Should I remove “Ulise.140697”?

The Ulise.140697 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ulise.140697 virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Ulise.140697?


File Info:
name: E09AA19F5F660F2E2EDD.mlw
path: /opt/CAPEv2/storage/binaries/6e5708e17ec3208a855044869d689ed0813d6e33953a564ae5dfd77c2b53d321
crc32: C1E041B3
md5: e09aa19f5f660f2e2edd1be76323880b
sha1: 0cc0e99d8ae9bfbc5bed37527c7c259f2df31ee2
sha256: 6e5708e17ec3208a855044869d689ed0813d6e33953a564ae5dfd77c2b53d321
sha512: e2f7e0d26c1ed8128b5f90796dfbff11fc8ee2390bd37499e56665b3de7bfb803c3eb328a972f96072f07994be9f032e16ad272645321fc20465bd3eacb97a15
ssdeep: 3072:nz7ecj6Znz2I1tQsXWMYHUcfSu8il3ws/iwf:nPeaOrQsjY0hB2
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18DD336CE918C9AA1C0D7C57AC9FE517A66B244D6FB20A50F2848D38D51FEEB075372C8
sha3_384: 68151d6a3951d4aa52f348c8f8ce5a7cabe591cd133536017de699d05db4ae8eb249b6403b92200efb57b0446f4ae54d
ep_bytes: 5589e583ec08c7042402000000ff1554
timestamp: 2012-12-29 11:22:08

Version Info:
CompanyName: 
FileVersion: 
FileDescription: 
InternalName: 
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: 
ProductName: 
ProductVersion: 
Translation: 0x041c 0x04e4

Ulise.140697 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.e09aa19f5f660f2e
CAT-QuickHeal	Trojan.Ransom.A
McAfee	Injection Dropper.B
VIPRE	Trojan.Win32.Reveton.a (v)
Sangfor	Trojan.Win32.Injector.AAQK
K7AntiVirus	Trojan ( 0040f03f1 )
Alibaba	VirTool:Win32/CeeInject.5035d476
K7GW	Trojan ( 0040f03f1 )
CrowdStrike	win/malicious_confidence_100% (W)
VirIT	Trojan.Win32.Generic.CANP
Cyren	W32/Zbot.IF.gen!Eldorado
Symantec	Trojan.Ransomlock!g41
ESET-NOD32	a variant of Win32/Injector.AAQK
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Ulise.140697
NANO-Antivirus	Trojan.Win32.Zbot.bfuovy
MicroWorld-eScan	Gen:Variant.Ulise.140697
Avast	Win32:Zbot-TMR [Cryp]
Tencent	Win32.Trojan.Ransom.Airq
Ad-Aware	Gen:Variant.Ulise.140697
Comodo	TrojWare.Win32.Injector.AAQK@4t33un
DrWeb	Trojan.PWS.Stealer.1932
Zillya	Trojan.Injector.Win32.163723
TrendMicro	TROJ_RANSOM.SMCB
Emsisoft	Gen:Variant.Ulise.140697 (B)
Ikarus	Trojan-Downloader.Win32.Andromeda
GData	Gen:Variant.Ulise.140697
Jiangmin	Trojan/Generic.arjit
Webroot	W32.Rogue.Gen
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Generic.ASMalwS.135774
Microsoft	PWS:Win32/Zbot
AhnLab-V3	Spyware/Win32.Zbot.R52346
Acronis	suspicious
ALYac	Gen:Variant.Ulise.140697
VBA32	Trojan.EA.01671
Malwarebytes	Trojan.Agent
TrendMicro-HouseCall	TROJ_RANSOM.SMCB
Rising	HackTool.CeeInject!8.B22 (CLOUD)
Yandex	Trojan.GenAsa!LODoIQMJCbI
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.4969031.susgen
Fortinet	W32/Zbot.AAU!tr
AVG	Win32:Zbot-TMR [Cryp]
Panda	Trj/Genetic.gen

How to remove Ulise.140697?

Ulise.140697 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X