Ursu.695537 (B) removal tips

The Ursu.695537 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.695537 (B) virus can do?

Presents an Authenticode digital signature
Anomalous binary characteristics

How to determine Ursu.695537 (B)?


File Info:
crc32: B0B6A1A3
md5: 236831b3d1c855f1d76f0027fe914287
name: 236831B3D1C855F1D76F0027FE914287.mlw
sha1: 56d583f7038136a6982fc3ea1b48acb0ee5fe882
sha256: 209b5d9f386c249ace20a531ed3c564e168e1325ba2e076cd6e47b04afe2f299
sha512: 36fd54dbbe7a8a2b0b1a5a925b4117b1b1cab332fe26e82210c8c67e473c6b5dcbdeceee62d85efce380acc0e14dbb9ff7b739c76f3a2387d060a13448bc9a2a
ssdeep: 24576:WhPjO7KX53RTh0tFda3JVsNBM/9/fwK/FTwfCBM0VZeg1rHs:KrOO53RTqtiLsNBk9/fw2BwfmM0f0
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2013
InternalName: java-rmi
FileVersion: 7.0.450.18
Full Version: 1.7.0_45-b18
CompanyName: Oracle Corporation
ProductName: Java(TM) Platform SE 7 U45
ProductVersion: 7.0.450.18
FileDescription: Java(TM) Platform SE binary
OriginalFilename: java-rmi.exe
Translation: 0x0000 0x04b0

Ursu.695537 (B) also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Ursu.695537
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.3d1c85
Cyren	W64/Ipamor.W.gen!Eldorado
APEX	Malicious
Avast	Win64:Malware-gen
ClamAV	Win.Trojan.Blackie-9865437-0
BitDefender	Gen:Variant.Ursu.695537
MicroWorld-eScan	Gen:Variant.Ursu.695537
Ad-Aware	Gen:Variant.Ursu.695537
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win64.Generic.vt
FireEye	Generic.mg.236831b3d1c855f1
Emsisoft	Gen:Variant.Ursu.695537 (B)
SentinelOne	Static AI – Malicious PE
Antiy-AVL	Trojan/Generic.ASBOL.C6AF
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Arcabit	Trojan.Ursu.DA9CF1
GData	Gen:Variant.Ursu.695537
McAfee	Artemis!236831B3D1C8
MAX	malware (ai score=85)
TrendMicro-HouseCall	TROJ_GEN.R03BH0CKC21
Ikarus	Trojan.Agent
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W64/Agent.FBB1!tr
AVG	Win64:Malware-gen

How to remove Ursu.695537 (B)?

Ursu.695537 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X