Malware

Ulise.327840 removal tips

Malware Removal

The Ulise.327840 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Ulise.327840 virus can do?

  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Attempts to identify installed AV products by installation directory
  • Attempts to modify proxy settings

How to determine Ulise.327840?



File Info:

name: 9DE2305F200ECC1D8D16.mlw
path: /opt/CAPEv2/storage/binaries/05bd25d1760d8cf48c1ee2f13abf4fa6bbfdb5903ac6354112554f35acdf0cf4
crc32: 545B3DA6
md5: 9de2305f200ecc1d8d16bc49305194f0
sha1: 1be824d36b3e325739bf539d97c76cdbf46d2a8a
sha256: 05bd25d1760d8cf48c1ee2f13abf4fa6bbfdb5903ac6354112554f35acdf0cf4
sha512: d16cc450e53bc00ca08c1dc8d6b20cecd3ee0d3e1eb401a3d22c00f175eb439b8c90e0084f8688c0dfb48433dbe82ca0a51be2436700316b06b8ad7d1b0b64d7
ssdeep: 49152:oE7xjIoBR6TclgS5SlCemB9nkHfRdDiM7TyCyK9U72eX8k9FEROJv863Z/s5TRT8:oE7Cofe6n0DiM7oHEROJ063psTl7EH
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D6467C03B2C4943BD1BB2E3A88BF9764993B7A302E21CD5B17E4194C6E35740693D67B
sha3_384: a04301121cea0226b4a6c0c406eb3cc37d7ccbfd3ffc567868fe7cc77d200e0e564ab6e822fe382ff71ada36da8520c3
ep_bytes: 558bec83c4f0b8883c8400e88cc8bbff
timestamp: 2021-12-08 16:28:27


Version Info:

CompanyName: Sector Dingles
FileDescription: Sector Dingles
FileVersion: 1548.474.477.2552
InternalName: Sector Dingles
LegalCopyright: Sector Dingles
LegalTrademarks: Sector Dingles
OriginalFilename: Sector Dingles
ProgramID: Sector Dingles
ProductName: Sector Dingles
ProductVersion: 3424.33.2342.12
Comments: Sector Dingles
Translation: 0x0409 0x04e4

Ulise.327840 also known as:

LionicTrojan.Win32.BestaFera.7!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Ulise.327840
FireEyeGeneric.mg.9de2305f200ecc1d
McAfeeArtemis!9DE2305F200E
MalwarebytesTrojan.Crypt
K7AntiVirusTrojan-Downloader ( 0058a4281 )
BitDefenderGen:Variant.Ulise.327840
K7GWTrojan-Downloader ( 0058a4281 )
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/TrojanDownloader.Delf.DJA
Paloaltogeneric.ml
KasperskyHEUR:Trojan-Banker.Win32.BestaFera.gen
AlibabaTrojanBanker:Win32/BestaFera.cb274f3a
ViRobotTrojan.Win32.Z.Ulise.5483520
Ad-AwareGen:Variant.Ulise.327840
EmsisoftGen:Variant.Ulise.327840 (B)
TrendMicroTROJ_GEN.R002C0WLC21
McAfee-GW-EditionBehavesLike.Win32.Dropper.th
SophosMal/Generic-S
IkarusTrojan-Downloader.Win32.Banload
AviraTR/Dldr.Delf.taekn
Antiy-AVLTrojan/Generic.ASMalwS.34EA5D3
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GridinsoftTrojan.Win32.Downloader.sa
ArcabitTrojan.Ulise.D500A0
GDataGen:Variant.Ulise.327840
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Generic.C4839925
BitDefenderThetaGen:NN.ZelphiF.34084.@V0@aW1KKjik
ALYacGen:Variant.Ulise.327840
MAXmalware (ai score=89)
VBA32TScope.Trojan.Delf
CylanceUnsafe
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002C0WLC21
TencentWin32.Trojan-downloader.Delf.Hytm
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Delf.DFQ!tr.dldr
AVGWin32:Trojan-gen
AvastWin32:Trojan-gen

How to remove Ulise.327840?

Ulise.327840 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment