Ursu.96083 (B) removal tips

The Ursu.96083 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.96083 (B) virus can do?

Authenticode signature is invalid

How to determine Ursu.96083 (B)?


File Info:
name: EAAAA019759EDCA9141C.mlw
path: /opt/CAPEv2/storage/binaries/0d4f16b8a59d453bd95fe7960f0a2e925596ca86b6147c3b8435bf5f977787ad
crc32: 1129DE17
md5: eaaaa019759edca9141c6eee57a3405d
sha1: ef1d6c4482913fd6d6487f7b2e9b71cdfea01a18
sha256: 0d4f16b8a59d453bd95fe7960f0a2e925596ca86b6147c3b8435bf5f977787ad
sha512: 3d700d2232d117947e5589a1565921a342a66f327f71250bc20819cd731c8015f1e4953d58f94e211f6846a64f6168a7fc481211fb52cb4a2efd61e7cfb1eece
ssdeep: 192:SDTMpkQCuWr//Nq7RheaEGobqvjwYh+8hGs7:8MC6Wtq7HKqEYc8hG+
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1801209506BE89591D2E94BF515B303220A32ED6A9D8BD37FADDC0A2D3F137924B139D0
sha3_384: 857c0cdd29a39052549bf3cd9d88bb5f024138aa20cc5ba8a777ba60402b934e38c4eaaa32fd02c5b7207047bcb87e13
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-10-06 02:02:17

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: 
FileVersion: 1.3.0.0
InternalName: Client.exe
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: Client.exe
ProductName: 
ProductVersion: 1.3.0.0
Assembly Version: 1.3.0.0

Ursu.96083 (B) also known as:

Bkav	W32.AIDetectNet.01
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ursu.96083
ALYac	Gen:Variant.Ursu.96083
Malwarebytes	Backdoor.Bot
VIPRE	Gen:Variant.Ursu.96083
BitDefender	Gen:Variant.Ursu.96083
Cybereason	malicious.9759ed
BitDefenderTheta	Gen:NN.ZemsilF.34698.am0@a4onWyh
Symantec	ML.Attribute.HighConfidence
Cynet	Malicious (score: 100)
Rising	Trojan.Generic/MSIL@AI.100 (RDM.MSIL:9x+GxCeK9TtzFFL+gN+R3Q)
Ad-Aware	Gen:Variant.Ursu.96083
Comodo	TrojWare.MSIL.Omaneat.A@6jcu1g
SentinelOne	Static AI – Malicious PE
Trapmine	suspicious.low.ml.score
FireEye	Gen:Variant.Ursu.96083
Emsisoft	Gen:Variant.Ursu.96083 (B)
APEX	Malicious
GData	Gen:Variant.Ursu.96083
Jiangmin	Trojan.Generic.hgzhn
MAX	malware (ai score=80)
Arcabit	Trojan.Ursu.D17753
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
AhnLab-V3	Malware/Win32.RL_Generic.C3444760
Panda	Trj/GdSda.A
Ikarus	Trojan.MSIL.Agent
AVG	Win32:Evo-gen [Trj]
Avast	Win32:Evo-gen [Trj]

How to remove Ursu.96083 (B)?

Ursu.96083 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X