Ulise.147019 malicious file

The Ulise.147019 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ulise.147019 virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Ulise.147019?


File Info:
name: D887CAA311525E763C3F.mlw
path: /opt/CAPEv2/storage/binaries/4d4e590bed24db8a7c36e0cc5a90545189edb6209d87d78565ce1431901d4a86
crc32: FCC67E2A
md5: d887caa311525e763c3f5aa75bfc16c7
sha1: 993de7a0ff7966275c87f13f22a5465bcf418bdf
sha256: 4d4e590bed24db8a7c36e0cc5a90545189edb6209d87d78565ce1431901d4a86
sha512: 1d4faf51000646bc259e78d64dcd29472c7611989941ce176aebf60cb082a205bf2785461b08993c0c0d6963554ffdc7e2d04928ca8a9aaa9ac9da742bc27761
ssdeep: 24576:1nWqJryHn+cDum9311Eu9sjpoHBzujz7f:NHNun+ciqlmui+zujz7f
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E70501033C838A3BE1AE4D7061B25A634779FEB00911396FB39C7E7E7A70ED41246659
sha3_384: e58c20f5401002dd84be7a998775ed077ccededd7b14583506e79d945c18fa04a56f803dc04bc6ecc3852bc8db2fd38f
ep_bytes: 558bec6aff68f054410068e8f2400064
timestamp: 2008-01-10 01:52:16

Version Info:
Comments: 2007.10.31 17:37 sg_dl.exe
CompanyName: Tencent Technology (Shenzhen) Company Limited
FileDescription: QQSG Download Tool
FileVersion: 1, 0, 2, 0
InternalName: QQSG Download Tool
LegalCopyright: Copyright(C) 1998 - 2005 TENCENT Inc. All Rights Reserved.
LegalTrademarks: 
OriginalFilename: SG_DL.exe
PrivateBuild: 
ProductName: QQSG Download Tool
ProductVersion: 1, 0, 2, 0
SpecialBuild: 
Translation: 0x0804 0x04b0

Ulise.147019 also known as:

DrWeb	Trojan.DownLoader13.39636
FireEye	Gen:Variant.Ulise.147019
McAfee	Artemis!D887CAA31152
K7AntiVirus	Trojan ( 0055e3dd1 )
K7GW	Trojan ( 0055e3dd1 )
Cybereason	malicious.311525
VirIT	Trojan.Win32.Agent3.CHZS
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of Win32/Agent.OEO
APEX	Malicious
Cynet	Malicious (score: 99)
BitDefender	Gen:Variant.Ulise.147019
MicroWorld-eScan	Gen:Variant.Ulise.147019
Avast	Win32:Malware-gen
Tencent	Malware.Win32.Gencirc.114fc364
F-Secure	Heuristic.HEUR/AGEN.1343637
VIPRE	Gen:Variant.Ulise.147019
McAfee-GW-Edition	BehavesLike.Win32.BadFile.cc
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Variant.Ulise.147019 (B)
Ikarus	Trojan.Agent4
GData	Gen:Variant.Ulise.147019
Avira	HEUR/AGEN.1343637
Arcabit	Trojan.Ulise.D23E4B
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
ALYac	Gen:Variant.Ulise.147019
MAX	malware (ai score=85)
Rising	Trojan.Generic@AI.100 (RDML:w3jYD5yJsmqAkEU+IXnlpA)
Yandex	Trojan.GenAsa!aHLTlVGuVu8
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_90% (D)

How to remove Ulise.147019?

Ulise.147019 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X