Should I remove “Ursu.711952 (B)”?

The Ursu.711952 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.711952 (B) virus can do?

Presents an Authenticode digital signature
Anomalous binary characteristics

How to determine Ursu.711952 (B)?


File Info:
crc32: 94339734
md5: a7b07f1ac244299dddec53da7ed67ab6
name: A7B07F1AC244299DDDEC53DA7ED67AB6.mlw
sha1: 5d0020fe59c09f4838aee51bf8e7751b7e0186fa
sha256: aac7f475e45b8b398d75a2ceebf36d00b3709462be9ffbe7ca45da46097cef0f
sha512: a0f4bc8e2e0bbf3c528164ad7a9702ceb6aa95ce7da6423d5fb5ad55b002c9b333ca794d2f3ca025c5ef7631b9f30ea9b249b6beb55854dfaa7fdc3a866ec3f0
ssdeep: 12288:fSYqgNEIrEkoNLo8PT5vMRXCbw4VX86avEF8JMkK7AwSfxL/2Dc3jDLLmt0LDQeu:fHrRoNLoAaRXDmXVav9MkLaewsAjmCR
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2013
InternalName: klist
FileVersion: 7.0.450.18
Full Version: 1.7.0_45-b18
CompanyName: Oracle Corporation
ProductName: Java(TM) Platform SE 7 U45
ProductVersion: 7.0.450.18
FileDescription: Java(TM) Platform SE binary
OriginalFilename: klist.exe
Translation: 0x0000 0x04b0

Ursu.711952 (B) also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Ursu.711952
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (W)
Cybereason	malicious.ac2442
Cyren	W64/Ipamor.W.gen!Eldorado
APEX	Malicious
Avast	Win64:Malware-gen
ClamAV	Win.Ransomware.WannaCry-9856297-0
BitDefender	Gen:Variant.Ursu.711952
MicroWorld-eScan	Gen:Variant.Ursu.711952
Ad-Aware	Gen:Variant.Ursu.711952
Sophos	ML/PE-A
McAfee-GW-Edition	BehavesLike.Win64.Generic.th
FireEye	Generic.mg.a7b07f1ac244299d
Emsisoft	Gen:Variant.Ursu.711952 (B)
Avira	HEUR/AGEN.1137113
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Ursu.711952
McAfee	Artemis!A7B07F1AC244
MAX	malware (ai score=84)
Ikarus	Trojan.Win32
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Ipamor.8D09!tr
AVG	Win64:Malware-gen

How to remove Ursu.711952 (B)?

Ursu.711952 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X