Ransom

Ransom.Ursu.99 (B) information

Malware Removal

The Ransom.Ursu.99 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ransom.Ursu.99 (B) virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Ransom.Ursu.99 (B)?


File Info:

crc32: AF6AA080
md5: ee967aa98c8f61764243191c11856f66
name: EE967AA98C8F61764243191C11856F66.mlw
sha1: 7b928a7a8e1599ef050e8823111835e5a4b8f02d
sha256: 35d69186b9bf23e05434ff48fd7558ade536e978f801baa94b1a7cd6cd784507
sha512: fe76b479a35d3057de44262c15768e80e4979ae4bef3cf2d5422be1bfb76d3f62cc512fbe9b1f5c97e7aedf3120229e4c467b3315d69545b5849a0aa8637c217
ssdeep: 48:6r5SPbGvKHXgKE0bQO1xEyDTgegEDJ6YIGGDwqX+c8jAip9RGm6XLekTnR11O2O:oKkO1xjoq4YIGkt4ExfFsgTgRzNt
type: PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 0.0.0.0
InternalName: Start.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:
OriginalFilename: Start.exe

Ransom.Ursu.99 (B) also known as:

K7AntiVirusRiskware ( 00577f571 )
LionicTrojan.Win32.Ursu.4!c
CynetMalicious (score: 99)
ALYacGen:Variant.Ransom.Ursu.99
SangforTrojan.Win32.Wacatac.B
Cybereasonmalicious.98c8f6
CyrenW32/MSIL_Razy.U.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Riskware.KnownBe4.E.gen
APEXMalicious
AvastWin32:Malware-gen
BitDefenderGen:Variant.Ransom.Ursu.99
MicroWorld-eScanGen:Variant.Ransom.Ursu.99
TencentWin32.Trojan.Ransom.Anzi
Ad-AwareGen:Variant.Ransom.Ursu.99
McAfee-GW-EditionBehavesLike.Win32.Generic.xt
FireEyeGen:Variant.Ransom.Ursu.99
EmsisoftGen:Variant.Ransom.Ursu.99 (B)
WebrootPua.Knowbe4.Ransim
AviraHEUR/AGEN.1142779
MicrosoftProgram:Win32/Wacapew.C!ml
ArcabitTrojan.Ransom.Ursu.99
GDataGen:Variant.Ransom.Ursu.99
McAfeeArtemis!EE967AA98C8F
MAXmalware (ai score=84)
MalwarebytesRiskWare.RansomSimulator
TrendMicro-HouseCallTROJ_GEN.R002H09GR21
IkarusPUA.Generic
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Razy.41!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.Generic.HgIASZMA

How to remove Ransom.Ursu.99 (B)?

Ransom.Ursu.99 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment