Malware

Ulise.103721 removal guide

Malware Removal

The Ulise.103721 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ulise.103721 virus can do?

  • Drops a binary and executes it
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Steals private information from local Internet browsers
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself

Related domains:

ip-api.com
www.facebook.com
hfuie32.2ihsfa.com

How to determine Ulise.103721?


File Info:

crc32: 0E84D9C3
md5: 6fadde63fc48baf3a12057a848512597
name: huesaa.exe
sha1: 98fcbbd05066b07b8b55ba3bcdbad921f29222ed
sha256: 99c13cd30613fc85de0d3f0de0f43aa89e4f73cfcbc152bff72c97bfaa670b98
sha512: 7415469e6c8dce932ad21906e4df65b0c44d030fc2e600b0b1e8685d06ecffbb2232e6f9daa4a04b1ae3f4f68cfc53bdbea80e9743281ceaa9e12b4d477efcdd
ssdeep: 24576:a2FinwXSPtxxo/nwBMieNDCh9MGmzjZnjJIexOLNTNkdBAnZyauvw:7FBSPtOn2Zjh9MGmzjZnjJIexOLjkUE
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Ulise.103721 also known as:

BkavW32.FamVT.DinwodLA.Trojan
DrWebTrojan.DownLoader33.20951
MicroWorld-eScanGen:Variant.Ulise.103721
FireEyeGeneric.mg.6fadde63fc48baf3
ALYacGen:Variant.Ulise.103721
MalwarebytesTrojan.Downloader
VIPRETrojan.Win32.Generic!BT
K7AntiVirusTrojan ( 003e21f71 )
BitDefenderGen:Variant.Ulise.103721
K7GWTrojan ( 003e21f71 )
Cybereasonmalicious.3fc48b
BitDefenderThetaGen:NN.ZexaF.34104.1uW@a8kPFInj
SymantecML.Attribute.HighConfidence
TrendMicro-HouseCallTROJ_GEN.R01FH0CCT20
AvastWin32:Dh-A [Heur]
GDataGen:Variant.Ulise.103721
KasperskyHEUR:Trojan-Dropper.Win32.Dinwod.vho
AlibabaTrojanDropper:Win32/Dinwod.71bc0a70
AegisLabTrojan.Win32.Dinwod.b!c
TencentWin32.Trojan-dropper.Dinwod.Wtej
Ad-AwareGen:Variant.Ulise.103721
SophosMal/Generic-S
F-SecureTrojan.TR/Agent.gpdbi
ZillyaTrojan.Dinwod.Win32.12
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.PUPXBV.ch
Trapminemalicious.high.ml.score
EmsisoftGen:Variant.Ulise.103721 (B)
IkarusTrojan-Downloader.Win32.Agent
JiangminTrojanDropper.Dinwod.bhw
AviraTR/Agent.gpdbi
Antiy-AVLTrojan/Win32.Wacatac
Endgamemalicious (high confidence)
ArcabitTrojan.Ulise.D19529
ZoneAlarmHEUR:Trojan-Dropper.Win32.Dinwod.vho
MicrosoftTrojan:Win32/Occamy.C
Acronissuspicious
McAfeeArtemis!6FADDE63FC48
MAXmalware (ai score=81)
VBA32BScope.Trojan.Wacatac
PandaTrj/CI.A
APEXMalicious
ESET-NOD32a variant of Win32/Agent.UAW
RisingDropper.Dinwod!8.3BD (TFE:5:raI8tEZ2EEI)
YandexTrojan.Agent!9zLggYhSzgs
SentinelOneDFI – Malicious PE
FortinetW32/Dinwod.UAW!tr
AVGFileRepMalware
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_80% (W)
Qihoo-360Win32/Trojan.Dropper.f2e

How to remove Ulise.103721?

Ulise.103721 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment