Ulise.109078 removal guide

The Ulise.109078 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ulise.109078 virus can do?

Creates RWX memory
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)

Related domains:

api.xp666.com

download.xp666.com

How to determine Ulise.109078?


File Info:
crc32: 4A431880
md5: bc15f3b200e3a173a99af4869b1b52f0
name: fontviewer30_14629.exe
sha1: b62507d31a865c2c25eb672472d8c6b41ee70e2c
sha256: 1a57e562042f544c16e0f70c12982f29ec6d742604ea75e069a4a2ea4546ed7a
sha512: bed687d97dffc77eb0a340673e0e86820f6b282ea99d14514334348be80474135b16ab64e64aa9efb91e7ab8f593e16e46c3eb22e41c460d0e008c1f6a955900
ssdeep: 49152:qlesoI6Rii4uUtP+SOTx18KG9DVEafstIHEYPTJlF5Gdp:qcso14dw8KGlCafv4d
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyrightxff08Cxff092019
InternalName: FastDownload.exe
FileVersion: 2.9.2.346
OriginalFilename: FastDownload.exe
ProductVersion: 2.9.2.321
Translation: 0x0804 0x03a8

Ulise.109078 also known as:

MicroWorld-eScan	Gen:Variant.Ulise.109078
FireEye	Gen:Variant.Ulise.109078
BitDefender	Gen:Variant.Ulise.109078
Cybereason	malicious.200e3a
BitDefenderTheta	AI:Packer.C8AD9A6419
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Duote.A
Avast	Win32:TrojanX-gen [Trj]
GData	Gen:Variant.Ulise.109078
Kaspersky	HEUR:Trojan-Downloader.Win32.Agent.gen
Endgame	malicious (high confidence)
Emsisoft	Gen:Variant.Ulise.109078 (B)
McAfee-GW-Edition	BehavesLike.Win32.Dropper.wh
APEX	Malicious
Jiangmin	Trojan.Agentb.glb
Antiy-AVL	Trojan[Downloader]/Win32.Agent
Microsoft	Trojan:Win32/Wacatac.D!ml
Arcabit	Trojan.Ulise.D1AA16
ZoneAlarm	HEUR:Trojan-Downloader.Win32.Agent.gen
VBA32	TScope.Trojan.Delf
ALYac	Gen:Variant.Ulise.109078
MAX	malware (ai score=87)
Ad-Aware	Gen:Variant.Ulise.109078
Malwarebytes	Trojan.Downloader.Aspack
Ikarus	Trojan.Win32.Duote
Rising	Downloader.Agent!8.B23 (TFE:dGZlOgViazXZlOA0fQ)
SentinelOne	DFI – Suspicious PE
Fortinet	W32/Duote.A!tr
AVG	Win32:TrojanX-gen [Trj]
CrowdStrike	win/malicious_confidence_80% (D)
Qihoo-360	Generic/HEUR/QVM05.1.CE48.Malware.Gen

How to remove Ulise.109078?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Ulise.109078 removal guide