About “Ursu.945930 (B)” infection

The Ursu.945930 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.945930 (B) virus can do?

Uses Windows utilities for basic functionality
Installs itself for autorun at Windows startup
Anomalous binary characteristics

How to determine Ursu.945930 (B)?


File Info:
crc32: B7916BCD
md5: edc0b49ce558eddeee64461c45ef24b6
name: EDC0B49CE558EDDEEE64461C45EF24B6.mlw
sha1: c10b41ffceb2a497e65752844731091be950387c
sha256: 7bf3f21aaef2b9c61c22a953257b68e372edb4850b8289724c85fc147850db5c
sha512: ec164a02fb90b0ebf0341be8942d7ba9b9f1bba8df6810ead961eb82011bdc6bb53399a87b47b290c7b9019bfa1693fc265450faa034e567dde03daf89024345
ssdeep: 3072:YxRAXEWjWXStOTeLrDFRESwU5QCpGJ2Q13eIlGuVsdhPjDOZcobEQahfNka/w63:YxqXXWCEUDoSdNpXQp+uVsbE4faa463
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Ursu.945930 (B) also known as:

Bkav	W32.AIDetect.malware2
Cynet	Malicious (score: 90)
ALYac	Gen:Variant.Ursu.945930
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
BitDefender	Gen:Variant.Ursu.945930
Cybereason	malicious.ce558e
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
MicroWorld-eScan	Gen:Variant.Ursu.945930
Ad-Aware	Gen:Variant.Ursu.945930
BitDefenderTheta	Gen:NN.ZexaF.34670.huW@aepc3Dpi
McAfee-GW-Edition	BehavesLike.Win32.Dropper.ch
FireEye	Generic.mg.edc0b49ce558edde
Emsisoft	Gen:Variant.Ursu.945930 (B)
Microsoft	Program:Win32/Wacapew.C!ml
Arcabit	Trojan.Ursu.DE6F0A
GData	Gen:Variant.Ursu.945930
McAfee	Artemis!EDC0B49CE558
MAX	malware (ai score=80)
Rising	Malware.Heuristic!ET#86% (RDMK:cmRtazopyOclmPdBhUGFsszOcDbf)
Qihoo-360	Win32/Trojan.Generic.HgIASR0A

How to remove Ursu.945930 (B)?

Ursu.945930 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X