32:Adware-gen [Adw]
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Ransom.ed7

How to remove Application.Ursu.324311 (B)?

Application.Ursu.324311 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X