Should I remove “Ursu.775439”?

The Ursu.775439 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.775439 virus can do?

Presents an Authenticode digital signature
Anomalous binary characteristics

How to determine Ursu.775439?


File Info:
crc32: 82E02855
md5: dc9c0f393161b4df7ab42ab4b188b5d6
name: DC9C0F393161B4DF7AB42AB4B188B5D6.mlw
sha1: 910b8ef40a25fd30cbd537749a2c7cbf8ff4ec8d
sha256: 5082e4806b1ffd5ad596468a673d6ff7f24dbb5a51944e40d26717fe591a7a18
sha512: 54e057a814a90e90d4575ad4e514e66f41b9512b3a7d42a048df58564cecdc4e2d57e7c6afbbb69e6fe6f10dd4cc8be654eb2b52bfec4b134cb7200a25af5bd4
ssdeep: 12288:rRXCbwmPrXOcmFFgOkyU532WTh0tFhfa3uAwSfxL/2Dc3jDLLmt0LDQewsAjRoN:rRXDmPjO7KX53RTh0tFda3TaewsAj+
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
LegalCopyright: xa91999-2018 Jonathan Bennett & AutoIt Team
InternalName: Au3Info.exe
FileVersion: 3, 3, 14, 5
CompanyName: AutoIt Team
Comments: http://www.autoitscript.com/autoit3/
ProductName: Au3Info
ProductVersion: 3, 3, 14, 5
FileDescription: Au3Info
OriginalFilename: Au3Info.exe
Translation: 0x0809 0x04b0

Ursu.775439 also known as:

ClamAV	Win.Ransomware.WannaCry-9856297-0
ALYac	Gen:Variant.Ursu.775439
CrowdStrike	win/malicious_confidence_60% (W)
Cybereason	malicious.93161b
Cyren	W64/Ipamor.BF.gen!Eldorado
Symantec	Trojan.Gen.MBT
APEX	Malicious
Avast	Win64:Malware-gen
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Ursu.775439
MicroWorld-eScan	Gen:Variant.Ursu.775439
Ad-Aware	Gen:Variant.Ursu.775439
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	Artemis
FireEye	Generic.mg.dc9c0f393161b4df
Emsisoft	Gen:Variant.Ursu.775439 (B)
Microsoft	Trojan:Script/Phonzy.B!ml
GData	Gen:Variant.Ursu.775439
McAfee	Artemis!DC9C0F393161
MAX	malware (ai score=88)
TrendMicro-HouseCall	TROJ_GEN.R03BH0CGJ21
Ikarus	Trojan.Autoruner
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W64/Ipamor.959B!tr
AVG	Win64:Malware-gen
Qihoo-360	Win64/Trojan.Generic.H8oAsrsA

How to remove Ursu.775439?

Ursu.775439 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X