Should I remove "Ulise.109078 (B)"?

The Ulise.109078 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ulise.109078 (B) virus can do?

Creates RWX memory
Expresses interest in specific running processes
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)

Related domains:

api.xp666.com

download.xp666.com

How to determine Ulise.109078 (B)?


File Info:
crc32: D0CD9F16
md5: e3df57091adacf39d09d49848e4ebc73
name: jkyyh2345_29924.exe
sha1: bdc4d045f7f3a953d27e345b9bc9a1bd75744689
sha256: c59bf3893540454f6a0ed8348c531ecb5ceff50e868517e5b6a9bd56ad0d4eb3
sha512: 16fb36787ea5fdd995424e1ec4829fa92faa2389b0d62cdaf964c007fe6b5a2f16e67a8ef6b83659d1a5da52ef3b5d5553aa05e5ec20e1f1ecd4cfebe706bc67
ssdeep: 49152:ylesoI6Rii4uUtP+SOTx18KG9DVEafstIHEY1TJlF57dp:ycso14dw8KGlCaflVd
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyrightxff08Cxff092019
InternalName: FastDownload.exe
FileVersion: 2.9.2.349
OriginalFilename: FastDownload.exe
ProductVersion: 2.9.2.321
Translation: 0x0804 0x03a8

Ulise.109078 (B) also known as:

MicroWorld-eScan	Gen:Variant.Ulise.109078
FireEye	Gen:Variant.Ulise.109078
K7AntiVirus	Trojan ( 0055e4261 )
BitDefender	Gen:Variant.Ulise.109078
K7GW	Trojan ( 0055e4261 )
Cybereason	malicious.91adac
BitDefenderTheta	AI:Packer.C8AD9A6419
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
GData	Gen:Variant.Ulise.109078
Kaspersky	HEUR:Trojan-Downloader.Win32.Agent.gen
Ad-Aware	Gen:Variant.Ulise.109078
McAfee-GW-Edition	BehavesLike.Win32.Dropper.wh
Emsisoft	Gen:Variant.Ulise.109078 (B)
Ikarus	Trojan.Win32.Duote
Jiangmin	Trojan.Agentb.glb
Antiy-AVL	Trojan[Downloader]/Win32.Agent
Endgame	malicious (high confidence)
Arcabit	Trojan.Ulise.D1AA16
ZoneAlarm	HEUR:Trojan-Downloader.Win32.Agent.gen
Microsoft	Trojan:Win32/Wacatac.D!ml
VBA32	TScope.Trojan.Delf
ALYac	Gen:Variant.Ulise.109078
MAX	malware (ai score=88)
Malwarebytes	Trojan.Downloader.Aspack
ESET-NOD32	a variant of Win32/Duote.A
Rising	Downloader.Agent!8.B23 (RDMK:cmRtazprRBHlRZtD7SPkqgMday5m)
SentinelOne	DFI – Suspicious PE
Fortinet	W32/Duote.A!tr
AVG	Win32:TrojanX-gen [Trj]
Avast	Win32:TrojanX-gen [Trj]
CrowdStrike	win/malicious_confidence_80% (D)
Qihoo-360	HEUR/QVM05.1.D8E8.Malware.Gen

How to remove Ulise.109078 (B)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Should I remove “Ulise.109078 (B)”?